Alright, i went back and saw it. feature has been disabled and i've started a bug/vuln bounty. thanks
Your bounty relies on the honesty of those who either find it or know about it. The hacker that finds the exploit is going to administrate his own bounty.