We have published report on, now fixed, vulnerability we found in Qtum a few months ago: Qtum – Bypassing Header Spam Protection