It is kind of strange I received a reply from the support team and they said that it's okay to have that vulnerability as per their CTO.
I replied to them and asked if that is the case then is it ok to reveal the vulnerability in public?? Will wait for 2 days to hear from them before releasing the vulnerabilities to the public.
@Backed.Finance please reply to the mail, Thank you.
At least you received an answer and team know about it. They know what to do because they created this platform.
Maybe it's not a bug but a feature

I see they are actively developing and have a lot promotion. Lets check what they will do and how they will develop.
Now Backed Finance is actively developing and have a lot of promotion.
Promotion always attract attention. Platform must be safe that is why many projects pass audit to prove that they are safe.