#Authentication — w4nn4d13

Jul 29, 2026

OTP Rate Limit Bypass via Email Case Normalization

How inconsistent email normalization between the rate limiter and delivery logic allows unlimited OTP requests — a classic normalization-mismatch bug.

Web Application Security

FEATURED