[Bug Bounty] Blockchain.com exchange 2fa could be turned off without reauthenticating. HackerOne.com claimed that's how it was supposed to work, but Blockchain.com fixed it. I was refused a bug bounty and then later offered $50.