$40k bounty for complete read access to any customer database using the "public" networking access.

Caused by a bad regexp in the authentication mechanism acting as the first security layer, and lack of network-level inter-tenant isolation as a second layer of security.