PayPal previously refused to acknowledge a 2FA bypass vulnerability submitted to their HackerOne program.

https://cybernews.com/security/we-found-6-critical-paypal-vu...