An API security vulnerability discovered in a FinTech platform could have allowed administrative account takeover (ATO), according to Salt Security.
https://www.securitymagazine.com/articles/97403-api-security-vulnerability-in-fintech-platform-could-have-enabled-account-takeover