Thanks a lot bro! Only reason I'm stopping myself from calling them out in public is because of their bug bounty program policies. I don't want to break the NDA, or else I would have happily included the name. I was not sure about getting paid for this one, as they had stopped replying to me.