Severe vulnerabilities in the Zenly app risked users’ privacy as the app exposed phone numbers and allowed account takeovers. In the worst-case the bugs would lead to a massive wave of phishing attacks.