API Bug in OAuth dev tool opened websites, apps to account hijacking

Critical flaw in the Expo framework that allowed them to take over user accounts via the Open Authorization (OAuth) protocol. 

Article Link: API Bug in OAuth dev tool opened websites, apps to account hijacking | SC Media