I haven&#x27;t found it in the code yet, but the landing page&#x27;s protocol diagram with optional &quot;&#x2F;auth&#x2F;verify&quot; might have potential to be abused as a decryption oracle. It depends how they check the nonce.