What about responsibly disclosing the bug you found with steps to reproduce, the impact and the solution? As long as you only timed out the backend without entirely crashing it, I can&#x27;t imagine any sane company would prosecute you for trying to improve their service with this level of detail.