the attack was to an api endpoint. which is queried via xhr on the main app. adding captcha to it would break the app to all users. the developers are now work

the attack was to an api endpoint. which is queried via xhr on the main app. adding captcha to it would break the app to all users. the developers are now working on adding captcha at the application level and also signing the api endpoints.