It suggests it was this one: https://hackerone.com/reports/1439026 https://hackerone.com/reports/1439026 "Today, Twitter has confirmed that the vulnerability u

It suggests it was this one: https://hackerone.com/reports/1439026 https://hackerone.com/reports/1439026 "Today, Twitter has confirmed that the vulnerability used by the threat actor in December is the same one reported to and fixed by them in January 2022 as part of their HackerOne bug bounty program."