Hey Torii, Show Me Everything
All issues were responsibly reported to eToro through Bugcrowd and have been acknowledged. I wasn’t hunting for AI bugs. I was testing eToro’s trading platform — IDOR on portfolio endpoints, parameter tampering, the usual. Then I noticed the little chat bubble in the corner. Torii, eToro’s AI assistant. It could answer questions about your portfolio, show balances, explain market trends. An AI chatbot on a financial platform. Connected to user data. With tool access. I had to look closer. ...