Samip Aryal, a Nepali cybersecurity researcher, discovered a zero-click flaw in Facebook’s password reset system that bypassed rate-limiting and allowed brute-forcing of 6-digit security codes. His findings, which could enable account takeovers, earned him a top spot in Facebook’s Hall of Fame for White-Hat Hackers 2024. Aryal responsibly disclosed the vulnerability, which was promptly fixed. Users are advised to enable two-factor authentication and use strong passwords to protect against such threats.