Coinbase's 250.000 USD bug bounty

It seems like a rather... fundamental bug? As in, a "not doing any validation, just passing the API request straight to the DB" bug?

Thread link: https://threadreaderapp.com/thread/1495014902582362112.html