saw this post today. any validity to their claim? https://memo.cash/post/417c6e57342cf1100b6edab7e6bff418c8da3bcb400c5a58e4843fa4236eeede
There was a bug early on that occasionally had session token collision. No passwords or keys were exposed and it was quickly patched.