Telegram protocol defeated. Authors are going to modify crypto-algorithm

That didn't take long.

Demoralized twice, first for finding a flaw, second for not giving the prize.

Excruciating evidence that supports Moxie's position.

Vuln rewards should exist for two purposes:

1)An act of good faith on the part of the developer that says "I am interested in securing my product and I won't prosecute direct disclosure"

2) The Dev knows exploitable vuln discovery has value, but cannot compete with black market pricing. Instead, the reward is a token of appreciation for a shared code of ethics.

I wish bug bounties could compete with the budgets of nation states. They can't.

Companies shouldn't pretend to compete. Shame on telegram for stupidly false promises.

Well nice knowing you Telegram. I don't see a good way for them to recover from this. First the bogus contest that Moxie debunked. Now this. The best option is to close shop, open a new company, new names and do something else.

The best part is that the debunker wrote this in Russian. The language barrier has probably been responsible for them getting so many users. So now everyone is very clear that Telegram is snakeoil.