Misleading title - the $10k is the bug bounty reward.

Still, impressive writeup. Shows how chaining a few reverse engineered endpoints can generate created a significant exploit.