Not sure why they author wants to tell the world xxx org had a business logic vulnerability and I found it. The rest was OK, but why the need to talk about that type of vulnerability? It's a one-off. Also, making the existence of it public might draw others to their site looking for more.