"The researcher found it’s possible to retrieve a specific user’s private key by simply plugging their user ID into TeleGuard’s API. "