On October 10, Wang Sicong posted on Weibo that his public comment was changed to his mobile phone number. At the same time, Wang Sicong also asked @众 comment, “Is this the security system of a trillion-dollar company?” 
Blogger@轩宁轩Sir comment screenshot
October 11, blog The host @轩宁轩Sir broke the news that Meituan has security vulnerabilities. As long as you get the phone number and birthday of your account, you can modify the bound mobile phone number, and then you can see various Meituan orders, drug orders, and room opening orders. , Home address and other private information. The blogger said: “Wang Sicong’s account may have been stolen because of this.” According to the video provided by the blogger, the Meituan APP can indeed fill in the ID card. With the 8-digit birthday number and new mobile phone number, you can easily change your mobile phone number. The blogger said that the whole process was smooth and flowing, like exploring the capsule and fetching things. 
“Before Meituan was a takeaway It doesn’t matter if the account is leaked; Meituan is now a necessities of life, eating, drinking, having fun, and even looking at pathological wealth in Meituan, the account system has such a big loophole, it is too dangerous.” Later, the blogger left a message in the comment area. say. 
The reporter tested the function of changing the mobile phone number on the spot, and found that Meituan has adjusted its strategy. Support for “users who have modified their mobile phone numbers in the last 6 months” to change to a new mobile phone number
On the same day, the news reporter tested the function of changing mobile phone numbers and found that Meituan had urgently adjusted its strategy and only supported “changes in the last 6 months” “Users who have had a mobile phone number” change to a new mobile phone number. In this regard, some netizens said that just such a modification is somewhat out of the functional essence. “Originally, it was set up for the sudden change of the mobile phone number, and the original number could not be used. It must have been more than 6 months, and it must be changed to a complete ID number + manual verification.almost. “Netizens suggested that Meituan still needs to continue to optimize and completely fix the loopholes.