---
title: "Comment by Shubham SRT on \"$9240 Bounty in 30 days Hunt Challenge\" | Hashnode"
description: "In "2FA bypass with GrantAccess" If an attacker sends the invitation to victim.m@gmail.com . The invitation mail will still be delivered to victim@gma"
url: "https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/657fa8dac6ef1959c3435058"
---

[Discussion](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18)

Comment [$9240 Bounty in 30 days Hunt Challenge](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18)

[Shubham SRT](https://hashnode.com/@shubhamsrt)

[Dec 18, 2023](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/657fa8dac6ef1959c3435058)

In "2FA bypass with GrantAccess" If an attacker sends the invitation to victim.m@gmail.com . The invitation mail will still be delivered to victim@gmail.com right? So how is the attacker able to access that link?