RAT-YOU-2026Referrals reward you when someone else uses your code. The server never checks that the referrer and referee are different people, so entering your own code pays out — every time. A reversible-action / self-referral farm.
This endpoint asks for a 4-digit OTP but applies no throttle and no lockout — you can try every code. Guess it (or just hammer it) and note that the server never slows you down.