More about the bug will be disclosed if the Backed.finance team does not reply to bitcointalk community.
If you really care about Backed Finance investors and want to prevent them from losing the money, why don't you provide the negligence evidence right now, instead of waiting for them to reply?
Or are you maybe one of those bug hunters that are spamming projects with vulnerability reports and then asking for payment?
edit: now I see that 5 days ago you threatened them to expose their vulnerability. They ignored your demand, 4 days passed since the deadline and vulnerability not disclosed yet. I might be wrong but to me this looks like a feeble attempt to get paid for that report.
We are waiting for one more day and we will disclosure the vulnerability in public as backed.finance remain to be silent on the vulnerability issue.