Y Combinator was scoring over 100,000 founders globally through Paxel, which had a vulnerability allowing score forgery due to an unvalidated HMAC. After disclosing the issue, Y Combinator quickly patched it and invited the hacker to attend Startup School in San Francisco.