Brutecat, a researcher, discovered a critical bug that allows access to the private emails of any YouTube channel.YouTube awarded Brutecat a $10,000 bounty for finding the bug.The bug involves leaking Google account IDs on YouTube, particularly through the blocklist and live chat context menus.The solution proposed is for YouTube to secure backend services and ensure Gaia IDs are not available through these APIs.