Flaw Lets Attackers Bypass PayPal Two-Factor AuthenticationThere's a vulnerability in the way that PayPal handles certain requests from mobile clients that can allow an attacker to bypass the two-factor authentication mechanism for the service and transfer money from a victim's account to any recipient he chooses.
Source:
Flaw Lets Attackers Bypass PayPal Two-Factor Authentication