5m 30s An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part. The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the…