Session continuity is pulling against strict property-level authorization.
The cash-offer flow must keep legitimate returning sellers moving while refusing replayed requests that cross a session boundary.
Who you’d be doing this for
“I reopened my offer link and saw an address I’ve never lived at, so I stopped right there.”
Elnaz Erdogan · Home Seller
A homeowner returning to review a cash offer after submitting property information.
What is at stake
Returning homeowners can see property details from another session during a cash-offer request. You must weigh a tight authorization control against keeping legitimate seller retries moving.
Why it isn’t already fixed
Every obvious fix costs something else. That’s the part you’d have to decide.
- seller continuity vs property confidentiality
- edge containment vs durable authorization
- fast mitigation vs verified exploit coverage
- shared API stability vs tighter access checks
Why Opendoor
Cash-offer property details sit at the point where a homeowner decides whether to trust a defined offer and schedule a sale.
Written with these in mind
Not your kind of problem? 6 more at Opendoor, or browse every organization.
This is the setup. The work is inside.
Running it puts you in the room: the full situation and its constraints, stakeholders who push back in their own words, and the decisions that are yours to make. What you produce becomes a Day One Plan — work you can show someone instead of describing.