The hack exploited three distinct bugs in Facebook's "View As" feature, which allowed users to see how their profiles appeared to others. The attackers took advantage of these vulnerabilities to steal digital keys known as "access tokens" from the accounts of individuals whose profiles appeared in searches using the "View As" feature.
