An interesting cryptography bug found in 2013 in #telegram MTproto that was just screaming "backdoor" by its looks
https://buttondown.email/cryptography-dispatches/archive/cryptography-dispatches-the-most-backdoor-looking/