The attack required a specific sequence of actions to succeed, which limited its real-world viability:
After researchers disclosed the bug in June 2022, Proton developed and deployed a fix by early July 2022.
Proton maintained its commitment to security through its Responsible Vulnerability Disclosure Policy .