A security researcher who claims to have managed to bypass two-factor authentication on the website of the US-based digital asset exchange Poloniex says he sold the vulnerability information after waiting for more than 60 days for the company to react after being informed.