MikroTik pushed a fix in RouterOS 7.23.4 and never said what it was for, so a researcher took the binary apart instead of waiting for an explanation.
The researcher behind npratley.net noticed that MikroTik's release notes for RouterOS 7.23.4 gave no real detail about what had changed under the hood. Rather than take the vendor's silence at face value, they diffed the update against the prior release and reverse engineered the binary to work out what had actually been patched. The write-up documents that process step by step, filling in the gap MikroTik's own changelog left blank. It is unpaid audit work that MikroTik, as the vendor, chose not to do itself.
RouterOS runs on a huge base of routers used by ISPs, small businesses, and hobbyists who rely on that changelog to judge how urgently to update. When a vendor patches quietly, admins have no way to tell whether they are looking at a cosmetic bug fix or something worth an emergency maintenance window. Independent reverse-engineering like this is often the only way that distinction becomes public at all.
MikroTik is far from the only vendor to ship fixes without receipts, but a company with this much internet-facing hardware in the field has less room than most to keep its patch notes vague.