They used the phone number search feature to perform a massive data mining operation: using a tool based on the Google libphonenumber library, they generated 63 billion phone numbers and scanned them at a rate of 7,000 per second.
To the researchers' surprise, WhatsApp did not block their IP addresses or accounts, nor did it apply any effective rate limits.