As announced in the prior update, we are doing a vulnerability NFT collaboration with SpacePirate’s Age of Rust game!
Cloverme is one of the first to bring NFTs to gaming, launching Age of Rust on Bitcointalk.org Forums back in 2017. He is the founder of SpacePirate Games working on titles such as Age of Rust, Red Fern Valley, and Hack & Hash.
Back in 2018, Age of Rust was a 2D chat-based puzzle adventure game. During that time, cloverme ran a bug bounty program for responsibly disclosing vulnerabilities in the game.
Over the course of the 2D game, we found and reported 9 vulnerabilities. We have gone through and picked five vulnerabilities that we felt had interesting impact to the game.
Vuln NFT Auction
Four collaboration vulnerability NFTs will be minted and listed of auction on the $ziot HackerSpace on OpenSea.
The auction will begin on 5/26/2021 at 2:00 PM EST and will run for 24 hours.
- #1: Critical, SQL Injection. Starting bid: 0.5 eth
- #2: Critical, Logic Flaw. Starting bid: 0.5 eth equivalent of $ziot
- #3: High, Logic Flaw. Starting bid: 0.25 eth
- #4: High, 2x Stored XSS. Starting bid: 0.25 eth equivalent of $ziot
- #5: Medium, Access Control. Puzzle Reward
The highest bids after the 24 hour period will win the NFT, regardless if the OpenSea min requirement is met or not. If no bids are placed, it will be listed for the starting bid value and open for anyone to acquire.
The fifth Age of Rust vuln NFT will be available as part of the prize pool in a new security puzzle that will be launching soon. Read more at the end of this article for more information.
What do the NFTs contain?
The NFTs come with the following:
- Full description of the vulnerability
- The full disclosure write-up including steps to reproduce
- Screenshots related to the vulnerability
Ever wondered how a game bot works?
The NFTs will also come with the code for a python bot for the game that includes the path finding logic in how it traveled and could auto complete the game.
Exclusive Age of Rust 3D Puzzle Access!
In addition to getting access to the vulnerability write-up, Age of Rust vulnerability NFT holders will get access to an exclusive puzzle in a future release of the Age of Rust 3D game. This is a side puzzle unrelated to the core game with rewards provided by our team.
The rewards for the puzzle are TBD, but will likely contain Age of Rust mission cards, $ziot, and Enjin coin rewards.
New Puzzle Launch!
The Launch Puzzle was solved awhile back, but a secondary prize was put into the pot by the solving team as an incentive for others to keep going. Now that the Launch Puzzle is officially over, we are moving towards launching our second puzzle!
Read the Launch Puzzle’s write-up here:
https://jtobcat.medium.com/solving-the-ziotcoin-puzzle-3334d670a54d
The new puzzle is a security challenge that will launch on 5/28/2021. Unlike the Launch Puzzle, it will require less information about ciphers and more knowledge of web security.
Difficulty Rating: Medium
Requirement: You must hold Puzzler Tier (1337 ziot coin)
The prize pool for the puzzle is the following:
- 1x Age of Rust Vulnerability NFT #5
- 3x 1000 $ziot coin
This will not be a first to solve puzzle.
Solving the puzzle will allow you to enter into a drawing. After the puzzle has finished, winners will be selected at random. One winner will receive the NFT and $ziot coin, two other winners will only receive 1000 $ziot coin.
More information on this puzzle next week!
