Hacker News Reader

Comment by eat_veggies | Hacker News Reader

It's possible to complete the first challenge without writing any CSS -- just deactivate break points to bypass the anti-debugger loop, and then use react dev tools to modify state and set the `completed` key to true :)

5Kbf6NSm6SABiMHwDcuZKY17fmCsnsKRYxR4hcnGqfzPsTeZnEj

View on HN

I hope the OP has learned his lesson about doing client-side validation in JavaScript ;-)

Or you can also find solutions directly in the source code. I see that someone moved out the funds 8 minutes ago ;)

https://www.blockchain.com/btc/address/1CSSrZSSRf1RyShKGsYXw...

Whoops, I assumed the obfuscator would encrypt those strings. I should have checked that more carefully. Oh well!

so 0.125 is 470 USD. did you end up getting that?

This CSS game was just the first of four stages, but it had a prize of 0.005 BTC. The next two stages also have addresses with 0.005 BTC, and the last one unlocks the address with 0.125 BTC.

The link to the third stage does not seem to work (https://btc2018.formapi.io/d63c04b...). I get "btc2018.formapi.io’s server IP address could not be found." When visiting a wrong address, I get "Page not found" instead.

Hmm that's strange, it's working fine for me. You could maybe try a different browser, or curl on the command line.

Oh, I've been had :D

Too bad I didn't know about the Dinosaur game in Chrome.

Nice work!

Update: I've disabled React DevTools, and have also encrypted the puzzle solutions.

Reply on news.ycombinator.com