Announcing the Vulnerability Bug Bounty Program

[Gryphonknight]

Timing part 1

@mhalttu

Please note that we are most interested in vulnerabilities affecting our server-side validation. Just as an example:

• Completing the same quest multiple times for repeated rewards
• Abusing a bug to adjust the odds of a battle or summon in your favour
• Training or crafting without consuming the necessary ingredients

Well that didn’t take long.

SeasonGate
BetaGate
LevelGate

Congratulations SGG, you have now experienced, and patched, all 3 of your worst fears.

Hopefully the rest of 2020 goes better.

Click for rant about transparency

Timing part 2

I hate to be the bearer of bad news, but a lot of cheater witch hunts and SGG entrapment/ complicit conspiracy theories are popping up on the internet.

I do not think it will help, but you might internally discuss how to communicate with the player base in a situation like this.

Similar to a data breach at a retailer.

Personally, I would ask the legal department about an in game email.

If not, “leak” the info to the forum moderators so at least forum members will be better able to counter act the increasing number of cheater witch hunts and SGG entrapment/ complicit conspiracy theories spreading.

Notes

Raise of Conspiracy theories

(The Science of Conspiracy Theories and Political Polarization with Eric Oliver (Ep. 25))

SeasonGate

([Tips, Help] But I didn't do ANYTHING but my account is trashed/ banned ! or Common mistakes, cons, and other nefarious methods to get your money, trash your account, or get you banned AND How to prevent this from happening [Updated 2020-Nov-06] - #2 by Gryphonknight)

BetaGate

(Stones' colour distribution is NOT random - MASTER Board Conspiracy - #1212 by Gryphonknight)

LevelGate

@Gryphonknight

Camps- server ping

Why does the game ping the server when I collect my camps?

There were several hacks involving the game, including faster skill level up and allowing players to level heroes for reduced Hero XP. Hacked heroes were reset and the hacks patched in 2018-January.

Some of the patches moved processes to the server, or more likely, left the process on the device but required more frequent syncs, verification pings and possibly hashes of the game file.

FIN