Nintendo offering up to $20K for identifying 3DS exploits
Claim your bounties, hackers
Nintendo is offering up some serious cash to anyone who can help them identify security flaws with its 3DS systems.
The company is partnering with the HackerOne group, offering bounties ranging from $100 to $20,000 to anyone who can help them locate certain vulnerabilities in the portable console’s security systems.
Take a look below at some of the things Nintendo wants to track down.
Below are examples of types of activities that Nintendo is focused on preventing:
- Piracy, including:
- Game application dumping
- Copied game application execution
- Cheating, including:
- Game application modification
- Save data modification
- Dissemination of inappropriate content to children
Below are examples of vulnerabilities that Nintendo is interested in receiving information about:
- System vulnerabilities regarding the Nintendo 3DS™ family of systems
- Privilege escalation on ARM11 userland
- ARM11 kernel takeover
- ARM9 userland takeover
- ARM9 kernel takeover
- Vulnerabilities regarding Nintendo-published applications for the Nintendo 3DS™ family of systems
- ARM11 userland takeover
- Low-cost cloning
- Security key detection via information leaks
- Hardware vulnerabilities regarding the Nintendo 3DS™ family of systems
Keep in mind Nintendo will only offer rewards based on the vulnerabilities it deems fit, and only one reward for the first reported issue will be granted.
If you fancy yourself the hacker type, check out more rules and regulations for the Nintendo bounties here.