And I’m not talking about the chocolate.
Riot Games and their upcoming title Valorant have been getting a lot of coverage lately, particularly regarding the anti-cheat software and how it has access to the highest level of security on Windows. Now Riot Games wants to be sure that this software is secure and they are willing to pay the big bucks to make sure that it stays that way.
Over on Hackerone where companies post bounties to get their systems tested by white hat hackers, Riot has offered up to $100 grand for demonstrated exploits utilizing Valorant’s kernel driver.
Alongside our new game VALORANT, we have deployed our new anti-cheat solution Vanguard that leverages a kernel driver to combat cheaters more effectively. To reinforce our commitment to our players’ security, we are offering special bounties for up to $100,000 for high quality reports that demonstrate practical exploits leveraging the Vanguard kernel driver.
The full hundred grand will go to a user who can demonstrate a network attack with no user interaction; that being one where the victim does not have to click on links or open the software but is vulnerable simply by the software being on the network. There are lower tiers for more user interaction, down to $25 grand for a local attack that compromises sensitive data.
Riot’s additional rules explain:
- The exploit works on the latest version of Vanguard
- You must provide a working proof of concept for the exploit that can be run by Riot Games along with a detailed report
- The exploit hasn’t been shared elsewhere before
- The findings are not disclosed outside of this program without the explicit approval of Riot Games
Source: Hackerone