YesWeHack Dojo Challenge 0823

Introduction This was an SQL challenge hosted by YesWeHack as their monthly DOJO challenge. You can find it here. I had been noticing these DoJo challenges popping up in my Twitter feed for the last couple of months but was busy (being lazy) so couldn’t really try to solve them. But this time I decided to put it in my to-do list so that I am reminded every time I have a look at the list.
Hacking GraphQL API Using Race Conditions
Introduction I have been using this platform for quite a few years. I will not be disclosing the platform’s name for obvious reasons. While using it, I discovered an interesting functionality related to in-game currency. Periodically, users are awarded a gift that, when claimed, grants them 10 coins. These coins can be used to acquire merchandise, premium subscriptions, and other benefits on the platform. I made a mental note of this feature and continued with my day, procrastinating.