Riot Games Announces $100k Reward for Reporting Hackers in League of Legends and Valorant

Riot Games is taking a proactive approach in its fight against cheating by offering a substantial reward of up to $100,000 for individuals who can identify vulnerabilities in their anti-cheat system, Vanguard. This initiative aims to uphold the integrity of games like League of Legends and Valorant.

This bold strategy is part of Riot’s extensive efforts to eliminate hacking and ensure fair gameplay. Vanguard represents a significant investment in advanced security measures, proving to be more effective against cheaters compared to other popular titles like Call of Duty.

Join the Fight Against Cheating: Riot’s Vanguard Bug Bounty Program

As outlined in their recent listing on HackerOne, Riot Games invites ethical hackers to test the limits of Vanguard by reporting exploitable weaknesses. For those unfamiliar, HackerOne is a platform that connects companies with ethical hackers to enhance their cybersecurity.

This approach is similar to a matchmaking service that pairs businesses, including other major players like Rockstar Games and Epic Games, with skilled individuals who can identify and resolve security issues. While Riot has utilized HackerOne for some time, the company has intensified its focus on uncovering vulnerabilities in Vanguard and increased the bounty amounts available.

Potential Rewards for Ethical Hacking

The incentive structure is enticing for those with hacking expertise. The following rewards are available for successful vulnerability reporting:

Network Attacks without User Interaction:
- Kernel-Level Code Execution: Up to $100,000
- Unauthorized Data Access: Up to $75,000
Network Attacks Requiring User Interaction:
- Kernel-Level Code Execution: Up to $75,000
- Unauthorized Data Access: Up to $50,000
Local Attacks for Privilege Escalation:
- Kernel-Level Code Execution: Up to $35,000
- Unauthorized Data Access: Up to $25,000

This bounty program showcases Riot’s dedication to securing their gaming platforms. By strategically involving the hacker community, Riot aims to identify and fix potential vulnerabilities in Vanguard before they can be exploited by malicious individuals.

However, there are stipulations. Bounties are exclusive to vulnerabilities found within Vanguard’s kernel-level driver. Participants must provide a comprehensive proof of concept and adhere to strict guidelines. Notably, any public discussion about discovered exploits will disqualify hackers from receiving their bounties.

Through this substantial financial incentive, Riot Games not only fortifies the security of their titles but also sets a precedent in the gaming industry. Crowdsourcing vulnerability discovery is the new norm, and Riot is willing to challenge industry standards to maintain a fair playing environment.

Source & Images