Nintendo is offering cash rewards of up to $20,000 for anyone who can find and identify security issues with its 3DS line of handheld systems.
The Japanese console maker has set up its own Bug Bounty Program on HackerOne, and is asking users to hunt down and report system “vulnerabilities” to help combat a number of threats including piracy, cheating, and save data modification.
More specifically, the company is keen to hear more about vulnerabilities relating to console hardware, system software, and Nintendo-published applications.
Rewards will be paid to those who first report an issue, and will range from $100 to $20,000. Nintendo hasn’t disclosed how it’ll be calculating the value of each reward, although, as you’d expect, the amount will vary depending on the importance and quality of each report.
Cash will only be handed out to the first reporter of an issue, so it’s advised those taking part in the program submit their findings as soon as possible.
“A report is evaluated to be high quality if you show that the vulnerability is exploitable by providing a proof of concept (functional exploit code is even better),” explained Nintendo. “If you don’t yet have a proof of concept, or functional exploit code, we still encourage you to report to us sooner rather than later.
“You can then submit a proof of concept or functional exploit code later (within three weeks of the initial report) and it will be considered to be a part of the report. The reward will be paid after the vulnerability has been fixed by Nintendo.”
For more information on Nintendo’s Bug Bounty Program, head on over to HackerOne.