ZERO DAY
3,000 hackers · Robinhood Chain

There is no
mint button.

Exploit the contract. Zero Day is 3,000 on-chain pixel hackers. The only way to mint is to break into one of five vulnerable targets, each one generated for your wallet. The harder the exploit, the rarer the class.

start exploitingread the exploit chain
exploited
0 / 3,000
price
0.0001 ETH
zero days left
150 / 150
per wallet
3 max
zero-day — bash
ZERO DAY #????Script Kiddie
sample hacker
./exploit

Pick a vulnerability

Each CVE is a puzzle. Your target is generated from your wallet address, so nobody else's answer works for you. Solve it in the terminal, then exploit for 0.0001 ETH. Harder CVEs mint rarer classes and are capped: once a cap is reached the vulnerability is patched.

not connected
$
target
exploit
access token
price (to the treasury)0.0001 ETH
gaspaid by you, tiny
classScript Kiddie
./crew

The crew

Every hacker that exploited its way in, live from the chain. Art and metadata are 100% on-chain.

./my_hackers

My hackers

./classes

Five classes, five exploits

The class is decided by the vulnerability you exploited, not by luck. Everything else (outfit, face, gear…) is drawn at random from 3,000 unique pre-shuffled trait sets.

./how_it_works

The exploit chain

01

Recon

Connect your wallet. The contract assigns you one target per CVE: puzzle #keccak(wallet, slot, tier) of a pool of 1,200.

02

Break in

Read the target's files in the terminal. Reverse, rotate, decode, XOR, Vigenère: the built-in tools are enough. Find the access token.

03

Exploit

The site checks your token against keccak(token) locally, builds a Merkle proof and calls exploit(tier, token, proof) with 0.0001 ETH.

04

Own it

The contract verifies the proof against the committed puzzle root and mints a random hacker of that class. Copied transactions fail: the target is yours alone.

target = keccak(wallet, slot, tier) mod 1200 // your own puzzle, per mint, per CVE leaf = keccak(keccak(abi.encode(tier, target, keccak(token)))) mint = MerkleProof.verify(proof, puzzleRoot, leaf) && msg.value == price
Why nobody can snipe youThe token is in your transaction, but the contract recomputes the target from msg.sender. Someone copying your calldata gets a different target, so the proof fails.
Why the rare classes stay rareGhost and Zero Day are capped on-chain (350 and 150). The caps can only ever be lowered. Once patched, that CVE mints nothing more.
Why it lastsArt, metadata and the exploit rule live in the contracts. The puzzle root is committed and can be locked forever. No server, no API.
./faq

Good questions

Is this real hacking?

No. It's a puzzle game that looks like one. The "targets" are tiny fake systems generated on the page, the ciphers are classic (Caesar, Vigenère, XOR, encodings) and the tools are built into the terminal. Nothing talks to any real server.

Why is my target different from my friend's?

The target index comes from your wallet address, your mint slot and the CVE. 1,200 puzzles per CVE means almost everyone sees a different one, and your second and third mints get new targets too.

Can someone copy my answer?

Only if the contract gives them the very same target, which needs the same wallet address. The contract recomputes the target from msg.sender, so a copied transaction reverts with AccessDenied.

What does it cost?

0.0001 ETH per hacker, paid straight to the treasury inside the exploit transaction, plus Robinhood Chain gas (a fraction of a cent). Max 3 hackers per wallet, enforced on-chain.

Which CVE should I pick?

The class is up to you. CVE-01 is a warm-up anyone can do. CVE-05 takes real work and mints a Zero Day, of which there will only ever be 150. If a CVE is patched (cap reached), pick another one.

What if I get it wrong?

Nothing happens on-chain: the token is checked locally against keccak(token) before any transaction. Try again as often as you like, no gas wasted.

Can the team cheat?

The team knows the answers (it made the puzzles), but it's bound by the same rules: 3 per wallet, the on-chain caps, and a 60-hacker reserve that always mints Script Kiddies. The puzzle root can be locked so no answer can ever be changed.

Which wallets work?

MetaMask, Rabby, Coinbase Wallet, OKX and any EIP-6963 browser wallet. The site asks your wallet to switch to Robinhood Chain and adds the network if needed.