Site down :/ Just convinced bro I was Jeff Bezos too

Hi all, we see many people get stuck in L1. Some tips:
1) You can skip L2 to other levels. When prompted, enter the level you want to go to
2) We have added hints, if you get stuck in any level, you'd automatically be presented with Hints
3) Please be sure to login before you start because we dont track attempts and dont award points or prices for un-authenticated sessions https://vault.aport.io/terms

how to contact organizers?

Please use the link at https://aport.io/ or open a github issue. Or email me directly uchi at aport

You fucks added transaction history days after the competition began (which then made it solvable) . and then you tightened the security of the AI using us. NGl thats kind of fked up.

what do mean "This level is intentionally unwinnable. Pay attention to the reason codes." <_<

I spent a lot of time on Level 5 and, unless something changed server-side, it currently appears backend-locked rather than puzzle-gated.

From repeated testing, the authoritative APort decision always resolves to the same thing: finance.payment.charge.v1, passport ap_vault_level5_vaultos, assurance L0, denied with oap.unknown_capability because the agent does not have payments.charge. I tried multiple valid protocol shapes, alternate finance-style payloads, multi-action requests, websocket-level experimentation, and even confirmed that some frontend state can be spoofed client-side, but none of that changes the server-authoritative decision.

So the problem does not seem to be “find the right hidden parameter.” It looks more like the backend is hard-pinned to a passport that fundamentally lacks the capability required to ever succeed. If that is intentional, then the level is not just hard; it is effectively unwinnable through intended interaction. If it was changed after launch, that would explain why some players are saying it became unsolvable.

Would be good to get clarification from organizers on whether Level 5 is currently solvable as deployed, or whether it was hardened after the competition began.

At minimum, organizers should disclose whether Level 5 is solvable at all as currently deployed. Right now it looks like players are being invited to attack a hard-locked system for free under the framing of a fake prize challenge. If the backend was changed after launch, or if the solve path was removed, that should be stated plainly.

Hi all, level 5 is only solvable if you can bypass the APort Guardrails. That is the point.

Yes, you can convince the AI to do the transaction, which many people were able to do, but can you bypass a deterministic guardrail? That's the whole purpose of the CTF. Yes, all attempts actually go through APort and a decision is logged. So far, its all been a deny decision.

See https://vault.aport.io/terms but happy to answer questions

@m15k47on1c nothing consequential changed after launch. The only thing we added was providing hints so more people pass Level 2 and other levels. We noticed people were getting stuck there so we added hints.

Bullshit, you made transaction history available days after competition started, even when prior it was empty.

only available days after*

@Wizard_Orypure I dont get this. Could you clarify please? I appreciate that you're engaging and I definitely want to understand your perspective so we can do better in the new CTF we are launching. That would have stronger challenge and reward and we will use your feedback to make it 10x better

When is the next CTF ?

@uchibeke you listed the competition to start, but released the emails for L2~4 (within transaction list) only days after the competition had already begun. Verify function only worked if there was an email we could use, so you essentially made the scenario impossible until later on in the competition.