Hash length extension attack against the save game recovery token allows the player to increase their bank balance and buy the flag.

Full writeup:

[https://ctf.rip/write-ups/crypto/tfc-jam/](https://ctf.rip/write-ups/crypto/tfc-jam/)