Skip to contentExploitQuest

Hands-on lab

Two At Once

The check passes, the code is correct, and the balance still goes negative. The bug is in the gap between reading a value and writing it.

Labs give each member a unique flag, so you need an account to take one. Sign in or create one — a username and a passphrase, no email.