The Million Dollar Hack
Official Challenge Rules
Please read all of the rules below carefully.
THE SKY ECC MILLION DOLLAR HACK CHALLENGE (the “CHALLENGE“) IS BROUGHT TO YOU BY SKY GLOBAL TECHNOLOGY INC. (“SKY”). NO PURCHASE NECESSARY. VOID WHERE PROHIBITED BY LAW. TO PARTICIPATE IN THE CHALLENGE, YOU MUST READ AND AGREE TO THESE RULES AND REGULATIONS. PARTICIPATION IN THE CHALLENGE CONSTITUTES FULL AND UNCONDITIONAL AGREEMENT AND ACCEPTANCE OF THESE RULES AND REGULATIONS (AS THE SAME MAY BE AMENDED BY SKY FROM TIME TO TIME IN ITS SOLE DISCRETION) (the “RULES AND REGULATIONS”). ALL DOLLAR AMOUNTS ARE IN UNITED STATES CURRENCY ($USD) UNLESS OTHERWISE NOTED.
The Challenge is open to anyone in the world, over the legal age in the country in which they reside, provided that this Challenge is void where prohibited by law, and you are not eligible to participate if your participation would violate any applicable laws or regulations, or cause Sky to be in violation of any applicable laws or regulations.
Employees of Sky and its respective affiliates, subsidiaries, related companies, advertising and promotional agencies, and the immediately family of any of the above are not eligible to participate in the Challenge. Employees, previous employees, subcontractors, or other services providers of any company previously engaged by Sky to conduct penetration testing or vulnerability tests of any of Sky’s products or services, and the immediate family of any of the above are not eligible to participate in the Challenge.
For the purposes of these Rules and Regulations, “immediate family” means husband, wife, spouse, mother, father, brother, sister, son and/or daughter, whether by blood, marriage or adoption and whether or not they reside in the same household.
Sky shall have the right at any time to require proof of identity and/or eligibility to participate in the Challenge. Failure to provide such proof may result in disqualification. All personal and other information requested by and supplied to Sky for the purpose of the Challenge must be truthful, complete, accurate, and in no way misleading. Sky reserves the right, in its sole discretion, to disqualify any participant should such participant at any stage supply untruthful, incomplete, inaccurate, or misleading personal details and/or information.
2. HOW TO PARTICIPATE.
You may enter the Challenge beginning on June 17, 2020. The last day to enter the Challenge is June 16, 2021 at 11:59 P.M. PST. The Challenge shall automatically end when: (i) a Winner is announced, or (ii) the Initial Challenge Period (or Replication Period, if applicable) for the last Participant to enter expires, whichever is sooner. See section 5 for more details.
You can apply online to participate in the Challenge here. Complete and submit the application form, along with the deposit amount specified in the application (the “Deposit”). The Deposit covers the cost of the SKY ECC devices delivered to you for your participation in the Challenge and will be returned to you in full upon the return of the SKY ECC devices, provided that such devices are returned in good, working order. Sky will cover all shipping costs and return costs of the devices.
By submitting your application, you agree to be bound by these Rules and Regulations for the entirety of your participation in the Challenge. Sky reserves the right to reject applications for any reason, including failure to provide all required information, or for no reason. Once your application is submitted, you will be deemed a “Participant” for the purposes of the Challenge.
3. OBJECTIVE AND PRIZE
Sky will offer US$1,000,000.00 (the “Prize”) to any Participant who successfully compromises a SKY ECC device in the manner described in Section 5.
The Prize must be accepted as awarded and cannot be transferred, assigned, substituted, or redeemed for cash except at the sole discretion of Sky. Any unused portion of the Prize will be forfeited. Sky reserves the right, in its sole discretion, to substitute a reward of equal or greater value if a reward (or any portion thereof) cannot be awarded for any reason. All applicable taxes on the Prize, if any, are the sole responsibility of the Participant.
Sky shall not assume any liability for any lost or misdirected Prize.
4. CHANCE OF CLAIMING
The chance of successfully compromising a SKY ECC device is negligible. SKY ECC uses proprietary military-grade encryption with brute force protection.
5. SUCCESSFUL COMPROMISE
Upon approval of a Participant’s application, Sky shall deliver the Participant a SKY ECC device (the “First Device”) containing certain encrypted information. The Participant will have up to 90 days from the date of delivery by trackable mail (the “Initial Challenge Period”) to successfully compromise the First Device. The First Device will be considered successfully compromised if a Participant is able to: (i) unlock the First Device and open the SKY ECC application, (ii) decrypt the encrypted information stored in the vault of the SKY ECC application on the First Device to uncover a BTC private key, and (iii) use the private key to withdraw funds placed in a BTC wallet owned by Sky and created specifically for the purpose of the Challenge. The Participant must email Sky at email@example.com to notify Sky that the funds have been withdrawn no later than 11:59 p.m. on the last day of the Initial Challenge Period. The Participant must also disclose to Sky how long it took the Participant to successfully compromise the First Device.
The Participant must then demonstrate that he/she can replicate a successful attack by successfully compromising a second SKY ECC device provided by Sky (the “Second Device”) within the same period of time that it took the Participant to successfully compromise the First Device or such other period of time as reasonably determined by Sky (the “Replication Period”). The second attack will be supervised directly by Sky personnel, either at the Participant’s location or another location reasonably determined by Sky. Sky will cover all travel expenses and accommodations for the Participant.
The Second Device will be considered successfully compromised if a Participant is able to: (i) unlock the Second Device and open the SKY ECC application, (ii) decrypt the encrypted information stored in the vault of the SKY ECC application on the Second Device to uncover a BTC private key, and (iii) use the private key to withdraw funds placed in a BTC wallet owned by Sky and created specifically for the purpose of the Challenge. If the Participant is able to replicate a successful attack on the Second Device within the Replication Period, then the Participant will be declared the “Winner” of the Challenge, and subject to the conditions set forth in section 6, the Winner shall be awarded the Prize.
Within 30 days of the expiry of the Initial Challenge Period, the Participant must return the First Device to Sky in good, working condition. If the Participant is delivered a Second Device, the Participant must return the Second Device to Sky within 30 days of the expiry of the Replication Period. If the Participant fails to return the First Device and Second Device, if applicable, within the time period specified above, the Participant shall forfeit his or her Deposit. If the Participant dissembles or tampers with the First Device or Second Device such that either device is no longer in good working condition, the Participant shall forfeit his or her Deposit.
6. CONDITIONS FOR REWARD
In order to claim the Prize, a successful Participant must:
(i) provide Sky with a fully functioning exploit plus a whitepaper (the “Whitepaper”)explaining the vulnerabilities and exploitation techniques used in the attack, including details about all of the vulnerabilities leveraged and the sequence in which they are used;
(ii) execute and deliver to Sky an Innovation Assignment Agreement (in the form provided by Sky) (the “Assignment Agreement”), whereby the Participant shall assign the Whitepaper to Sky; and
(iii) be compliant with these Rules and Regulations.
EXCEPT WITH THE EXPLICIT PRIOR WRITTEN PERMISSION OF SKY, THE WINNER MAY NOT DISCLOSE OR MAKE AVAILABLE TO ANY PERSON OUTSIDE OF SKY ANY INFORMATION PERTAINING TO THE WINNER’S SUCCESSFUL COMPROMISE OF A SKY ECC DEVICE, INCLUDING BUT NOT LIMITED TO: (I) DISCLOSING THAT THE WINNER SUCCESSFULLY COMPROMISED A SKY ECC DEVICE; (II) DESCRIBING HOW THE PARTICIPANT CAME TO POSSESS THE PRIZE; AND (III) ANY OF THE INFORMATION CONTAINED IN THE WHITEPAPER (ALL SUCH INFORMATION, THE “CONFIDENTIAL INFORMATION”).
The Participant agrees that Sky shall have sole discretion as to the release of any Confidential Information.
Any breach of confidentiality by the Participant of the Challenge could lead to damages sought by Sky against the offending Participant. The Participant acknowledges that a breach of the confidentiality provisions of the Rules and Regulations may result in irreparable harm to Sky, and therefore agree that monetary damages may not be a sufficient remedy, and that Sky shall in addition to all other potential remedies that may be available at law or in equity be entitled to seek relief by way of injunctive relief to prevent breaches of the Rules and Regulations and to specific performance of the Rules and Regulations.
8. INDEMNIFICATION BY PARTICIPANT.
The Participant releases and holds Sky harmless from any and all liability for any injuries, loss, or damage of any kind to the Participant or any other person, including personal injury, death, or property damage, resulting in whole or in part, directly or indirectly, from acceptance, possession, use, or misuse of any reward, participation in the Challenge, any breach of the Rules and Regulations, or in any reward-related activity. The Participant agrees to fully indemnify Sky from any and all claims by third parties arising from the Participant’s breach of the Rules and Regulations or the Assignment Agreement.
9. LIMITATION OF LIABILITY.
THE PARTICIPANT ACKNOWLEDGES AND AGREES THAT SKY EXPRESSLY DISCLAIMS ANY AND ALL LIABILITY WHATSOEVER RELATED TO THE CHALLENGE. WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, (I) SKY ASSUMES NO RESPONSIBILITY OR LIABILITY FOR ANY COMPUTER, ONLINE, SOFTWARE, TELEPHONE, HARDWARE, OR TECHNICAL MALFUNCTIONS THAT MAY OCCUR; (II) SKY IS NOT RESPONSIBLE FOR ANY INCORRECT OR INACCURATE INFORMATION, WHETHER CAUSED BY WEBSITE USERS OR BY ANY OF THE EQUIPMENT OR PROGRAMMING ASSOCIATED WITH OR UTILIZED IN THE CHALLENGE OR BY ANY TECHNICAL OR HUMAN ERROR WHICH MAY OCCUR IN THE ADMINISTRATION OF THE CHALLENGE; (III) SKY IS NOT RESPONSIBLE FOR ANY PROBLEMS, FAILURES, OR TECHNICAL MALFUNCTIONS OF ANY TELEPHONE NETWORK OR LINES, COMPUTER ONLINE SYSTEMS, SERVERS, PROVIDERS, COMPUTER EQUIPMENT, SOFTWARE, E-MAIL, PLAYERS, OR BROWSERS, ON ACCOUNT OF TECHNICAL PROBLEMS OR TRAFFIC CONGESTION ON THE INTERNET, AT ANY WEBSITE, OR ON ACCOUNT OF ANY COMBINATION OF THE FOREGOING; (IV) SKY IS NOT RESPONSIBLE FOR ANY INJURY OR DAMAGE TO PARTICIPANT OR TO ANY COMPUTER RELATED TO OR RESULTING FROM PARTICIPATING OR DOWNLOADING MATERIALS IN THIS CHALLENGE, AND THE PARTICIPANT ASSUMES LIABILITY FOR INJURIES CAUSED OR CLAIMED TO BE CAUSED BY PARTICIPATING IN THE CHALLENGE, OR BY THE ACCEPTANCE, POSSESSION, USE OF, OR FAILURE TO RECEIVE ANY PRIZE; (V) SKY IS NOT LIABLE FOR ANY NON-DELIVERY OF A DEVICE TO A PARTICIPANT (EXCEPT TO RETURN THE DEPOSIT UPON PROOF OF NON-DELIVERY); AND (VI) SKY ASSUMES NO RESPONSIBILITY OR LIABILITY IN THE EVENT THAT THE CHALLENGE CANNOT BE CONDUCTED AS PLANNED FOR ANY REASON, INCLUDING THOSE REASONS BEYOND THE CONTROL OF SKY, SUCH AS INFECTION BY COMPUTER VIRUS, BUGS, TAMPERING, UNAUTHORIZED INTERVENTION, FRAUD, TECHNICAL FAILURES, OR CORRUPTION OF THE ADMINISTRATION, SECURITY, FAIRNESS, INTEGRITY, NATURAL DISASTER, OR PROPER CONDUCT OF THIS CHALLENGE.
As a condition of participating in the Challenge, each Participant agrees to be bound by these Rules and Regulations. Participant further agrees to be bound by the decisions of Sky, which shall be final and binding in all respects. Sky reserves the right, in its sole discretion, to disqualify any Participant found to be violating the Rules and Regulations. CAUTION: ANY ATTEMPT TO DELIBERATELY UNDERMINE THE LEGITIMATE OPERATION OF THE CHALLENGE MAY BE A VIOLATION OF CRIMINAL AND CIVIL LAWS. SHOULD SUCH AN ATTEMPT BE MADE, SKY RESERVES THE RIGHT TO SEEK REMEDIES AND DAMAGES TO THE FULLEST EXTENT PERMITTED BY LAW, INCLUDING BUT NOT LIMITED TO CRIMINAL PROSECUTION.
11. PRIVACY / USE OF PERSONAL INFORMATION.
Each Participant: (i) grants to Sky the right to use his/her name, likeness, mailing address, telephone number, and e-mail address (“Personal Information“) for the purpose of administering the Challenge and for marketing and promotional purposes, including but not limited to publishing the Participant’s name and entry date into the Challenge, and publishing whether or not the Participant successfully compromised the SKY ECC device, and (ii) acknowledges that Sky may disclose his/her Personal Information to third-party agents and service providers of Sky in connection with any of the activities listed in (i) above.
12. INTELLECTUAL PROPERTY.
All intellectual property, including but not limited to trademarks, trade names, logos, copyrights, designs, promotional materials, web pages, source code, drawings, illustrations, slogans, and representations are owned by Sky and/or its affiliates. All rights are reserved. Unauthorized copying or use of any copyrighted material or intellectual property without the express written consent of its owner is strictly prohibited.
Sky reserves the right, in its sole discretion, to terminate the Challenge, in whole or in part, and/or modify, amend, or suspend the Challenge, and/or the Rules and Regulations in any way, at any time, for any reason without prior notice.
These are the official Rules and Regulations. The Challenge is subject to applicable laws and regulations. The Rules and Regulations are subject to change without notice in order to comply with any applicable laws or the policy of any other entity having jurisdiction over Sky and/or the Challenge. All issues and questions concerning the construction, validity, interpretation, and enforceability of the Rules and Regulations or the rights and obligations as between the Participant and Sky in connection with the Challenge shall be governed by and construed in accordance with the laws of the province of British Columbia and the laws of Canada applicable therein, including procedural provisions without giving effect to any choice of law or conflict of law rules or provisions that would cause the application of any other jurisdiction’s laws. The Participant irrevocably attorns to the exclusive jurisdiction of the courts of British Columbia, without regard to conflict of law rules.
In the event of any discrepancy or inconsistency between the terms and conditions of the Rules and Regulations and disclosures or other statements contained in any Challenge-related materials, the terms and conditions of the Rules and Regulations shall prevail, govern, and control.