← back to room
Race Condition
Double Redeem Race
Scenario
GiftDrop credits one hundred dollars when you redeem code GIFT100. The wallet update reads balance, adds credit, then writes back without locking. Fire parallel redemptions so the same code pays out twice.
Your approach
- Reset the lab wallet if needed and note starting balance.
- Use the parallel redeem button or send many simultaneous POST requests.
- Refresh balance until it shows at least two hundred dollars.
- Copy the race success flag from the page.
- Submit the double-redeem flag.
Gift card GIFT100 should only redeem once. Fire parallel redeem requests to race the balance check. Wallet ≥ 200 unlocks the flag.
Wallet: $0 · Card balance: $100
Reset