{"id":51483,"date":"2023-04-14T18:09:07","date_gmt":"2023-04-14T18:09:07","guid":{"rendered":"https:\/\/www.darkreading.com\/vulnerabilities-threats\/bugs-in-manarium-play-to-earn-showcase-crypto-gaming-insecurity"},"modified":"2023-04-14T18:09:07","modified_gmt":"2023-04-14T18:09:07","slug":"bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/","title":{"rendered":"Bugs in Manarium Play-to-Earn Platform Showcase Crypto-Gaming Insecurity"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt9eda1042fd0cecb8\/6439986032dfd37d9e9c71f0\/manarium-manarium.PNG\" class=\"ff-og-image-inserted\"><\/div>\n<p>A proof-of-concept (PoC) hack of the Manarium play-to-earn (P2E) gaming platform allowed researchers to arbitrarily change their scores to win daily tournaments and collect crypto tokens, while avoiding the initial buy-in required to access the system.<\/p>\n<p>P2E gaming (also known as GameFi or crypto gaming) involves using <a href=\"https:\/\/www.darkreading.com\/vulnerabilities-threats\/nft-centric-attacks-are-increasing\" target=\"_blank\" rel=\"noopener\">nonfungible tokens (NFTs)<\/a> as in-game currency of a sort: Players can sell their NFTs to other collectors and players for use as avatars and other role-playing devices, and they can earn them by winning games or through in-game advertising.<\/p>\n<p>Several models exist, and so far, P2E has been wildly successful: &#8220;The play-to-earn market has become one of the biggest niches of Web 3.0,&#8221; according to <a href=\"https:\/\/egamers.io\/more-major-p2e-hacks-are-a-matter-of-time-cybersecurity-research\/\" target=\"_blank\" rel=\"noopener\">an analysis from Hacken<\/a> last August, published on the eGamers website. &#8220;The market capitalization of play-to-earn projects, as of the beginning of July 2022, is $6.5 billion, and the daily trading volume is greater than $850 million.&#8221;<\/p>\n<p>As is the case in the <a href=\"https:\/\/www.darkreading.com\/attacks-breaches\/defi-pummeled-by-cybercriminals\" target=\"_blank\" rel=\"noopener\">decentralized finance (DeFi) arena<\/a>, the increasing amounts of crypto being transacted via P2E games has attracted cybercriminal notice, according to new <a href=\"https:\/\/www.blazeinfosec.com\/post\/hacking-play-2-earn-blockchain-games-manarium\/?web_view=true\" target=\"_blank\" rel=\"noopener\">analysis from researchers at Blaze Information Security<\/a>. So, they set out to test the security of the Manarium platform and encountered three levels of insecurity along the way.<\/p>\n<h2 class=\"regular-text\">Easy Ways to Game the Gaming System<\/h2>\n<p>In Manarium&#8217;s case, the platform supports minigames that each offer a daily tournament. Users connect their wallets to the game and are verified; they pay 300 ARI (a type of <a href=\"https:\/\/ariswap.net\/arigallery-art-collections\/\" target=\"_blank\" rel=\"noopener\">token that can be swapped for NFT art<\/a>) in ante; then they play in a tournament in hopes of winning a portion of the prize pool (in the form of more ARI). When the tournament is over, the game&#8217;s back-end server tallies the scores, and connects with winners&#8217; smart contracts in order to pay out the earnings to the users&#8217; verified cryptocurrency wallets.<\/p>\n<p>First, in analyzing one of the platform&#8217;s JavaScript files, an obviously named function leaped out to Blaze researchers: &#8220;UpdateAccountScore.&#8221;<\/p>\n<p>The function passes the following parameters: firebase.firestore().collection(\u201cGameName\u201d).doc(\u201cUSER_WALLET\u201d).set(JSON.parse(\u201c{\\\u201dwallet\\\u201d:\\\u201dUSER_WALLET\\\u201d,\\\u201dscore\\\u201d:SCORE}\u201d), and the researchers found they were able to change those parameters at will within the Manarium interface&#8217;s Console Tab via the Game Window.<\/p>\n<p>&#8220;This vulnerability is more dangerous because they didn\u2019t verify if the user paid the initial tax (300 ARI) to play the game when making the payment (for winners), so anyone that just executes this code line could receive the tokens without playing the game or paying the tax,&#8221; according to the analysis.<\/p>\n<p>Manarium quickly fixed the vulnerability, but the patch itself was flawed because it added hardcoded credentials into the mix.<\/p>\n<p>&#8220;Manarium Team changed the way how to send the scoreboard [data] to the [back-end] service, by adding authentication before sending the data, and this authentication must be done only via an admin account,&#8221; according to the analysis. &#8220;The problem was, Manarium Team hardcoded the [admin] credentials on the file &#8216;Build.data.'&#8221;<\/p>\n<p>That allowed the researchers to manipulate the game data by entering the credentials, generating an authentication token, and updating the score.<\/p>\n<p>In response, Manarium then implemented what it called a &#8220;Super Anti-Cheat&#8221; that used behavioral analysis to root out abusers.<\/p>\n<h2 class=\"regular-text\">Super Anti-Cheat Fail<\/h2>\n<p>As the researchers detailed,&nbsp;&#8220;The anti-cheat validates the following fields: sessionTime, timeUTC, and score, where the user must have sufficient time to make the score. In other words, if a user scores 10 points in a session time of one second, this is impossible [and] the anti-cheat will detect a possible cheater.&#8221;<\/p>\n<p>However, it took the Blaze researchers less than 20 minutes to bypass the anti-cheat mechanism. They created &#8220;a script with a human behavior (a simple sleep and some random numbers) that will generate a high score in a timed human-compatible [way],&#8221; according to the posting. And to add insult to injury, &#8220;in the next versions of the script, we implemented \u2026 multithreading and the support of exploiting all three games simultaneously.&#8221;<\/p>\n<p>Manarium finally locked down its system by eliminating any way for unsigned data to be modified or generated by a user, with the use of a key system.<\/p>\n<p>Blaze verified the fix as working, but the hunt (game?) is still on: &#8220;Future research will focus on searching for this key and attempting again a new bypass,&#8221; the post concluded.<\/p>\n<h2 class=\"regular-text\">GameFi: Underperforming Cybersecurity<\/h2>\n<p>The research adds to a growing drumbeat of concern around the crypto-gaming sector. An analysis from Hacken last August concluded that P2E gaming in general has an &#8220;unsatisfactory&#8221; level of cybersecurity readiness \u2014 and that a major hack on one of the platforms is &#8220;only a matter of time&#8221; because they &#8220;put profits above security.&#8221;<\/p>\n<p>But the stakes for P2E gamers and investors are high: For instance, in March 2022, a $625 million heist of assets <a href=\"https:\/\/www.nbcnews.com\/tech\/crypto\/axie-infinity-hack-leaves-players-shaken-still-loyal-rcna23379\" target=\"_blank\" rel=\"noopener\">held in the Axie Infinity game<\/a> led to that platform seeing a massive falloff in number of users and amount of money put in by gamers per week. It&#8217;s a setback from which it has <a href=\"https:\/\/www.thecoinrepublic.com\/2023\/04\/01\/axie-infinity-price-down-12-will-axs-price-see-rebound\/\" target=\"_blank\" rel=\"noopener\">yet to recover.<\/a><\/p>\n<p>\u201cGameFi projects \u2026 do not follow even the most essential cybersecurity recommendations, leaving malicious actors numerous entry points for attacks,&#8221; according to the Hacken report, which characterizes this as a major oversight given just how juicy of a target P2E has become.<\/p>\n<p>&#8220;While it is understandable to want to be the first to market on a product or application, the risk of deploying these digital asset games without the proper security for the on-chain and off-chain risks may put the organization at risk for a host of cybersecurity risks,&#8221; says Karl Steinkamp, director of delivery transformation and automation at Coalfire.<\/p>\n<p>He adds, &#8220;Instead, organizations should make sure they\u2019ve gone through the motions of adequately hardening each of the components of their platform prior to launch, and then after that, on a periodic and reoccurring basis. Organization\u2019s may utilize tools like DArcher and the like to validate that they have adequately addressed on-chain and off-chain risks.&#8221;<\/p>\n<p>Read More <a href=\"https:\/\/www.darkreading.com\/vulnerabilities-threats\/bugs-in-manarium-play-to-earn-showcase-crypto-gaming-insecurity\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Researchers plug in winning scores to make off with NFTs without actually playing the GameFi platform&#8217;s minigames.Read More <a href=\"https:\/\/www.darkreading.com\/vulnerabilities-threats\/bugs-in-manarium-play-to-earn-showcase-crypto-gaming-insecurity\">HERE<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[151],"tags":[],"class_list":["post-51483","post","type-post","status-publish","format-standard","hentry","category-darkreading-ti"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Bugs in Manarium Play-to-Earn Platform Showcase Crypto-Gaming Insecurity 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Bugs in Manarium Play-to-Earn Platform Showcase Crypto-Gaming Insecurity 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-14T18:09:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt9eda1042fd0cecb8\/6439986032dfd37d9e9c71f0\/manarium-manarium.PNG\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Bugs in Manarium Play-to-Earn Platform Showcase Crypto-Gaming Insecurity\",\"datePublished\":\"2023-04-14T18:09:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\\\/\"},\"wordCount\":1000,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt9eda1042fd0cecb8\\\/6439986032dfd37d9e9c71f0\\\/manarium-manarium.PNG\",\"articleSection\":[\"DarkReading |TI\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\\\/\",\"name\":\"Bugs in Manarium Play-to-Earn Platform Showcase Crypto-Gaming Insecurity 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt9eda1042fd0cecb8\\\/6439986032dfd37d9e9c71f0\\\/manarium-manarium.PNG\",\"datePublished\":\"2023-04-14T18:09:07+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\\\/#primaryimage\",\"url\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt9eda1042fd0cecb8\\\/6439986032dfd37d9e9c71f0\\\/manarium-manarium.PNG\",\"contentUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blt9eda1042fd0cecb8\\\/6439986032dfd37d9e9c71f0\\\/manarium-manarium.PNG\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Bugs in Manarium Play-to-Earn Platform Showcase Crypto-Gaming Insecurity\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Bugs in Manarium Play-to-Earn Platform Showcase Crypto-Gaming Insecurity 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/","og_locale":"en_US","og_type":"article","og_title":"Bugs in Manarium Play-to-Earn Platform Showcase Crypto-Gaming Insecurity 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2023-04-14T18:09:07+00:00","og_image":[{"url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt9eda1042fd0cecb8\/6439986032dfd37d9e9c71f0\/manarium-manarium.PNG","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Bugs in Manarium Play-to-Earn Platform Showcase Crypto-Gaming Insecurity","datePublished":"2023-04-14T18:09:07+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/"},"wordCount":1000,"commentCount":0,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt9eda1042fd0cecb8\/6439986032dfd37d9e9c71f0\/manarium-manarium.PNG","articleSection":["DarkReading |TI"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/","url":"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/","name":"Bugs in Manarium Play-to-Earn Platform Showcase Crypto-Gaming Insecurity 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt9eda1042fd0cecb8\/6439986032dfd37d9e9c71f0\/manarium-manarium.PNG","datePublished":"2023-04-14T18:09:07+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/#primaryimage","url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt9eda1042fd0cecb8\/6439986032dfd37d9e9c71f0\/manarium-manarium.PNG","contentUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blt9eda1042fd0cecb8\/6439986032dfd37d9e9c71f0\/manarium-manarium.PNG"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/bugs-in-manarium-play-to-earn-platform-showcase-crypto-gaming-insecurity\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Bugs in Manarium Play-to-Earn Platform Showcase Crypto-Gaming Insecurity"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/51483","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=51483"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/51483\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=51483"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=51483"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=51483"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}