Security / Bug Hunt
Bug Hunt: Nimbus Settings
A settings page where Save lies and Delete doesn't ask. Hunt the state, trust, and destructive-action defects.
- Difficulty
- Medium
- Format
- Bug Hunt
- Points
- 150
- Estimate
- 15 min
// MISSION BRIEF
Your Mission
Nimbus's settings page has five defects, and the nastiest one is a destructive action with a fake safety net. Explore every control and its aftermath.
High-value attack surfaces:
- Destructive actions (delete), does the confirmation actually confirm?
- Save flows, does what you saved match what persists?
- Toggles, does the displayed state match the real state?
- Counters and limits, do they count correctly?
Pay special attention to the Danger Zone.
// FIRST CONTACT
Battle teaser
A profile settings page with name/bio, notification toggle, timezone, and account deletion.
Answers, scoring, hints, and the full battle stay sealed.
// SKILL TAGS
bug-huntsecuritydestructive-actionsstate