Eureka - Bug Bounty Competition

UPD: 
Here are the links for both the application and their testathons

• ChuckEET Testathon details
• Qoneqt Testathon details

Eureka is the flagship hackathon of Codefest, the annual technical fest organized by the Department of Computer Science and Engineering, IIT (BHU) Varanasi. This prestigious event serves as a national-level platform that brings together innovative and motivated minds from diverse domains to find the vulnerabilities and security flaws in complex systems.

Eureka fosters an environment for critical thinking, security analysis, and ethical hacking, challenging participants to identify and neutralize the vulnerabilities that threaten our digital infrastructure. This premier bug bounty event encourages students to push the boundaries of cybersecurity by uncovering deep-seated flaws and translating technical exploits into comprehensive, responsible disclosure reports with real-world impact.

Join our discord for quick updates and query resolution: Discord Link

Problem Statement and Submission Guidelines:

• The company Troir Venture LLP has created 2 products, Chukeet and Qoneqt. The link to download and test these applications will be available at the start of the event on unstop. The same will be sent via mail.
  
• You will be provided with a Excel file containing 
  • Test ID, Scenario, Preconditions
  • Step-by-step Actions
  • Expected Results
  • Android & iOS Status columns
  • Notes / Observations
• Follow each case exactly as described. Test both standard flows (happy paths) and edge cases (errors, denial, offline). During testing, Document every incosistency or issue and submit them through the bug reporting portal. (Link to this will be updated after event starts)

• Each report must include:

  • Module & Test ID
  • Device / OS version
  • App Build version
  • Steps to reproduce
  • Expected vs Actual results
  • Severity level (Critical, Major, Minor)
  • Screenshots or screen recordings

Rules and Regulations:

• Participants must join the official discord server CodeFest'26 for announcements, updates, and important communications
• The results will be declared on the instagram page of CodeFest
• The event will be conducted over the period:
• 13th March (00:00) to 15th March (23:59)
• All participants are expected to adhere to ethical conduct and professional standards throughout the event
• Any form of plagiarism, misconduct, or unfair practices will result in immediate disqualification
• The decisions made by the organizing committee and judges shall be final and binding

Registration and Team Formation:

• The bug bounty is open to all students across India
• This is a solo event.
• Each participant must complete individual registration on Unstop.
• Late registrations will not be accepted under any circumstances

Hackathon Timeline & Submission Details:

• The hackathon will officially commence on 13th March at 00:00
• Problems and submission link will be announced at the start of the event via email. Same will be updated on unstop
• Bug Submission deadline:
  15th March 2026 at 23:59

Evaluation Criterion;

• Each reported bug will be assigned a score based on the severity. Participants will be ranked from highest to lowest scores.
• Duplicate submissions of same bug by participant shall not be considered for calculating score.
• The Exact weightage of each bug shall be determined by the organising team.
• Bugs will be given points only when they can be reproduced by the organising team.