Matrix Cup in China: Review of the latest hacking contest

[Carding Forum]

A Chinese competition promises millions of dollars for the best vulnerabilities.

In May 2024, the new Matrix Cup hacking competition was opened in Qingdao, Shandong Province. This is a large-scale event organized by 360 Digital Security Group and Beijing Huayunan Information Technology Co. (also known as VUL.AI), became the largest cybersecurity competition in the Eastern Hemisphere.

Competition structure and objectives​

The Matrix Cup includes five different challenges covering all major areas of hacking competitions: three tracks on finding vulnerabilities, one Capture-the-Flag (CTF) challenge, and one Artificial intelligence (AI) challenge. The total prize pool of the contest was 18 million yuan (about 2.48 million US dollars), with additional rewards for AI and CTF challenges.

Competitive tracks​

1. General Products Contest-probably includes Western operating systems, browsers, network devices, and mobile devices.
2. Domestic Software and Hardware Products Contest-includes Chinese operating systems, routers, and VPNs.
3. The Original Vulnerability Discovery Contest is aimed at students and focuses on Chinese-made products.

Special attention is paid to developing and supporting cybersecurity talent, which is in line with China's policy of reducing dependence on foreign suppliers and increasing self-sufficiency in high-tech.

Contest results​

According to the results of the competition, about 100 vulnerabilities were identified in well - known software and hardware products, including several medium-and high-risk vulnerabilities. In the general product competition, Tsinghua University's TZL team won the Best Vulnerability award for discovering a vulnerability in the virtualization management platform with the largest market share. The AAA team from Zhejiang University hacked the system core of major mobile operating systems.

Implications for China's strategy​

The Matrix Cup has become an important element in China's strategy to develop offensive and defensive cyber capabilities. The competition is aimed at identifying, training and attracting the best specialists in the field of cybersecurity. The participation and success of university teams highlights the importance of the young generation of specialists for the future of the country's cybersecurity.

Conclusion​

The Matrix Cup complements the growing ecosystem of hacking contests in China by providing opportunities for local security researchers. In the short term, this increases the volume of available vulnerabilities for government agencies, and in the long term, it contributes to the development of China's national cyber capabilities.

Source