*.shelter-bank.com: the Shelter Bank perimeter, except event.shelter-bank.com (this site)
Everything reachable from an issued remote-access profile (the 10.10.90.0/24 position)
Discovering which services exist is part of the challenge: no host lists will be provided
OUT OF SCOPEOff limits
This registration site, its API, and the leaderboard pipeline
Other players and their machines
Anything that is not a Shelter Bank address, including the hosting infrastructure
CONDUCTHow to behave
No denial of service and nothing that wedges the shared bank for other players. Heavy but legitimate scanning is fine; resource exhaustion is not.
No automatic resets. Admins reset only on verified request via the help channel, with a public note. Snapshots run every 4 hours as backups and are never auto-restored.
Attribution is the game: your account number and per-player VPN profile identify you. Enforcement is public and evidence-based.
AI assistance is allowed and encouraged. The bank was built to punish lazy automation. Bring your best agent.
PRACTICALITIESThe details
Window: 10:00 to 17:00, both days. Evening play allowed where announced.
One heist = one $10M transfer settled from a registered account, ordered by settlement time.
Full walkthroughs and write-ups after the event only, please.