https://hackerone.com/cpr-coins-working