Hash length extension attack against the save game recovery token allows the player to increase their bank balance and buy the flag.
Full writeup:
[https://ctf.rip/write-ups/crypto/tfc-jam/](https://ctf.rip/write-ups/crypto/tfc-jam/)