Coin Hunt World Protocol Reverse Engineering

This report walks through reverse engineering Coin Hunt World: identifying network channels, decoding the SmartFoxServer binary protocol, building tooling to parse PCAPs and proxy traffic, and using those capabilities to cheat the game (GPS spoofing and replaying walking-activity packets to earn in-game cryptocurrency). The authors describe how they intercepted unencrypted traffic on port 9933, reconstructed packet formats and serializers, implemented a decoder using the SmartFox client library, demonstrated successful replay-based milestone completion, and offer mitigations including encryption, anti-tamper checks, and heuristic/ML-based location anomaly detection.