[tyho]

This contest does not make a lot of sense. Keys for cryptocurrencies are always asymmetric but it is implied that a symetric key is supposed to be produced, in addition to that there is pretty much no way to send data from a page without it being easily detectable via DevTools. A much better challenge would be to generate compromised asymmetric keys that could be easily cracked.

[ceronman]

I think you're missing the point of the contest. This is not about cryptography. The key generation is just an excuse. The fact that you can detect a connection with DevTools is irrelevant. The idea is too write code that is clean, readable, and innocent looking, but does something "malicious". It's just about having fun obfuscating code, not to write the next exploit.

[tyho]

Then it would have been far better to ask people to code a subtle XSS exploit.