diff --git a/.devcontainer.json b/.devcontainer.json
index d7ae27d0081..a81e1e9d0ba 100644
--- a/.devcontainer.json
+++ b/.devcontainer.json
@@ -10,5 +10,5 @@
             { "mode": "auto" }
         ]
     },
-    "postCreateCommand": "export NG_CLI_ANALYTICS=ci && npm i -g @angular/cli && npm install"
+    "postCreateCommand": "export NG_CLI_ANALYTICS=ci && export NG_FORCE_TTY=false && npm i -g @angular/cli && npm install && unset NG_FORCE_TTY"
 }
\ No newline at end of file
diff --git a/.dockerignore b/.dockerignore
index 5f114213be6..4fcadbb6509 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -9,6 +9,8 @@ vagrant/
 logs/
 Dockerfile
 .npmrc
+/bom.json
+/bom.xml
 
 # Pattern is *not covered* by node_modules/ above no matter what IntelliJ says!
 frontend/node_modules/
diff --git a/.eslintrc.js b/.eslintrc.js
index 53256ad96ce..29131f75e72 100644
--- a/.eslintrc.js
+++ b/.eslintrc.js
@@ -33,13 +33,13 @@ module.exports = {
       parser: '@typescript-eslint/parser',
       rules: {
         'no-void': 'off', // conflicting with recommendation from @typescript-eslint/no-floating-promises
-        // FIXME warnings below this line need to be checked and fixed. Line end comments below are number of findings per rule on 02.05.2022
-        '@typescript-eslint/no-misused-promises': 'off', // 1
-        '@typescript-eslint/explicit-function-return-type': 'off', // 197
-        '@typescript-eslint/restrict-plus-operands': 'off', // 250
-        '@typescript-eslint/strict-boolean-expressions': 'off', // 337
-        '@typescript-eslint/restrict-template-expressions': 'off', // 395
-        '@typescript-eslint/no-var-requires': 'off' // 509
+        // FIXME warnings below this line need to be checked and fixed.
+        '@typescript-eslint/no-misused-promises': 'off',
+        '@typescript-eslint/explicit-function-return-type': 'off',
+        '@typescript-eslint/restrict-plus-operands': 'off',
+        '@typescript-eslint/strict-boolean-expressions': 'off',
+        '@typescript-eslint/restrict-template-expressions': 'off',
+        '@typescript-eslint/no-var-requires': 'off'
       }
     }
   ]
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index a27a89de4b5..2aab30e2e14 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -1,2 +1,3 @@
 /vagrant/ @wurstbrot
 /test/cypress/ @ShubhamPalriwala
+/frontend/src/app/score-board-preview @J12934
diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md
index a9e46ed8cd7..1339029b272 100644
--- a/.github/PULL_REQUEST_TEMPLATE.md
+++ b/.github/PULL_REQUEST_TEMPLATE.md
@@ -4,7 +4,9 @@ You can expedite processing of your PR by using this template to provide context
 and additional information. Before actually opening a PR please make sure that it
 does NOT fall into any of the following categories
 
-🚫 Spam PRs (accidental or intentional) - see https://pwning.owasp-juice.shop/part3/contribution.html#handling-of-spam-prs for more information 
+🚫 Spam PRs (accidental or intentional) - these will result in a 7 / 30 / ∞ days ban from
+interacting with the project depending on reoccurrence and severity. You can find more
+information [here](https://pwning.owasp-juice.shop/companion-guide/latest/part3/contribution.html#_handling_of_spam_prs). 
 
 🚫 Lazy typo fixing PRs - if you fix a typo in a file, your PR will only be merged
 if all other typos in the same file are also fixed with the same PR
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 24e29c16786..064fc484cd1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,15 +18,16 @@ on:
       - 'data/static/i18n/*.json'
       - 'frontend/src/assets/i18n/*.json'
 env:
-  ANGULAR_CLI_VERSION: 13
+  ANGULAR_CLI_VERSION: 15
+  CYCLONEDX_NPM_VERSION: '^1.12.0'
 jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
       - name: "Check out Git repository"
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       - name: "Use Node.js 18"
-        uses: actions/setup-node@f1f314fca9dfce2769ece7d933488f076716723e #v1: v2.x available
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d #v3.8.1
         with:
           node-version: 18
       - name: "Install CLI tools"
@@ -56,9 +57,9 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: "Check out Git repository"
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       - name: "Use Node.js 18"
-        uses: actions/setup-node@f1f314fca9dfce2769ece7d933488f076716723e #v1: v2.x available
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d #v3.8.1
         with:
           node-version: 18
       - name: "Install CLI tools"
@@ -71,26 +72,26 @@ jobs:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        os: [ubuntu-latest, windows-latest, macos-latest]
+        os: [ubuntu-latest, macos-latest] # FIXME: Removed "windows-latest" due to 'Error: ENOENT: no such file or directory, open' error breaking at least on Node 20.0 constantly
         node-version: [16, 18, 20]
     steps:
       - name: "Check out Git repository"
-        if: github.repository == 'juice-shop/juice-shop' || github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '16'
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+        if: github.repository == 'juice-shop/juice-shop' || (github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '18')
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       - name: "Use Node.js ${{ matrix.node-version }}"
-        if: github.repository == 'juice-shop/juice-shop' || github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '16'
-        uses: actions/setup-node@f1f314fca9dfce2769ece7d933488f076716723e #v1: v2.x available
+        if: github.repository == 'juice-shop/juice-shop' || (github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '18')
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d #v3.8.1
         with:
           node-version: ${{ matrix.node-version }}
       - name: "Install CLI tools"
-        if: github.repository == 'juice-shop/juice-shop' || github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '16'
+        if: github.repository == 'juice-shop/juice-shop' || (github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '18')
         run: npm install -g @angular/cli@$ANGULAR_CLI_VERSION
       - name: "Install application"
-        if: github.repository == 'juice-shop/juice-shop' || github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '16'
+        if: github.repository == 'juice-shop/juice-shop' || (github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '18')
         run: npm install
       - name: "Execute unit tests"
-        if: github.repository == 'juice-shop/juice-shop' || github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '16'
-        uses: nick-invision/retry@45ba062d357edb3b29c4a94b456b188716f61020 #v2: 2.4.1 available
+        if: github.repository == 'juice-shop/juice-shop' || (github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '18')
+        uses: nick-invision/retry@943e742917ac94714d2f408a0e8320f2d1fcafcd #v2.8.3
         with:
           timeout_minutes: 15
           max_attempts: 3
@@ -100,8 +101,8 @@ jobs:
           cp build/reports/coverage/frontend-tests/lcov.info frontend-lcov.info
           cp build/reports/coverage/server-tests/lcov.info server-lcov.info
       - name: "Upload unit test coverage data"
-        if: github.repository == 'juice-shop/juice-shop' && github.event_name == 'push' && matrix.os == 'ubuntu-latest' && matrix.node-version == '16'
-        uses: actions/upload-artifact@6673cd052c4cd6fcf4b4e6e60ea986c889389535 #v3: v3.0.0 available
+        if: github.repository == 'juice-shop/juice-shop' && github.event_name == 'push' && matrix.os == 'ubuntu-latest' && matrix.node-version == '18'
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 #v3.1.3
         with:
           name: unit-test-lcov
           path: |
@@ -115,38 +116,33 @@ jobs:
         node-version: [16, 18, 20]
     steps:
       - name: "Check out Git repository"
-        if: github.repository == 'juice-shop/juice-shop' || github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '16'
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+        if: github.repository == 'juice-shop/juice-shop' || (github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '18')
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       - name: "Use Node.js ${{ matrix.node-version }}"
-        if: github.repository == 'juice-shop/juice-shop' || github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '16'
-        uses: actions/setup-node@f1f314fca9dfce2769ece7d933488f076716723e #v1: v2.x available
+        if: github.repository == 'juice-shop/juice-shop' || (github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '18')
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d #v3.8.1
         with:
           node-version: ${{ matrix.node-version }}
       - name: "Install CLI tools"
-        if: github.repository == 'juice-shop/juice-shop' || github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '16'
+        if: github.repository == 'juice-shop/juice-shop' || (github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '18')
         run: npm install -g @angular/cli@$ANGULAR_CLI_VERSION
       - name: "Install application"
-        if: github.repository == 'juice-shop/juice-shop' || github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '16'
+        if: github.repository == 'juice-shop/juice-shop' || (github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '18')
         run: npm install
       - name: "Execute integration tests"
-        if: github.repository == 'juice-shop/juice-shop' || github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '16'
-        uses: nick-invision/retry@45ba062d357edb3b29c4a94b456b188716f61020 #v2: 2.4.1 available
+        if: github.repository == 'juice-shop/juice-shop' || (github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '18')
+        uses: nick-invision/retry@943e742917ac94714d2f408a0e8320f2d1fcafcd #v2.8.3
+        env:
+          NODE_ENV: test
         with:
           timeout_minutes: 5
           max_attempts: 3
-          command: |
-            if [ "$RUNNER_OS" == "Windows" ]; then
-            set NODE_ENV=test
-            else
-            export NODE_ENV=test
-            fi
-            npm run frisby
-          shell: bash
+          command: npm run frisby
       - name: "Copy API test coverage data"
         run: cp build/reports/coverage/api-tests/lcov.info api-lcov.info
       - name: "Upload API test coverage data"
-        if: github.repository == 'juice-shop/juice-shop' && github.event_name == 'push' && matrix.os == 'ubuntu-latest' && matrix.node-version == '16'
-        uses: actions/upload-artifact@6673cd052c4cd6fcf4b4e6e60ea986c889389535 #v3: v3.0.0 available
+        if: github.repository == 'juice-shop/juice-shop' && github.event_name == 'push' && matrix.os == 'ubuntu-latest' && matrix.node-version == '18'
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 #v3.1.3
         with:
           name: api-test-lcov
           path: |
@@ -157,13 +153,13 @@ jobs:
     if: github.repository == 'juice-shop/juice-shop' && github.event_name == 'push'
     steps:
       - name: "Check out Git repository"
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       - name: "Download unit test coverage data"
-        uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 #v3: v3.0.0 available
+        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a #v3.0.2
         with:
           name: unit-test-lcov
       - name: "Download API test coverage data"
-        uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 #v3: v3.0.0 available
+        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a #v3.0.2
         with:
           name: api-test-lcov
       - name: "Publish coverage to Codeclimate"
@@ -183,18 +179,18 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Check out Git repository"
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       - name: "Use Node.js 18"
-        uses: actions/setup-node@f1f314fca9dfce2769ece7d933488f076716723e #v1: v2.x available
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d #v3.8.1
         with:
           node-version: 18
       - name: "Install CLI tools"
         run: npm install -g @angular/cli@$ANGULAR_CLI_VERSION
       - name: "Install application"
-        if: github.repository == 'juice-shop/juice-shop' || github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '16'
+        if: github.repository == 'juice-shop/juice-shop' || (github.repository != 'juice-shop/juice-shop' && matrix.os == 'ubuntu-latest' && matrix.node-version == '18')
         run: npm install
       - name: "Execute server tests for each custom configuration"
-        uses: nick-invision/retry@45ba062d357edb3b29c4a94b456b188716f61020 #v2: 2.4.1 available
+        uses: nick-invision/retry@943e742917ac94714d2f408a0e8320f2d1fcafcd #v2.8.3
         with:
           timeout_minutes: 10
           max_attempts: 3
@@ -219,9 +215,9 @@ jobs:
       fail-fast: false
     steps:
       - name: "Check out Git repository"
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       - name: "Use Node.js 18"
-        uses: actions/setup-node@f1f314fca9dfce2769ece7d933488f076716723e #v1: v2.x available
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d #v3.8.1
         with:
           node-version: 18
       - name: "Install CLI tools"
@@ -230,7 +226,7 @@ jobs:
         run: npm install
       - name: "Execute end-to-end tests on Ubuntu"
         if: ${{ matrix.os == 'ubuntu-latest' }}
-        uses: cypress-io/github-action@c662a784116e1a26360c4e1fc0a90feedb4b5ed3 #v3.1.0
+        uses: cypress-io/github-action@59810ebfa5a5ac6fcfdcfdf036d1cd4d083a88f2 #v6.5.0
         with:
           install: false
           browser: ${{ matrix.browser }}
@@ -244,7 +240,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: "Execute end-to-end tests on Mac"
         if: ${{ matrix.os == 'macos-latest' }}
-        uses: cypress-io/github-action@c662a784116e1a26360c4e1fc0a90feedb4b5ed3 #v3.1.0
+        uses: cypress-io/github-action@59810ebfa5a5ac6fcfdcfdf036d1cd4d083a88f2 #v6.5.0
         with:
           install: false
           browser: ${{ matrix.browser }}
@@ -260,24 +256,24 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Check out Git repository"
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       - name: "Use Node.js 18"
-        uses: actions/setup-node@f1f314fca9dfce2769ece7d933488f076716723e #v1: v2.x available
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d #v3.8.1
         with:
           node-version: 18
       - name: "Install CLI tools"
         run: |
           npm install -g @angular/cli@$ANGULAR_CLI_VERSION
+          npm install -g @cyclonedx/cyclonedx-npm@$CYCLONEDX_NPM_VERSION
           npm install -g grunt-cli
       - name: "Set packaging options for Grunt"
         run: |
           echo "PCKG_OS_NAME=linux" >> $GITHUB_ENV
-          echo "PCKG_NODE_VERSION=14" >> $GITHUB_ENV
+          echo "PCKG_NODE_VERSION=18" >> $GITHUB_ENV
           echo "PCKG_CPU_ARCH=x64" >> $GITHUB_ENV
       - name: "Package application"
         run: |
           npm install --production
-          npm install -g grunt-cli
           npm run package:ci
       - name: "Unpack application archive"
         run: |
@@ -294,7 +290,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Check out Git repository"
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       - name: "Execute smoke test on Docker"
         run: docker-compose -f docker-compose.test.yml up --exit-code-from sut
   docker:
@@ -303,13 +299,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Check out Git repository"
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       - name: "Set up QEMU"
-        uses: docker/setup-qemu-action@27d0a4f181a40b142cce983c5393082c365d1480 #v1: V1.2.0 available
+        uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 #v3.0.0
       - name: "Set up Docker Buildx"
-        uses: docker/setup-buildx-action@94ab11c41e45d028884a99163086648e898eed25 #v1
+        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 #v3.0.0
       - name: "Login to DockerHub"
-        uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9 #v1.10
+        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d #v3.0.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -323,7 +319,7 @@ jobs:
           echo "VCS_REF=`git rev-parse --short HEAD`" >> $GITHUB_ENV
           echo "BUILD_DATE=`date -u +”%Y-%m-%dT%H:%M:%SZ”`" >> $GITHUB_ENV
       - name: "Build and push for AMD64 and ARM64 processors"
-        uses: docker/build-push-action@a66e35b9cbcf4ad0ea91ffcaf7bbad63ad9e0229 #note: newer is available
+        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 #v5.0.0
         with:
           context: .
           file: ./Dockerfile
@@ -334,13 +330,14 @@ jobs:
           build-args: |
             VCS_REF=${{ env.VCS_REF }}
             BUILD_DATE=${{ env.BUILD_DATE }}
+            CYCLONEDX_NPM_VERSION=${{ env.CYCLONEDX_NPM_VERSION }}
   heroku:
     if: github.repository == 'juice-shop/juice-shop' && github.event_name == 'push' && (github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/master')
     needs: [test, api-test, e2e, custom-config-test]
     runs-on: ubuntu-latest
     steps:
       - name: "Check out Git repository"
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       - name: "Set Heroku app & branch for ${{ github.ref }}"
         run: |
           if [ "$GITHUB_REF" == "refs/heads/master" ]; then
@@ -351,7 +348,7 @@ jobs:
           echo "HEROKU_BRANCH=develop" >> $GITHUB_ENV
           fi
       - name: "Deploy ${{ github.ref }} to Heroku"
-        uses: akhileshns/heroku-deploy@79ef2ae4ff9b897010907016b268fd0f88561820 #v3.12.12
+        uses: akhileshns/heroku-deploy@9fd0f9faae4aa93a38d6f5e25b9128589f1371b0 #v3.12.14
         with:
           heroku_api_key: ${{ secrets.HEROKU_API_KEY }}
           heroku_app_name: ${{ env.HEROKU_APP }}
@@ -369,7 +366,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Slack workflow notification"
-        uses: Gamesight/slack-workflow-status@master
+        uses: Gamesight/slack-workflow-status@26a36836c887f260477432e4314ec3490a84f309 #v1.2.0
         with:
           repo_token: ${{ secrets.GITHUB_TOKEN }}
           slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 27990cf833b..ece9c151e45 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -18,13 +18,13 @@ jobs:
         language: [ 'javascript' ]
     steps:
     - name: Checkout repository
-      uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+      uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@v2
       with:
         languages: ${{ matrix.language }}
         queries: security-extended
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
+      uses: github/codeql-action/autobuild@v2
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@v2
diff --git a/.github/workflows/lint-fixer.yml b/.github/workflows/lint-fixer.yml
index 04d7fe760a9..49cce0cdcf7 100644
--- a/.github/workflows/lint-fixer.yml
+++ b/.github/workflows/lint-fixer.yml
@@ -7,11 +7,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: "Check out Git repository"
-      uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
-    - name: "Use Node.js 14"
-      uses: actions/setup-node@f1f314fca9dfce2769ece7d933488f076716723e #v1: v2.x available
+      uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
+    - name: "Use Node.js 18"
+      uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d #v3.8.1
       with:
-        node-version: 16
+        node-version: 18
     - name: "Install CLI tools"
       run: npm install -g @angular/cli
     - name: "Install application"
@@ -21,11 +21,11 @@ jobs:
         npm install --ignore-scripts --legacy-peer-deps
     - name: "Fix everything which can be fixed"
       run: 'npm run lint:fix'
-    - uses: stefanzweifel/git-auto-commit-action@v4.0.0
+    - uses: stefanzweifel/git-auto-commit-action@3ea6ae190baf489ba007f7c92608f33ce20ef04a #v4.16.0
       with:
         commit_message: "Auto-fix linting issues"
         branch: ${{ github.head_ref }}
         commit_options: '--signoff'
         commit_user_name: JuiceShopBot
         commit_user_email: 61591748+JuiceShopBot@users.noreply.github.com
-        commit_author: JuiceShopBot <61591748+JuiceShopBot@users.noreply.github.com>
\ No newline at end of file
+        commit_author: JuiceShopBot <61591748+JuiceShopBot@users.noreply.github.com>
diff --git a/.github/workflows/lock.yml b/.github/workflows/lock.yml
index 9d10e79c2f7..a2334efdb25 100644
--- a/.github/workflows/lock.yml
+++ b/.github/workflows/lock.yml
@@ -12,11 +12,11 @@ jobs:
   action:
     runs-on: ubuntu-latest
     steps:
-      - uses: dessant/lock-threads@f1a42f0f44eb83361d617a014663e1a76cf282d2 #note newer is available
+      - uses: dessant/lock-threads@be8aa5be94131386884a6da4189effda9b14aa21 #v4.0.1
         with:
           issue-lock-comment: >
             This thread has been automatically locked because it has not had
             recent activity after it was closed. :lock: Please open a new issue
             for regressions or related bugs.
           issue-lock-reason: ''
-          pr-lock-reason: ''
\ No newline at end of file
+          pr-lock-reason: ''
diff --git a/.github/workflows/rebase.yml b/.github/workflows/rebase.yml
index 06880289535..1e812602115 100644
--- a/.github/workflows/rebase.yml
+++ b/.github/workflows/rebase.yml
@@ -10,11 +10,11 @@ jobs:
     if: github.event.issue.pull_request != '' && contains(github.event.comment.body, '/rebase')
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@master
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
         with:
           fetch-depth: 0
       - name: Automatic Rebase
-        uses: cirrus-actions/rebase@1.2
+        uses: cirrus-actions/rebase@b87d48154a87a85666003575337e27b8cd65f691 #v1.8
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
   # https://github.community/t5/GitHub-Actions/Workflow-is-failing-if-no-job-can-be-ran-due-to-condition/m-p/38186#M3250
@@ -23,4 +23,4 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Always run
-        run: echo "This job is used to prevent the workflow to fail when all other jobs are skipped."
\ No newline at end of file
+        run: echo "This job is used to prevent the workflow to fail when all other jobs are skipped."
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7e79dd9a7b6..101d65fcc89 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -3,6 +3,9 @@ on:
   push:
     tags:
       - v*
+env:
+  ANGULAR_CLI_VERSION: 15
+  CYCLONEDX_NPM_VERSION: '^1.12.0'
 jobs:
   package:
     runs-on: ${{ matrix.os }}
@@ -12,14 +15,15 @@ jobs:
         node-version: [16, 18, 20]
     steps:
       - name: "Check out Git repository"
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       - name: "Use Node.js ${{ matrix.node-version }}"
-        uses: actions/setup-node@f1f314fca9dfce2769ece7d933488f076716723e #v1: v2.x available
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d #v3.8.1
         with:
           node-version: ${{ matrix.node-version }}
       - name: "Install CLI tools"
         run: |
-          npm install -g @angular/cli
+          npm install -g @angular/cli@$ANGULAR_CLI_VERSION
+          npm install -g @cyclonedx/cyclonedx-npm@$CYCLONEDX_NPM_VERSION
           npm install -g grunt-cli
       - name: "Set packaging options for Grunt"
         run: |
@@ -36,10 +40,9 @@ jobs:
       - name: "Package application"
         run: |
           npm install --production
-          npm install -g grunt-cli
           npm run package:ci
       - name: 'Attach packaged archive to tag release'
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 #v0.1.15
         with:
           draft: true
           files: dist/*
@@ -49,25 +52,25 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Check out Git repository"
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       - name: "Set up QEMU"
-        uses: docker/setup-qemu-action@27d0a4f181a40b142cce983c5393082c365d1480 #v1: V1.2.0 available
+        uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 #v3.0.0
       - name: "Set up Docker Buildx"
-        uses: docker/setup-buildx-action@94ab11c41e45d028884a99163086648e898eed25 #v1
+        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 #v3.0.0
       - name: "Login to DockerHub"
-        uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9 #v1.10
+        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d #v3.0.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       - name: "Get tag name"
         id: tag
-        uses: dawidd6/action-get-tag@v1
+        uses: dawidd6/action-get-tag@727a6f0a561be04e09013531e73a3983a65e3479 #v1.1.0 TODO Action is archived and should be replaced eventually
       - name: "Set labels for ${{ github.ref }}"
         run: |
           echo "VCS_REF=`git rev-parse --short HEAD`" >> $GITHUB_ENV
           echo "BUILD_DATE=`date -u +”%Y-%m-%dT%H:%M:%SZ”`" >> $GITHUB_ENV
       - name: "Build and push for AMD64 and ARM64 processors"
-        uses: docker/build-push-action@a66e35b9cbcf4ad0ea91ffcaf7bbad63ad9e0229 #note: newer is available
+        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 #v5.0.0
         with:
           context: .
           file: ./Dockerfile
@@ -78,6 +81,7 @@ jobs:
           build-args: |
             VCS_REF=${{ env.VCS_REF }}
             BUILD_DATE=${{ env.BUILD_DATE }}
+            CYCLONEDX_NPM_VERSION=${{ env.CYCLONEDX_NPM_VERSION }}
   notify-slack:
     if: always()
     needs:
@@ -86,7 +90,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Slack workflow notification"
-        uses: Gamesight/slack-workflow-status@master
+        uses: Gamesight/slack-workflow-status@26a36836c887f260477432e4314ec3490a84f309 #v1.2.0
         with:
           repo_token: ${{ secrets.GITHUB_TOKEN }}
           slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 41e4ce06c26..8d1151fa6fd 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -7,7 +7,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v6
+      - uses: actions/stale@5ebf00ea0e4c1561e9b43a292ed34424fb1d4578 #v6.0.1 TODO Upgrade to v8.0.0 or later
         with:
           stale-issue-message: >
             This issue has been automatically marked as `stale` because it has not had
diff --git a/.github/workflows/update-challenges-www.yml b/.github/workflows/update-challenges-www.yml
index eb901c0ab1c..8e0e6084a2f 100644
--- a/.github/workflows/update-challenges-www.yml
+++ b/.github/workflows/update-challenges-www.yml
@@ -3,7 +3,7 @@ name: "Update challenges on owasp-juice.shop"
 on:
   push:
     branches: [ master ]
-    paths: 
+    paths:
       - 'data/static/challenges.yml'
 
 jobs:
@@ -12,17 +12,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Check out Git repository
-      uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+      uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       with:
         token: ${{ secrets.BOT_TOKEN }}
         repository: OWASP/www-project-juice-shop
-        branch: master
+        ref: master
     - name: Update challenges.yml
       run: |
         cd _data/
         rm challenges.yml
         wget https://raw.githubusercontent.com/juice-shop/juice-shop/master/data/static/challenges.yml
-    - uses: stefanzweifel/git-auto-commit-action@v4.0.0
+    - uses: stefanzweifel/git-auto-commit-action@3ea6ae190baf489ba007f7c92608f33ce20ef04a #v4.16.0
       with:
         commit_message: "Auto-update challenges.yml from ${{ github.sha }}"
         branch: master
diff --git a/.github/workflows/update-news-www.yml b/.github/workflows/update-news-www.yml
index 37741cdfc14..2077a9807e8 100644
--- a/.github/workflows/update-news-www.yml
+++ b/.github/workflows/update-news-www.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Check out Git repository
-      uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+      uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
       with:
         token: ${{ secrets.BOT_TOKEN }}
         repository: OWASP/www-project-juice-shop
@@ -17,7 +17,7 @@ jobs:
     - name: Update tab_news.md
       run: |
         sed -i 's/<!-- next:juice-shop -->/<!-- next:juice-shop -->\n* ${{ github.event.release.published_at }}: juice-shop [`${{ github.event.release.tag_name }}`](https:\/\/github.com\/juice-shop\/juice-shop\/releases\/tag\/${{ github.event.release.tag_name }})/' tab_news.md
-    - uses: stefanzweifel/git-auto-commit-action@v4.0.0
+    - uses: stefanzweifel/git-auto-commit-action@3ea6ae190baf489ba007f7c92608f33ce20ef04a #v4.16.0
       with:
         commit_message: "Add juice-shop ${{ github.event.release.tag_name }} release notes to tab_news.md"
         branch: master
diff --git a/.github/workflows/zap_scan.yml b/.github/workflows/zap_scan.yml
index a9c122c47c4..e18fd174a0b 100644
--- a/.github/workflows/zap_scan.yml
+++ b/.github/workflows/zap_scan.yml
@@ -10,11 +10,11 @@ jobs:
     name: Scan Juice Shop preview instance on Heroku
     steps:
       - name: Check out Git repository
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f #v2: v2.3.4 available
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
         with:
           ref: develop
       - name: ZAP Scan
-        uses: zaproxy/action-baseline@v0.3.0
+        uses: zaproxy/action-baseline@41aee98ebc7cf2802c3beae4e7d4336413a21e43 # v0.9.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           target: 'https://preview.owasp-juice.shop'
diff --git a/.gitignore b/.gitignore
index d633d59fa3b..1ffe2970762 100644
--- a/.gitignore
+++ b/.gitignore
@@ -30,6 +30,8 @@ vagrant/.vagrant/
 JSON
 JSON.map
 frontend/src/**/*.js
+/bom.json
+/bom.xml
 
 # IDEs
 .idea/
@@ -59,3 +61,6 @@ config/*.yml
 !config/unsafe.yml
 !config/tutorial.yml
 !config/oss.yml
+
+# System Files
+.DS_Store
\ No newline at end of file
diff --git a/.imgbotconfig b/.imgbotconfig
deleted file mode 100644
index 91a2f4fe002..00000000000
--- a/.imgbotconfig
+++ /dev/null
@@ -1,7 +0,0 @@
-{
-  "ignoredFiles": [
-    "frontend/src/assets/public/images/carousel/5.png",
-    "frontend/src/assets/public/images/products/3d_keychain.jpg",
-    "frontend/src/assets/public/images/uploads/favorite-hiking-place.png"
-  ]
-}
diff --git a/.zap/rules.tsv b/.zap/rules.tsv
index 1007ceaf7e3..007cfe35d21 100644
--- a/.zap/rules.tsv
+++ b/.zap/rules.tsv
@@ -13,3 +13,7 @@
 10049	IGNORE	(Non-Storable Content)
 10110	IGNORE	(Dangerous JS Functions)
 90004	IGNORE	(Insufficient Site Isolation Against Spectre Vulnerability)
+90005	IGNORE	(Sec-Fetch-Dest Header is Missing)
+90005	IGNORE	(Sec-Fetch-Mode Header is Missing)
+90005	IGNORE	(Sec-Fetch-Site Header is Missing)
+90005	IGNORE	(Sec-Fetch-User Header is Missing)
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 91f0f4872f9..5062f140741 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -23,9 +23,9 @@ The minimum requirements for code contributions are:
 
 You can find our detailed contribution guidelines over here:
 
-<https://pwning.owasp-juice.shop/part3/contribution.html>
+<https://pwning.owasp-juice.shop/companion-guide/latest/part3/contribution.html>
 
 ## I18N Contributions
 
 Learn all about our crowd-sourced [translation project on Crowdin](https://crowdin.com/project/owasp-juice-shop)
-here: <https://pwning.owasp-juice.shop/part3/translation.html>
+here: <https://pwning.owasp-juice.shop/companion-guide/latest/part3/translation.html>
diff --git a/Dockerfile b/Dockerfile
index 69c555827b1..54ebc290df8 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:18 as installer
+FROM node:18-buster as installer
 COPY . /juice-shop
 WORKDIR /juice-shop
 RUN npm i -g typescript ts-node
@@ -15,7 +15,20 @@ RUN rm data/chatbot/botDefaultTrainingData.json || true
 RUN rm ftp/legal.md || true
 RUN rm i18n/*.json || true
 
-FROM gcr.io/distroless/nodejs:18
+ARG CYCLONEDX_NPM_VERSION=latest
+RUN npm install -g @cyclonedx/cyclonedx-npm@$CYCLONEDX_NPM_VERSION
+RUN npm run sbom
+
+# workaround for libxmljs startup error
+FROM node:18-buster as libxmljs-builder
+WORKDIR /juice-shop
+RUN apt-get update && apt-get install -y build-essential python3
+COPY --from=installer /juice-shop/node_modules ./node_modules
+RUN rm -rf node_modules/libxmljs2/build && \
+  cd node_modules/libxmljs2 && \
+  npm run build
+
+FROM gcr.io/distroless/nodejs18-debian11
 ARG BUILD_DATE
 ARG VCS_REF
 LABEL maintainer="Bjoern Kimminich <bjoern.kimminich@owasp.org>" \
@@ -25,13 +38,14 @@ LABEL maintainer="Bjoern Kimminich <bjoern.kimminich@owasp.org>" \
     org.opencontainers.image.vendor="Open Web Application Security Project" \
     org.opencontainers.image.documentation="https://help.owasp-juice.shop" \
     org.opencontainers.image.licenses="MIT" \
-    org.opencontainers.image.version="15.0.0" \
+    org.opencontainers.image.version="15.3.0" \
     org.opencontainers.image.url="https://owasp-juice.shop" \
     org.opencontainers.image.source="https://github.com/juice-shop/juice-shop" \
     org.opencontainers.image.revision=$VCS_REF \
     org.opencontainers.image.created=$BUILD_DATE
 WORKDIR /juice-shop
 COPY --from=installer --chown=65532:0 /juice-shop .
+COPY --chown=65532:0 --from=libxmljs-builder /juice-shop/node_modules/libxmljs2 ./node_modules/libxmljs2
 USER 65532
 EXPOSE 3000
 CMD ["/juice-shop/build/app.js"]
diff --git a/Gruntfile.js b/Gruntfile.js
index a6b6bcac0ce..2abb7cbc269 100644
--- a/Gruntfile.js
+++ b/Gruntfile.js
@@ -42,12 +42,15 @@ module.exports = function (grunt) {
               'config.schema.yml',
               'build/**',
               '!build/reports/**',
+              'bom.json',
+              'bom.xml',
               'config/*.yml',
               'data/*.ts',
               'data/static/**',
               'data/chatbot/.gitkeep',
               'encryptionkeys/**',
               'frontend/dist/frontend/**',
+              'frontend/dist/bom/**',
               'frontend/src/**/*.ts',
               'ftp/**',
               'i18n/.gitkeep',
diff --git a/HALL_OF_FAME.md b/HALL_OF_FAME.md
index 94669264fca..d6ddebc4fd6 100644
--- a/HALL_OF_FAME.md
+++ b/HALL_OF_FAME.md
@@ -11,7 +11,7 @@
 
 ## GitHub Contributors
 
-As reported by [`git-stats -a -s '2014'`](https://www.npmjs.com/package/git-stats) analysis of `master` as of Fri, 19 May
+As reported by [`git-stats -a -s '2014'`](https://www.npmjs.com/package/git-stats) analysis of `master` as of Fri, 08 Sep
 2023 after deduplication with `.mailmap`.
 
 ![Top git contributors](screenshots/git-stats.png)
@@ -79,6 +79,7 @@ Additional thanks goes to the contractors we were able to hire for specific work
   and
   [flyer](https://github.com/OWASP/owasp-swag/tree/master/projects/juice-shop/flyers)
   artwork by [logicainfo](https://99designs.de/profiles/logicainfo)
+* [Score Board redesign](https://www.figma.com/file/DwC5ErhRz6gb3eTZEYYriS/Juiceshop-Scoreboard?type=design&node-id=0-1&mode=design) by Vibhuti Arora
 
 ## Stargazers (over time)
 
diff --git a/README.md b/README.md
index 408174dd00d..ef0fdfc554f 100644
--- a/README.md
+++ b/README.md
@@ -10,7 +10,7 @@
 [![Maintainability](https://api.codeclimate.com/v1/badges/6206c8f3972bcc97a033/maintainability)](https://codeclimate.com/github/juice-shop/juice-shop/maintainability)
 [![Code Climate technical debt](https://img.shields.io/codeclimate/tech-debt/juice-shop/juice-shop)](https://codeclimate.com/github/juice-shop/juice-shop/trends/technical_debt)
 [![Cypress tests](https://img.shields.io/endpoint?url=https://dashboard.cypress.io/badge/simple/3hrkhu/master&style=flat&logo=cypress)](https://dashboard.cypress.io/projects/3hrkhu/runs)
-[![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/223/badge)](https://bestpractices.coreinfrastructure.org/projects/223)
+[![OpenSSF Best Practices](https://www.bestpractices.dev/projects/223/badge)](https://www.bestpractices.dev/projects/223)
 ![GitHub stars](https://img.shields.io/github/stars/juice-shop/juice-shop.svg?label=GitHub%20%E2%98%85&style=flat)
 [![Contributor Covenant](https://img.shields.io/badge/Contributor%20Covenant-v2.0%20adopted-ff69b4.svg)](CODE_OF_CONDUCT.md)
 
@@ -63,7 +63,7 @@ For a detailed introduction, full list of features and architecture overview ple
 ## Setup
 
 > You can find some less common installation variations in
-> [the _Running OWASP Juice Shop_ documentation](https://pwning.owasp-juice.shop/part1/running.html).
+> [the _Running OWASP Juice Shop_ documentation](https://pwning.owasp-juice.shop/companion-guide/latest/part1/running.html).
 
 ### From Sources
 
@@ -180,14 +180,6 @@ gcloud compute firewall-rules create juice-rule --allow tcp:3000
 If you have forked the Juice Shop repository on GitHub, the _Deploy to
 Heroku_ button will deploy your forked version of the application.
 
-### Gitpod 
-
-1. Login to [gitpod.io](https://gitpod.io) and use <https://gitpod.io/#https://github.com/juice-shop/juice-shop/> to start a new workspace. If you want to spin up a forked repository, your URL needs to be adjusted accordingly.
-
-2. After the Gitpod workspace is loaded, Gitpod tasks is still running to install `npm install`  and launch the website. Despite Gitpod showing your workspace state already as _Running_, you need to wait until the installation process is done, before the website becomes accessable. The _Open Preview Window (Internal Browser)_, will open automatically and refresh itself automatically when the server has started.
-
-3. Your Juice Shop instance is now also available at `https://3000-<GITPOD_WORKSPACE_ID>.<GITPOD_HOSTING_ZONE>.gitpod.io`.
-
 ## Demo
 
 Feel free to have a look at the latest version of OWASP Juice Shop:
@@ -209,14 +201,16 @@ OWASP Juice Shop officially supports the following versions of
 [node.js LTS schedule](https://github.com/nodejs/LTS) as close as possible. Docker images and packaged distributions are
 offered accordingly.
 
-| node.js | Supported            | Tested             | [Packaged Distributions](#packaged-distributions) | [Docker images](#docker-container) from `master` | [Docker images](#docker-container) from `develop` |
-|:--------|:---------------------|:-------------------|:--------------------------------------------------|:-------------------------------------------------|:--------------------------------------------------|
-| 20.x    | :x:                  | :x:                |                                                   |                                                  |                                                   |
-| 19.x    | (:heavy_check_mark:) | :heavy_check_mark: |                                                   |                                                  |                                                   |
-| 18.x    | :heavy_check_mark:   | :heavy_check_mark: | Windows (`x64`), MacOS (`x64`), Linux (`x64`)     | `latest` (`linux/amd64`, `linux/arm64`)          | `snapshot` (`linux/amd64`, `linux/arm64`)         |
-| 17.x    | (:heavy_check_mark:) | :x:                |                                                   |                                                  |                                                   |
-| 16.x    | :heavy_check_mark:   | :heavy_check_mark: | Windows (`x64`), MacOS (`x64`), Linux (`x64`)     |                                                  |                                                   |
-| <16.x   | :x:                  | :x:                |                                                   |                                                  |                                                   |
+| node.js | Supported            | Tested                                                       | [Packaged Distributions](#packaged-distributions) | [Docker images](#docker-container) from `master` | [Docker images](#docker-container) from `develop` |
+|:--------|:---------------------|:-------------------------------------------------------------|:--------------------------------------------------|:-------------------------------------------------|:--------------------------------------------------|
+| 21.x    | :x:                  | :x:                                                          |                                                   |                                                  |                                                   |
+| 20.x    | :heavy_check_mark:   | :heavy_check_mark:                                           | Windows (`x64`), MacOS (`x64`), Linux (`x64`)     |                                                  |                                                   |
+| 20.6.0  | :x:                  | :bug: https://github.com/angular/angular-cli/issues/25782 |                                                   |                                                  |                                                   |
+| 19.x    | (:heavy_check_mark:) | :x:                                                          |                                                   |                                                  |                                                   |
+| 18.x    | :heavy_check_mark:   | :heavy_check_mark:                                           | Windows (`x64`), MacOS (`x64`), Linux (`x64`)     | `latest` (`linux/amd64`, `linux/arm64`)          | `snapshot` (`linux/amd64`, `linux/arm64`)         |
+| 17.x    | (:heavy_check_mark:) | :x:                                                          |                                                   |                                                  |                                                   |
+| 16.x    | :heavy_check_mark:   | :heavy_check_mark:                                           | Windows (`x64`), MacOS (`x64`), Linux (`x64`)     |                                                  |                                                   |
+| <16.x   | :x:                  | :x:                                                          |                                                   |                                                  |                                                   |
 
 Juice Shop is automatically tested _only on the latest `.x` minor version_ of each node.js version mentioned above!
 There is no guarantee that older minor node.js releases will always work with Juice Shop!
@@ -250,11 +244,12 @@ and much more is also included.
 and is available **for free** in PDF, Kindle and ePub format on LeanPub. You can also
 [browse the full content online](https://pwning.owasp-juice.shop)!
 
-[![Pwning OWASP Juice Shop Cover](https://raw.githubusercontent.com/bkimminich/pwning-juice-shop/master/cover_small.jpg)](https://leanpub.com/juice-shop)
+[<img alt="Pwning OWASP Juice Shop cover" src="https://raw.githubusercontent.com/juice-shop/pwning-juice-shop/master/docs/modules/ROOT/assets/images/cover.jpg" width="200"/>](https://leanpub.com/juice-shop)
+[<img alt="Pwning OWASP Juice Shop back cover" src="https://raw.githubusercontent.com/juice-shop/pwning-juice-shop/master/docs/modules/ROOT/assets/images/introduction/back.jpg" width="200"/>](https://leanpub.com/juice-shop)
 
 ## Contributing
 
-[![GitHub contributors](https://img.shields.io/github/contributors/bkimminich/juice-shop.svg)](https://github.com/bkimminich/juice-shop/graphs/contributors)
+[![GitHub contributors](https://img.shields.io/github/contributors/bkimminich/juice-shop.svg)](https://github.com/juice-shop/juice-shop/graphs/contributors)
 [![JavaScript Style Guide](https://img.shields.io/badge/code%20style-standard-brightgreen.svg)](http://standardjs.com/)
 [![Crowdin](https://d322cqt584bo4o.cloudfront.net/owasp-juice-shop/localized.svg)](https://crowdin.com/project/owasp-juice-shop)
 ![GitHub issues by-label](https://img.shields.io/github/issues/bkimminich/juice-shop/help%20wanted.svg)
diff --git a/REFERENCES.md b/REFERENCES.md
index f4716eaeb62..471fb59a2bf 100644
--- a/REFERENCES.md
+++ b/REFERENCES.md
@@ -44,6 +44,7 @@ mentioned or used!
 
 ### Pod- & Webcasts
 
+* [ZAP Chat 05 Modern Apps Part 1](https://www.youtube.com/watch?v=Rq_d7OLmMfw) on [ZAP](https://www.youtube.com/@psiinon) with Simon Bennetts
 * [OWASP Spotlight - Project 25 - OWASP Juice Shop](https://www.youtube.com/watch?v=--50rE76EeA) by Vandana Verma with
   Björn Kimminich
 * [Visual application security testing with ZAP and Simon Bennetts #DemoDays](https://youtu.be/4xBJsRNV9ds) by [GitHub](https://www.youtube.com/channel/UC7c3Kb6jYCRj4JOHHZTxKsQ) with Simon Bennetts :mega:
@@ -131,8 +132,9 @@ mentioned or used!
 
 ### Blogs & Articles
 
-*  Article on [Cobalt.io Developer Best Practices](https://developer.cobalt.io/bestpractices/): [Validate User Input](https://developer.cobalt.io/bestpractices/input-validation/)
-*  Blog post (:de:) on [Dev-Insider](https://www.dev-insider.de/): [OWASP Juice Shop lädt zum Hacken ein](https://www.dev-insider.de/owasp-juice-shop-laedt-zum-hacken-ein-a-968485/) :godmode:
+* Blog post on [OWASP.org](https://owasp.org) by Björn Kimminich: [OWASP Juice Shop 2023 achievements and beyond](https://owasp.org/blog/2023/10/10/juice-shop-2023.html)
+* Article on [Cobalt.io Developer Best Practices](https://developer.cobalt.io/bestpractices/): [Validate User Input](https://developer.cobalt.io/bestpractices/input-validation/)
+* Blog post (:de:) on [Dev-Insider](https://www.dev-insider.de/): [OWASP Juice Shop lädt zum Hacken ein](https://www.dev-insider.de/owasp-juice-shop-laedt-zum-hacken-ein-a-968485/) :godmode:
 * Blog post on [OWASP.org](https://owasp.org) by Björn Kimminich:
   [OWASP Juice Shop v10.0.0 released](https://owasp.org/2020/03/17/juice-shop-v10.html)
 * [20+ Free Resources To Legally Practice Your Ethical Hacking Skills](https://blog.elearnsecurity.com/free-resources-to-legally-practice-ethical-hacking.html?utm_source=twitter&utm_medium=social&utm_campaign=eh_resources_blogpost)
@@ -203,6 +205,7 @@ mentioned or used!
 
 ## Lectures and Trainings
 
+* [Introduction to OWASP Top 10 Security Risks](https://www.pluralsight.com/cloud-guru/courses/introduction-to-owasp-top-10-security-risks) course by Chris Jackson :dollar:
 * Courses on the [freeCodeCamp.org](https://www.YouTube.com/channel/UC8butISFwT-Wl7EV0hUK0BQ)
   YouTube channel
   * [Ethical Hacking 101: Web App Penetration Testing - a full course for beginners](https://youtu.be/2_lswM1S264) :godmode: by HackerSploit
@@ -275,6 +278,12 @@ mentioned or used!
 
 ### [Google Summer of Code](http://owasp.org/gsoc)
 
+* Student projects from
+  [Google Summer of Code 2023](https://summerofcode.withgoogle.com/archive/2023/projects)
+  * [Companion Guide Tech Stack](https://summerofcode.withgoogle.com/organizations/owasp-foundation/projects/details/h2der3Mf)
+    by Parth Nanda (mentored by Jannik Hollenbach, Björn Kimminich and Shubham Palriwala)
+  * [Hacking the Blockchain: Building Web3 Challenges for OWASP Juice Shop](https://summerofcode.withgoogle.com/organizations/owasp-foundation/projects/details/yabiWLkF)
+    by Rishabh Keshan (mentored by Shubham Palriwala and Björn Kimminich)
 * Student project from
   [Google Summer of Code 2022](https://summerofcode.withgoogle.com/archive/2022/projects)
     * [Replacement for Protractor end-to-end & Frisby API test suite to Cypress](https://summerofcode.withgoogle.com/organizations/owasp-foundation/projects/details/2J1Xedwf)
@@ -302,11 +311,18 @@ mentioned or used!
 
 > Upcoming events are marked with :date:. The availability of link destinations for past events cannot be guaranteed. 
 
+#### 2024
+
+* :date: [OWASP Juice Shop - An Open Source Software and security Fairytale](https://ndc-security.com/agenda/owasp-juice-shop-an-open-source-software-and-security-fairytale-09mg/09ko186cud8) by Björn Kimminich, [NDC Security 2024](https://ndc-security.com/), 11.01.2024
+
 #### 2023
 
-* :date: [Track keynote: OWASP Juice Shop](https://sikkerhetsfestivalen.no/program-2023) by Björn Kimminich, [Sikkerhetsfestivalen 2023](https://sikkerhetsfestivalen.no/). 29.08.2023
-* :date: [Juice Shop Update³](https://god.owasp.de/2023/schedule/index.html) by Björn Kimminich, [German OWASP Day 2023](https://god.owasp.de/2023). 31.05.2023
-* :date: [Juice Shop Training: Train the Trainer Edition](https://god.owasp.de/2023/schedule/index.html) with Björn Kimminich, [German OWASP Day 2023](https://god.owasp.de/2023). 30.05.2023
+* :date: [Juice Shop Training: Train the Trainer Edition](http://www.owaspbenelux.eu/program/training#Bj%C3%B6rn-Kimminich) with Björn Kimminich, [OWASP BeNeLux Days 2023](http://www.owaspbenelux.eu/). 24.11.2023
+* :date: [OWASP Juice Shop - An Open Source Software (and security) Fairytale](http://www.owaspbenelux.eu/program/talks#Bj%C3%B6rn-Kimminich) by Björn Kimminich, [OWASP BeNeLux Days 2023](http://www.owaspbenelux.eu/). 23.11.2023
+* [How Vulnerable is Juice Shop? A Secure Code Review of Insecure Code](https://www.nationalcybersummit.com/Program/2023-Agenda) by Joshua Beck, [National Cyber Summit 2023](https://www.nationalcybersummit.com/Home). 20.09.2023 
+* [Track keynote: OWASP Juice Shop](https://sikkerhetsfestivalen.no/program-2023) by Björn Kimminich, [Sikkerhetsfestivalen 2023](https://sikkerhetsfestivalen.no/). 29.08.2023
+* [Juice Shop Update³](https://god.owasp.de/2023/schedule/index.html) by Björn Kimminich, [German OWASP Day 2023](https://god.owasp.de/2023). 31.05.2023 [YouTube](https://youtu.be/87DuRYwXtxk)
+* [Juice Shop Training: Train the Trainer Edition](https://god.owasp.de/2023/schedule/index.html) with Björn Kimminich, [German OWASP Day 2023](https://god.owasp.de/2023). 30.05.2023
 * [OWASP Juice Shop](https://www.meetup.com/owasp-chapter-netherlands-meetup/events/292323208)
   by Björn Kimminich, [April 2023 OWASP Chapter Netherlands Meetup](https://www.meetup.com/owasp-chapter-netherlands-meetup/), 20.04.2023 [YouTube](https://www.youtube.com/live/Bhp3LpgtNZ4?feature=share&t=3856)
 * [Squeezing the last drop out of OWASP Juice Shop](https://owasp2023globalappsecdublin.sched.com/event/1FWfq/squeezing-the-last-drop-out-of-owasp-juice-shop) by Björn Kimminich, [OWASP 2023 Global AppSec Dublin](https://dublin.globalappsec.org/), 15.02.2023  [YouTube](https://youtu.be/m1f2fPC8hLU)
diff --git a/SECURITY.md b/SECURITY.md
index 93728b40890..235b918a048 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -12,8 +12,8 @@ We provide security patches for the latest released minor version.
 
 | Version | Supported          |
 |:--------|:-------------------|
-| 15.0.x  | :white_check_mark: |
-| <15.0   | :x:                |
+| 15.3.x  | :white_check_mark: |
+| <15.3   | :x:                |
 
 ## Reporting a Vulnerability
 
diff --git a/config.schema.yml b/config.schema.yml
index 3e6e50c2dc5..52707c4fe80 100644
--- a/config.schema.yml
+++ b/config.schema.yml
@@ -67,14 +67,6 @@ application:
     message:
       type: string
   cookieConsent:
-    backgroundColor:
-      type: string
-    textColor:
-      type: string
-    buttonColor:
-      type: string
-    buttonTextColor:
-      type: string
     message:
       type: string
     dismissText:
@@ -499,6 +491,26 @@ ctf:
         type: string
       code:
         type: string
+    nftUnlockChallenge:
+      name:
+        type: string
+      code:
+        type: string
+    nftMintChallenge:
+      name:
+        type: string
+      code:
+        type: string
+    web3WalletChallenge:
+      name:
+        type: string
+      code:
+        type: string
+    web3SandboxChallenge:
+      name:
+        type: string
+      code:
+        type: string
     securityPolicyChallenge:
       name:
         type: string
diff --git a/config/7ms.yml b/config/7ms.yml
index a97e85f3a2d..891409b23a6 100644
--- a/config/7ms.yml
+++ b/config/7ms.yml
@@ -28,10 +28,6 @@ application:
   welcomeBanner:
     showOnFirstStart: false
   cookieConsent:
-    backgroundColor: '#0395d5'
-    textColor: '#ffffff'
-    buttonColor: '#b3b3b3'
-    buttonTextColor: '#000000'
     message: 'If you stay on this website for more than 7 minutes our cookies will start tracking you.'
     dismissText: 'I`ll be long gone by then!'
     linkText: 'But I want to stay an arbitrary number of minutes!'
diff --git a/config/addo.yml b/config/addo.yml
index 096b8efb69b..223bc1196e8 100644
--- a/config/addo.yml
+++ b/config/addo.yml
@@ -25,10 +25,6 @@ application:
   welcomeBanner:
     showOnFirstStart: false
   cookieConsent:
-    backgroundColor: '#c2185b'
-    textColor: '#ffffff'
-    buttonColor: '#b0bec5'
-    buttonTextColor: '#000000'
     message: 'Taste our 150 practitioner-baked cookies with 5 tracking flavors!'
     dismissText: 'Register for 24/7 cookies!'
     linkText: 'Yum, tell me more!'
diff --git a/config/bodgeit.yml b/config/bodgeit.yml
index 04bb3e119e2..cece8b30dda 100644
--- a/config/bodgeit.yml
+++ b/config/bodgeit.yml
@@ -25,10 +25,6 @@ application:
   welcomeBanner:
     showOnFirstStart: false
   cookieConsent:
-    backgroundColor: '#000000'
-    textColor: '#ffffff'
-    buttonColor: '#ffffff'
-    buttonTextColor: '#000000'
     message: 'This website is so legacy, it might even run without cookies.'
     dismissText: 'Bodge it!'
     linkText: 'Lega-what?'
diff --git a/config/default.yml b/config/default.yml
index 86038cb3dba..e12a16ad5b7 100644
--- a/config/default.yml
+++ b/config/default.yml
@@ -36,10 +36,6 @@ application:
     title: 'Welcome to OWASP Juice Shop!'
     message: "<p>Being a web application with a vast number of intended security vulnerabilities, the <strong>OWASP Juice Shop</strong> is supposed to be the opposite of a best practice or template application for web developers: It is an awareness, training, demonstration and exercise tool for security risks in modern web applications. The <strong>OWASP Juice Shop</strong> is an open-source project hosted by the non-profit <a href='https://owasp.org' target='_blank'>Open Web Application Security Project (OWASP)</a> and is developed and maintained by volunteers. Check out the link below for more information and documentation on the project.</p><h1><a href='https://owasp-juice.shop' target='_blank'>https://owasp-juice.shop</a></h1>"
   cookieConsent:
-    backgroundColor: '#546e7a'
-    textColor: '#ffffff'
-    buttonColor: '#558b2f'
-    buttonTextColor: '#ffffff'
     message: 'This website uses fruit cookies to ensure you get the juiciest tracking experience.'
     dismissText: 'Me want it!'
     linkText: 'But me wait!'
@@ -412,6 +408,10 @@ memories:
     caption: 'My old workplace...'
     geoStalkingVisualSecurityQuestion: 10
     geoStalkingVisualSecurityAnswer: 'ITsec'
+  -
+    image: 'BeeHaven.png'
+    caption: 'Welcome to the Bee Haven (/#/bee-haven)🐝'
+    user: evm
 ctf:
   showFlagsInNotifications: false
   showCountryDetailsInNotifications: none # Options: none  name  flag  both
diff --git a/config/fbctf.yml b/config/fbctf.yml
index 304a2a06726..debcedc9c22 100644
--- a/config/fbctf.yml
+++ b/config/fbctf.yml
@@ -320,4 +320,16 @@ ctf:
       code: ZM
     emptyUserRegistration:
       name: Kenya
-      code: KE
\ No newline at end of file
+      code: KE
+    nftUnlockChallenge:
+      name: Afghanistan
+      code: AF
+    nftMintChallenge:
+      name: United Arab Emirates
+      code: UAE
+    web3WalletChallenge:
+      name: Mexico
+      code: MEX
+    web3SandboxChallenge:
+      name: France
+      code: FR
diff --git a/config/mozilla.yml b/config/mozilla.yml
index 740a72d0d3f..ad68be38b4e 100644
--- a/config/mozilla.yml
+++ b/config/mozilla.yml
@@ -26,10 +26,6 @@ application:
   welcomeBanner:
     showOnFirstStart: false
   cookieConsent:
-    backgroundColor: '#e95420'
-    textColor: '#ffffff'
-    buttonColor: '#2778c5'
-    buttonTextColor: '#ffffff'
     message: 'This website uses a myriad of 3rd-party cookies for your convenience and tracking pleasure.'
     dismissText: 'Never mind!'
     linkText: 'How can I turn this off?'
diff --git a/config/oss.yml b/config/oss.yml
index 9240bb1ebec..c64e1fb8645 100644
--- a/config/oss.yml
+++ b/config/oss.yml
@@ -5,8 +5,6 @@ application:
     showOnFirstStart: false
   theme: blue-lightblue
   cookieConsent:
-    backgroundColor: '#23527c'
-    textColor: '#ffffff'
     message: 'We are not only using cookies but also recorded this session on YouTube!'
     dismissText: "I've been there live, so thanks!"
     linkText: 'I want to watch that!'
diff --git a/cypress.config.ts b/cypress.config.ts
new file mode 100644
index 00000000000..04031dae887
--- /dev/null
+++ b/cypress.config.ts
@@ -0,0 +1,99 @@
+import { defineConfig } from 'cypress'
+import * as security from './lib/insecurity'
+import config from 'config'
+import { type Memory, type Product } from './data/types'
+import * as utils from './lib/utils'
+import * as otplib from 'otplib'
+
+export default defineConfig({
+  projectId: '3hrkhu',
+  defaultCommandTimeout: 10000,
+  e2e: {
+    baseUrl: 'http://localhost:3000',
+    specPattern: 'test/cypress/e2e/**.spec.ts',
+    downloadsFolder: 'test/cypress/downloads',
+    fixturesFolder: false,
+    supportFile: 'test/cypress/support/e2e.ts',
+    setupNodeEvents (on: any) {
+      on('before:browser:launch', (browser: any = {}, launchOptions: any) => { // TODO Remove after upgrade to Cypress >=12.5.0 <or> Chrome 119 become available on GitHub Workflows, see https://github.com/cypress-io/cypress-documentation/issues/5479
+        if (browser.name === 'chrome' && browser.isHeadless) {
+          launchOptions.args = launchOptions.args.map((arg: any) => {
+            if (arg === '--headless') {
+              return '--headless=new'
+            }
+
+            return arg
+          })
+        }
+        return launchOptions
+      })
+
+      on('task', {
+        GenerateCoupon (discount: number) {
+          return security.generateCoupon(discount)
+        },
+        GetBlueprint () {
+          for (const product of config.get<Product[]>('products')) {
+            if (product.fileForRetrieveBlueprintChallenge) {
+              const blueprint = product.fileForRetrieveBlueprintChallenge
+              return blueprint
+            }
+          }
+        },
+        GetChristmasProduct () {
+          return config.get<Product[]>('products').filter(
+            (product: Product) => product.useForChristmasSpecialChallenge
+          )[0]
+        },
+        GetCouponIntent () {
+          const trainingData = require(`data/chatbot/${utils.extractFilename(
+            config.get('application.chatBot.trainingData')
+          )}`)
+          const couponIntent = trainingData.data.filter(
+            (data: { intent: string }) => data.intent === 'queries.couponCode'
+          )[0]
+          return couponIntent
+        },
+        GetFromMemories (property: string) {
+          for (const memory of config.get<Memory[]>('memories') as any) {
+            if (memory[property]) {
+              return memory[property]
+            }
+          }
+        },
+        GetFromConfig (variable: string) {
+          return config.get(variable)
+        },
+        GetOverwriteUrl () {
+          return config.get('challenges.overwriteUrlForProductTamperingChallenge')
+        },
+        GetPastebinLeakProduct () {
+          return config.get<Product[]>('products').filter(
+            (product: Product) => product.keywordsForPastebinDataLeakChallenge
+          )[0]
+        },
+        GetTamperingProductId () {
+          const products: Product[] = config.get('products')
+          for (let i = 0; i < products.length; i++) {
+            if (products[i].urlForProductTamperingChallenge) {
+              return i + 1
+            }
+          }
+        },
+        GenerateAuthenticator (inputString: string) {
+          return otplib.authenticator.generate(inputString)
+        },
+        toISO8601 () {
+          const date = new Date()
+          return utils.toISO8601(date)
+        },
+        disableOnContainerEnv () {
+          return utils.disableOnContainerEnv()
+        },
+        disableOnWindowsEnv () {
+          return utils.disableOnWindowsEnv()
+        }
+      })
+    }
+  }
+})
diff --git a/cypress.json b/cypress.json
deleted file mode 100644
index 04101101250..00000000000
--- a/cypress.json
+++ /dev/null
@@ -1,13 +0,0 @@
-{
-  "projectId": "3hrkhu",
-  "baseUrl": "http://localhost:3000",
-  "defaultCommandTimeout": 10000,
-  "env": {
-    "baseUrl": "http://localhost:3000"
-  },
-  "downloadsFolder": "test/cypress/downloads",
-  "fixturesFolder": "test/cypress/fixtures",
-  "integrationFolder": "test/cypress/integration",
-  "pluginsFile": "test/cypress/plugins/index.ts",
-  "supportFile": "test/cypress/support/index.ts"
-}
\ No newline at end of file
diff --git a/data/datacreator.ts b/data/datacreator.ts
index aaa84c4b14c..ddf03e6a798 100644
--- a/data/datacreator.ts
+++ b/data/datacreator.ts
@@ -20,7 +20,7 @@ import { SecurityAnswerModel } from '../models/securityAnswer'
 import { SecurityQuestionModel } from '../models/securityQuestion'
 import { UserModel } from '../models/user'
 import { WalletModel } from '../models/wallet'
-import { Address, Card, Challenge, Delivery, Memory, Product, SecurityQuestion, User } from './types'
+import { type Address, type Card, type Challenge, type Delivery, type Memory, type Product, type SecurityQuestion, type User } from './types'
 import logger from '../lib/logger'
 import config from 'config'
 import path from 'path'
@@ -86,7 +86,7 @@ async function createChallenges () {
           key,
           name,
           category,
-          tags: tags ? tags.join(',') : undefined,
+          tags: (tags != null) ? tags.join(',') : undefined,
           description: effectiveDisabledEnv ? (description + ' <em>(This challenge is <strong>' + (config.get('challenges.safetyOverride') ? 'potentially harmful' : 'not available') + '</strong> on ' + effectiveDisabledEnv + '!)</em>') : description,
           difficulty,
           solved: false,
@@ -94,7 +94,7 @@ async function createChallenges () {
           hintUrl: showHints ? hintUrl : null,
           mitigationUrl: showMitigations ? mitigationUrl : null,
           disabledEnv: config.get<boolean>('challenges.safetyOverride') ? null : effectiveDisabledEnv,
-          tutorialOrder: tutorial ? tutorial.order : null,
+          tutorialOrder: (tutorial != null) ? tutorial.order : null,
           codingChallengeStatus: 0
         })
       } catch (err) {
@@ -122,11 +122,11 @@ async function createUsers () {
           lastLoginIp
         })
         datacache.users[key] = user
-        if (securityQuestion) await createSecurityAnswer(user.id, securityQuestion.id, securityQuestion.answer)
-        if (feedback) await createFeedback(user.id, feedback.comment, feedback.rating, user.email)
+        if (securityQuestion != null) await createSecurityAnswer(user.id, securityQuestion.id, securityQuestion.answer)
+        if (feedback != null) await createFeedback(user.id, feedback.comment, feedback.rating, user.email)
         if (deletedFlag) await deleteUser(user.id)
-        if (address) await createAddresses(user.id, address)
-        if (card) await createCards(user.id, card)
+        if (address != null) await createAddresses(user.id, address)
+        if (card != null) await createCards(user.id, card)
       } catch (err) {
         logger.error(`Could not insert User ${key}: ${utils.getErrorMessage(err)}`)
       }
@@ -140,7 +140,7 @@ async function createWallet () {
     users.map(async (user: User, index: number) => {
       return await WalletModel.create({
         UserId: index + 1,
-        balance: user.walletBalance !== undefined ? user.walletBalance : 0
+        balance: user.walletBalance ?? 0
       }).catch((err: unknown) => {
         logger.error(`Could not create wallet: ${utils.getErrorMessage(err)}`)
       })
@@ -168,27 +168,29 @@ async function createDeliveryMethods () {
   )
 }
 
-function createAddresses (UserId: number, addresses: Address[]) {
-  addresses.map(async (address) => {
-    return await AddressModel.create({
-      UserId: UserId,
-      country: address.country,
-      fullName: address.fullName,
-      mobileNum: address.mobileNum,
-      zipCode: address.zipCode,
-      streetAddress: address.streetAddress,
-      city: address.city,
-      state: address.state ? address.state : null
-    }).catch((err: unknown) => {
-      logger.error(`Could not create address: ${utils.getErrorMessage(err)}`)
+async function createAddresses (UserId: number, addresses: Address[]) {
+  return await Promise.all(
+    addresses.map(async (address) => {
+      return await AddressModel.create({
+        UserId,
+        country: address.country,
+        fullName: address.fullName,
+        mobileNum: address.mobileNum,
+        zipCode: address.zipCode,
+        streetAddress: address.streetAddress,
+        city: address.city,
+        state: address.state ? address.state : null
+      }).catch((err: unknown) => {
+        logger.error(`Could not create address: ${utils.getErrorMessage(err)}`)
+      })
     })
-  })
+  )
 }
 
 async function createCards (UserId: number, cards: Card[]) {
   return await Promise.all(cards.map(async (card) => {
     return await CardModel.create({
-      UserId: UserId,
+      UserId,
       fullName: card.fullName,
       cardNum: Number(card.cardNum),
       expMonth: card.expMonth,
@@ -239,7 +241,7 @@ async function createQuantity () {
     config.get<Product[]>('products').map(async (product: Product, index: number) => {
       return await QuantityModel.create({
         ProductId: index + 1,
-        quantity: product.quantity !== undefined ? product.quantity : Math.floor(Math.random() * 70 + 30),
+        quantity: product.quantity ?? Math.floor(Math.random() * 70 + 30),
         limitPerUser: product.limitPerUser ?? null
       }).catch((err: unknown) => {
         logger.error(`Could not create quantity: ${utils.getErrorMessage(err)}`)
@@ -336,7 +338,7 @@ async function createProducts () {
             logger.error(`Could not insert Product ${product.name}: ${utils.getErrorMessage(err)}`)
           }
         ).then((persistedProduct) => {
-          if (persistedProduct) {
+          if (persistedProduct != null) {
             if (useForChristmasSpecialChallenge) { datacache.products.christmasSpecial = persistedProduct }
             if (urlForProductTamperingChallenge) {
               datacache.products.osaft = persistedProduct
@@ -691,13 +693,13 @@ async function createOrders () {
   return await Promise.all(
     orders.map(({ orderId, email, totalPrice, bonus, products, eta, delivered }) =>
       mongodb.orders.insert({
-        orderId: orderId,
-        email: email,
-        totalPrice: totalPrice,
-        bonus: bonus,
-        products: products,
-        eta: eta,
-        delivered: delivered
+        orderId,
+        email,
+        totalPrice,
+        bonus,
+        products,
+        eta,
+        delivered
       }).catch((err: unknown) => {
         logger.error(`Could not insert Order ${orderId}: ${utils.getErrorMessage(err)}`)
       })
diff --git a/data/mongodb.ts b/data/mongodb.ts
index a572583ba61..2300e458e1c 100644
--- a/data/mongodb.ts
+++ b/data/mongodb.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-// @ts-expect-error due to non-existing type definitions for MarsDB
+// @ts-expect-error FIXME due to non-existing type definitions for MarsDB
 import MarsDB = require('marsdb')
 
 const reviews = new MarsDB.Collection('posts')
diff --git a/data/static/botDefaultTrainingData.json b/data/static/botDefaultTrainingData.json
index 46929df04c6..f48c057a9ec 100644
--- a/data/static/botDefaultTrainingData.json
+++ b/data/static/botDefaultTrainingData.json
@@ -97,6 +97,29 @@
         }
       ]
     },
+    {
+      "intent": "queries.nft",
+      "utterances": [
+        "Do you know anything about NFTs",
+        "Can you tell me anything about NFTs",
+        "Do you sell NFTs",
+        "where can I buy NFTs"
+      ],
+      "answers": [
+        {
+          "action": "response",
+          "body": "I'm not sure if we have any actual NFTs listed right now, but you can check if there's a link on our \"About Us\" page!"
+        },
+        {
+          "action": "response",
+          "body": "Our developers are currently learning Web3, and they published a (literal) NFT honey pot for you to mint on /#/bee-haven."
+        },
+        {
+          "action": "response",
+          "body": "Our developers are currently learning Web3, and they published our official Soul-Bound-Token over on /#/juicy-nft for you to marvel at."
+        }
+      ]
+    },
     {
       "intent": "queries.productPrice",
       "utterances": [
@@ -184,6 +207,18 @@
         }
       ]
     },
+    {
+      "intent": "queries.swallow",
+      "utterances": [
+        "What is the airspeed velocity of an unladen swallow"
+      ],
+      "answers": [
+        {
+          "action": "response",
+          "body": "What do you mean? African or European swallow?"
+        }
+      ]
+    },
     {
       "intent": "queries.functionTest",
       "utterances": [
diff --git a/data/static/challenges.yml b/data/static/challenges.yml
index 9f1b4a5228f..7095f1141bc 100644
--- a/data/static/challenges.yml
+++ b/data/static/challenges.yml
@@ -6,7 +6,7 @@
   description: 'Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src="javascript:alert(`xss`)"&gt;</code> without using the frontend application at all.'
   difficulty: 3
   hint: 'You need to work with the server-side API directly. Try different HTTP verbs on different entities exposed through the API.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/xss.html#perform-a-persisted-xss-attack-without-using-the-frontend-application-at-all'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/xss.html#_perform_a_persisted_xss_attack_without_using_the_frontend_application_at_all'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html'
   key: restfulXssChallenge
   disabledEnv:
@@ -19,7 +19,7 @@
   description: 'Gain access to any access log file of the server.'
   difficulty: 4
   hint: 'Who would want a server access log to be accessible through a web application?'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#gain-access-to-any-access-log-file-of-the-server'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_gain_access_to_any_access_log_file_of_the_server'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Logging_Cheat_Sheet.html'
   key: accessLogDisclosureChallenge
 -
@@ -28,7 +28,7 @@
   description: 'Register as a user with administrator privileges.'
   difficulty: 3
   hint: 'You have to assign the unassignable.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/improper-input-validation.html#register-as-a-user-with-administrator-privileges'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/improper-input-validation.html#_register_as_a_user_with_administrator_privileges'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Mass_Assignment_Cheat_Sheet.html'
   key: registerAdminChallenge
 -
@@ -39,7 +39,7 @@
   description: 'Access the administration section of the store.'
   difficulty: 2
   hint: 'It is just slightly harder to find than the score board link.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-access-control.html#access-the-administration-section-of-the-store'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-access-control.html#_access_the_administration_section_of_the_store'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Access_Control_Cheat_Sheet.html'
   key: adminSectionChallenge
 -
@@ -51,7 +51,7 @@
   description: 'Overwrite the <a href="/ftp/legal.md">Legal Information</a> file.'
   difficulty: 6
   hint: 'Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/vulnerable-components.html#overwrite-the-legal-information-file'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/vulnerable-components.html#_overwrite_the_legal_information_file'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Vulnerable_Dependency_Management_Cheat_Sheet.html'
   key: fileWriteChallenge
   disabledEnv:
@@ -65,8 +65,8 @@
     - OSINT
   description: 'Reset the password of Bjoern''s OWASP account via the <a href="/#/forgot-password">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.'
   difficulty: 3
-  hint: 'He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-authentication.html#reset-the-password-of-bjoerns-owasp-account-via-the-forgot-password-mechanism'
+  hint: 'He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-authentication.html#_reset_the_password_of_bjoerns_owasp_account_via_the_forgot_password_mechanism'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Choosing_and_Using_Security_Questions_Cheat_Sheet.html'
   key: resetPasswordBjoernOwaspChallenge
 -
@@ -75,12 +75,61 @@
   tags:
     - Contraption
     - Code Analysis
+    - Web3
   description: 'Learn about the Token Sale before its official announcement.'
   difficulty: 5
   hint: 'The developers truly believe in "Security through Obscurity" over actual access restrictions.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/security-through-obscurity.html#learn-about-the-token-sale-before-its-official-announcement'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/security-through-obscurity.html#_learn_about_the_token_sale_before_its_official_announcement'
   mitigationUrl: ~
   key: tokenSaleChallenge
+-
+  name: 'NFT Takeover'
+  category: 'Sensitive Data Exposure'
+  tags:
+    - Contraption
+    - Good for Demos
+    - Web3
+  description: 'Take over the wallet containing our official Soul Bound Token (NFT).'
+  difficulty: 2
+  hint: 'Find the seed phrase posted accidentally.'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_take_over_the_wallet_containing_our_official_soul_bound_token'
+  mitigationUrl: ~
+  key: nftUnlockChallenge
+-
+  name: 'Mint the Honey Pot'
+  category: 'Improper Input Validation'
+  tags:
+      - Web3
+      - Internet Traffic
+  description: 'Mint the Honey Pot NFT by gathering BEEs from the bee haven.'
+  difficulty: 3
+  hint: 'Discover NFT wonders among the captivating visual memories.'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/improper-input-validation.html#_mint_the_honey_pot_nft_by_gathering_bees_from_the_bee_haven'
+  mitigationUrl: ~
+  key: nftMintChallenge
+-
+  name: 'Wallet Depletion'
+  category: 'Miscellaneous'
+  tags:
+      - Web3
+      - Internet Traffic
+  description: 'Withdraw more ETH from the new wallet than you deposited.'
+  difficulty: 6
+  hint: 'Try to exploit the contract of the wallet.'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/miscellaneous.html#_withdraw_more_eth_from_the_new_wallet_than_you_deposited'
+  mitigationUrl: ~
+  key: web3WalletChallenge
+-
+  name: 'Web3 Sandbox'
+  category: 'Broken Access Control'
+  tags:
+      - Web3
+  description: 'Find an accidentally deployed code sandbox for writing smart contracts on the fly.'
+  difficulty: 1
+  hint: 'It is just as easy as finding the Score Board.'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-access-control.html#_find_an_accidentally_deployed_code_sandbox'
+  mitigationUrl: ~
+  key: web3SandboxChallenge
 -
   name: 'Blocked RCE DoS'
   category: 'Insecure Deserialization'
@@ -89,7 +138,7 @@
   description: 'Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.'
   difficulty: 5
   hint: 'The feature you need to exploit for this challenge is not directly advertised anywhere.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/insecure-deserialization.html#perform-a-remote-code-execution-that-would-keep-a-less-hardened-application-busy-forever'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/insecure-deserialization.html#_perform_a_remote_code_execution_that_would_keep_a_less_hardened_application_busy_forever'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Denial_of_Service_Cheat_Sheet.html'
   key: rceChallenge
   disabledEnv:
@@ -104,7 +153,7 @@
   description: 'Submit 10 or more customer feedbacks within 20 seconds.'
   difficulty: 3
   hint: 'After finding a CAPTCHA bypass, write a script that automates feedback submission. Or open many browser tabs and be really quick.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-anti-automation.html#submit-10-or-more-customer-feedbacks-within-20-seconds'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-anti-automation.html#_submit_10_or_more_customer_feedbacks_within_20_seconds'
   mitigationUrl: ~
   key: captchaBypassChallenge
 -
@@ -113,8 +162,8 @@
   description: 'Change Bender''s password into <i>slurmCl4ssic</i> without using SQL Injection or Forgot Password.'
   difficulty: 5
   hint: 'In previous releases this challenge was wrongly accused of being based on CSRF.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-authentication.html#change-benders-password-into-slurmcl4ssic-without-using-sql-injection-or-forgot-password'
-  mitigationUrl: ~
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-authentication.html#_change_benders_password_into_slurmcl4ssic_without_using_sql_injection_or_forgot_password'
+  mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html'
   key: changePasswordBenderChallenge
 -
   name: 'Christmas Special'
@@ -122,7 +171,7 @@
   description: 'Order the Christmas special offer of 2014.'
   difficulty: 4
   hint: 'Find out how the application handles unavailable products and try to find a loophole.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/injection.html#order-the-christmas-special-offer-of-2014'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/injection.html#_order_the_christmas_special_offer_of_2014'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html'
   key: christmasSpecialChallenge
 -
@@ -133,7 +182,7 @@
   description: 'Bypass the Content Security Policy and perform an XSS attack with <code>&lt;script&gt;alert(`xss`)&lt;/script&gt;</code> on a legacy page within the application.'
   difficulty: 4
   hint: 'What is even "better" than a legacy page with a homegrown RegEx sanitizer? Having CSP injection issues on the exact same page as well!'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/xss.html#bypass-the-content-security-policy-and-perform-an-xss-attack-on-a-legacy-page'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/xss.html#_bypass_the_content_security_policy_and_perform_an_xss_attack_on_a_legacy_page'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html'
   key: usernameXssChallenge
   disabledEnv:
@@ -148,7 +197,7 @@
   description: 'Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src="javascript:alert(`xss`)"&gt;</code> bypassing a <i>client-side</i> security mechanism.'
   difficulty: 3
   hint: 'Only some input fields validate their input. Even less of these are persisted in a way where their content is shown on another screen.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/xss.html#perform-a-persisted-xss-attack-bypassing-a-client-side-security-mechanism'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/xss.html#_perform_a_persisted_xss_attack_bypassing_a_client_side_security_mechanism'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html'
   key: persistedXssUserChallenge
   disabledEnv:
@@ -163,7 +212,7 @@
   description: 'Access a confidential document.'
   difficulty: 1
   hint: 'Analyze and tamper with links in the application that deliver a file directly.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#access-a-confidential-document'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_access_a_confidential_document'
   mitigationUrl: ~
   key: directoryListingChallenge
 -
@@ -175,7 +224,7 @@
   description: 'Perform a <i>DOM</i> XSS attack with <code>&lt;iframe src="javascript:alert(`xss`)"&gt;</code>.'
   difficulty: 1
   hint: 'Look for an input field where its content appears in the HTML when its form is submitted.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/xss.html#perform-a-dom-xss-attack'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/xss.html#_perform_a_dom_xss_attack'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html'
   key: localXssChallenge
   tutorial:
@@ -186,7 +235,7 @@
   description: 'Exfiltrate the entire DB schema definition via SQL Injection.'
   difficulty: 3
   hint: 'Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/injection.html#exfiltrate-the-entire-db-schema-definition-via-sql-injection'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/injection.html#_exfiltrate_the_entire_db_schema_definition_via_sql_injection'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html'
   key: dbSchemaChallenge
 -
@@ -198,7 +247,7 @@
   description: 'Use a deprecated B2B interface that was not properly shut down.'
   difficulty: 2
   hint: 'The developers who disabled the interface think they could go invisible by just closing their eyes.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/security-misconfiguration.html#use-a-deprecated-b2b-interface-that-was-not-properly-shut-down'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/security-misconfiguration.html#_use_a_deprecated_b2b_interface_that_was_not_properly_shut_down'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Web_Service_Security_Cheat_Sheet.html'
   key: deprecatedInterfaceChallenge
 -
@@ -208,10 +257,10 @@
     - Shenanigans
     - Contraption
     - Good for Demos
-  description: 'Find the hidden <a href="http://en.wikipedia.org/wiki/Easter_egg_(media)" target="_blank">easter egg</a>.'
+  description: 'Find the hidden <a href="https://en.wikipedia.org/wiki/Easter_egg_(media)" target="_blank">easter egg</a>.'
   difficulty: 4
   hint: 'If you solved one of the three file access challenges, you already know where to find the easter egg.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-access-control.html#find-the-hidden-easter-egg'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-access-control.html#_find_the_hidden_easter_egg'
   mitigationUrl: ~
   key: easterEggLevelOneChallenge
 -
@@ -220,8 +269,8 @@
   description: 'Perform an unwanted information disclosure by accessing data cross-domain.'
   difficulty: 5
   hint: 'Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#perform-an-unwanted-information-disclosure-by-accessing-data-cross-domain'
-  mitigationUrl: ~
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_perform_an_unwanted_information_disclosure_by_accessing_data_cross_domain'
+  mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/XS_Leaks_Cheat_Sheet.html'
   key: emailLeakChallenge
 -
   name: 'Empty User Registration'
@@ -229,8 +278,8 @@
   description: 'Register a user with an empty email and password.'
   difficulty: 2
   hint: 'Consider intercepting and playing with the request payload.'
-  hintUrl: https://pwning.owasp-juice.shop/part2/improper-input-validation.html#register-a-user-account-with-an-empty-email-and-password
-  mitigationUrl: ~
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/improper-input-validation.html#_register_a_user_account_with_an_empty_email_and_password'
+  mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html'
   key: emptyUserRegistration
 -
   name: 'Ephemeral Accountant'
@@ -238,7 +287,7 @@
   description: 'Log in with the (non-existing) accountant <i>acc0unt4nt@juice-sh.op</i> without ever registering that user.'
   difficulty: 4
   hint: 'Try to create the needed user "out of thin air".'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/injection.html#log-in-with-the-non-existing-accountant-without-ever-registering-that-user'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/injection.html#_log_in_with_the_non_existing_accountant_without_ever_registering_that_user'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html'
   key: ephemeralAccountantChallenge
 -
@@ -249,7 +298,7 @@
   description: 'Provoke an error that is neither very gracefully nor consistently handled.'
   difficulty: 1
   hint: 'Try to submit bad input to forms. Alternatively tamper with URL paths or parameters.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/security-misconfiguration.html#provoke-an-error-that-is-neither-very-gracefully-nor-consistently-handled'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/security-misconfiguration.html#_provoke_an_error_that_is_neither_very_gracefully_nor_consistently_handled'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Error_Handling_Cheat_Sheet.html'
   key: errorHandlingChallenge
 -
@@ -258,7 +307,7 @@
   description: 'Successfully redeem an expired campaign coupon code.'
   difficulty: 4
   hint: 'Try to identify past special event or holiday campaigns of the shop first.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/improper-input-validation.html#successfully-redeem-an-expired-campaign-coupon-code'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/improper-input-validation.html#_successfully_redeem_an_expired_campaign_coupon_code'
   mitigationUrl: ~
   key: manipulateClockChallenge
 -
@@ -269,7 +318,7 @@
   description: 'Retrieve the language file that never made it into production.'
   difficulty: 5
   hint: 'Brute force is not the only option for this challenge, but a perfectly viable one.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-anti-automation.html#retrieve-the-language-file-that-never-made-it-into-production'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-anti-automation.html#_retrieve_the_language_file_that_never_made_it_into_production'
   mitigationUrl: ~
   key: extraLanguageChallenge
 -
@@ -278,7 +327,7 @@
   description: 'Get rid of all 5-star customer feedback.'
   difficulty: 2
   hint: 'Once you found admin section of the application, this challenge is almost trivial.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-access-control.html#get-rid-of-all-5-star-customer-feedback'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-access-control.html#_get_rid_of_all_5_star_customer_feedback'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Access_Control_Cheat_Sheet.html'
   key: feedbackChallenge
 -
@@ -289,8 +338,8 @@
     - Code Analysis
   description: 'Forge a coupon code that gives you a discount of at least 80%.'
   difficulty: 6
-  hint: 'Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/cryptographic-issues.html#forge-a-coupon-code-that-gives-you-a-discount-of-at-least-80'
+  hint: 'Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/cryptographic-issues.html#_forge_a_coupon_code_that_gives_you_a_discount_of_at_least_80'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Cryptographic_Storage_Cheat_Sheet.html'
   key: forgedCouponChallenge
 -
@@ -301,7 +350,7 @@
   description: "Post some feedback in another user's name."
   difficulty: 3
   hint: 'You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-access-control.html#post-some-feedback-in-another-users-name'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-access-control.html#_post_some_feedback_in_another_users_name'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Access_Control_Cheat_Sheet.html'
   key: forgedFeedbackChallenge
   tutorial:
@@ -312,7 +361,7 @@
   description: 'Post a product review as another user or edit any user''s existing review.'
   difficulty: 3
   hint: 'Observe the flow of product review posting and editing and see if you can exploit it.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-access-control.html#post-a-product-review-as-another-user-or-edit-any-users-existing-review'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-access-control.html#_post_a_product_review_as_another_user_or_edit_any_users_existing_review'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Access_Control_Cheat_Sheet.html'
   key: forgedReviewChallenge
 -
@@ -321,7 +370,7 @@
   description: 'Forge an almost properly RSA-signed JWT token that impersonates the (non-existing) user <i>rsa_lord@juice-sh.op</i>.'
   difficulty: 6
   hint: 'This challenge is explicitly not about acquiring the RSA private key used for JWT signing.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/vulnerable-components.html#forge-an-almost-properly-rsa-signed-jwt-token'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/vulnerable-components.html#_forge_an_almost_properly_rsa_signed_jwt_token'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/JSON_Web_Token_for_Java_Cheat_Sheet.html'
   key: jwtForgedChallenge
   disabledEnv:
@@ -336,7 +385,7 @@
   description: 'Access a developer''s forgotten backup file.'
   difficulty: 4
   hint: 'You need to trick a security mechanism into thinking that the file you want has a valid file type.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#access-a-developers-forgotten-backup-file'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_access_a_developers_forgotten_backup_file'
   mitigationUrl: ~
   key: forgottenDevBackupChallenge
 -
@@ -347,7 +396,7 @@
   description: 'Access a salesman''s forgotten backup file.'
   difficulty: 4
   hint: 'You need to trick a security mechanism into thinking that the file you want has a valid file type.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#access-a-salesmans-forgotten-backup-file'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_access_a_salesmans_forgotten_backup_file'
   mitigationUrl: ~
   key: forgottenBackupChallenge
 -
@@ -356,7 +405,7 @@
   description: '<a href="/#/contact">Inform the shop</a> about a <i>typosquatting</i> imposter that dug itself deep into the frontend. (Mention the exact name of the culprit)'
   difficulty: 5
   hint: 'This challenge has nothing to do with mistyping web domains. There is no conveniently misplaced file helping you with this one either. Or is there?'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/vulnerable-components.html#inform-the-shop-about-a-typosquatting-imposter-that-dug-itself-deep-into-the-frontend'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/vulnerable-components.html#_inform_the_shop_about_a_typosquatting_imposter_that_dug_itself_deep_into_the_frontend'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Vulnerable_Dependency_Management_Cheat_Sheet.html'
   key: typosquattingAngularChallenge
 -
@@ -365,7 +414,7 @@
   description: 'Log in with Chris'' erased user account.'
   difficulty: 3
   hint: 'Turns out that something is technically and legally wrong with the implementation of the "right to be forgotten" for users.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-authentication.html#log-in-with-chris-erased-user-account'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-authentication.html#_log_in_with_chris_erased_user_account'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/User_Privacy_Protection_Cheat_Sheet.html'
   key: ghostLoginChallenge
 -
@@ -374,7 +423,7 @@
   description: 'Steal someone else''s personal data without using Injection.'
   difficulty: 4
   hint: 'Trick the regular Data Export to give you more than actually belongs to you.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#steal-someone-elses-personal-data-without-using-injection'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_steal_someone_elses_personal_data_without_using_injection'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/User_Privacy_Protection_Cheat_Sheet.html'
   key: dataExportChallenge
 -
@@ -385,7 +434,7 @@
   description: 'Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src="javascript:alert(`xss`)"&gt;</code> through an HTTP header.'
   difficulty: 4
   hint: 'Finding a piece of displayed information that could originate from an HTTP header is part of this challenge.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/xss.html#perform-a-persisted-xss-attack-through-an-http-header'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/xss.html#_perform_a_persisted_xss_attack_through_an_http_header'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html'
   key: httpHeaderXssChallenge
   disabledEnv:
@@ -401,7 +450,7 @@
   description: 'Solve challenge #999. Unfortunately, this challenge does not exist.'
   difficulty: 6
   hint: 'You need to trick the hacking progress persistence feature into thinking you solved challenge #999.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/cryptographic-issues.html#solve-challenge-999'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/cryptographic-issues.html#_solve_challenge_999'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Cryptographic_Storage_Cheat_Sheet.html'
   key: continueCodeChallenge
 -
@@ -412,7 +461,7 @@
   description: 'Dumpster dive the Internet for a leaked password and log in to the original user account it belongs to. (Creating a new account with the same password does not qualify as a solution.)'
   difficulty: 5
   hint: 'Once you have it, a technique called "Password Spraying" might prove useful.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#dumpster-dive-the-internet-for-a-leaked-password-and-log-in-to-the-original-user-account-it-belongs-to'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_dumpster_dive_the_internet_for_a_leaked_password_and_log_in_to_the_original_user_account_it_belongs_to'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Credential_Stuffing_Prevention_Cheat_Sheet.html'
   key: dlpPasswordSprayingChallenge
 -
@@ -424,7 +473,7 @@
   description: 'Identify an unsafe product that was removed from the shop and <a href="/#/contact">inform the shop</a> which ingredients are dangerous.'
   difficulty: 4
   hint: 'Your own SQLi and someone else''s Ctrl-V will be your accomplices in this challenge!'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#identify-an-unsafe-product-that-was-removed-from-the-shop-and-inform-the-shop-which-ingredients-are-dangerous'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_identify_an_unsafe_product_that_was_removed_from_the_shop_and_inform_the_shop_which_ingredients_are_dangerous'
   mitigationUrl: ~
   key: dlpPastebinDataLeakChallenge
 -
@@ -433,7 +482,7 @@
   description: '<a href="/#/contact">Inform the shop</a> about a <i>typosquatting</i> trick it has been a victim of at least in <code>v6.2.0-SNAPSHOT</code>. (Mention the exact name of the culprit)'
   difficulty: 4
   hint: 'This challenge has nothing to do with mistyping web domains. Investigate the forgotten developer''s backup file instead.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/vulnerable-components.html#inform-the-shop-about-a-typosquatting-trick-it-has-been-a-victim-of'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/vulnerable-components.html#_inform_the_shop_about_a_typosquatting_trick_it_has_been_a_victim_of'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Vulnerable_Dependency_Management_Cheat_Sheet.html'
   key: typosquattingNpmChallenge
 -
@@ -445,7 +494,7 @@
   description: 'Log in with the administrator''s user account.'
   difficulty: 2
   hint: 'Try different SQL Injection attack patterns depending whether you know the admin''s email address or not.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/injection.html#log-in-with-the-administrators-user-account'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/injection.html#_log_in_with_the_administrators_user_account'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html'
   key: loginAdminChallenge
   tutorial:
@@ -458,7 +507,7 @@
   description: 'Log in with Amy''s original user credentials. (This could take 93.83 billion trillion trillion centuries to brute force, but luckily she did not read the "One Important Final Note")'
   difficulty: 3
   hint: 'This challenge will make you go after a needle in a haystack.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#log-in-with-amys-original-user-credentials'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_log_in_with_amys_original_user_credentials'
   mitigationUrl: ~
   key: loginAmyChallenge
 -
@@ -469,7 +518,7 @@
   description: 'Log in with Bender''s user account.'
   difficulty: 3
   hint: 'If you know Bender''s email address, try SQL Injection. Bender''s password hash might not help you very much.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/injection.html#log-in-with-benders-user-account'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/injection.html#_log_in_with_benders_user_account'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html'
   key: loginBenderChallenge
   tutorial:
@@ -482,7 +531,7 @@
   description: 'Log in with Bjoern''s Gmail account <i>without</i> previously changing his password, applying SQL Injection, or hacking his Google account.'
   difficulty: 4
   hint: 'The security flaw behind this challenge is 100% OWASP Juice Shop''s fault and 0% Google''s.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-authentication.html#log-in-with-bjoerns-gmail-account'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-authentication.html#_log_in_with_bjoerns_gmail_account'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html'
   key: oauthUserPasswordChallenge
 -
@@ -493,7 +542,7 @@
   description: 'Log in with Jim''s user account.'
   difficulty: 3
   hint: 'Try cracking Jim''s password hash if you harvested it already. Alternatively, if you know Jim''s email address, try SQL Injection.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/injection.html#log-in-with-jims-user-account'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/injection.html#_log_in_with_jims_user_account'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html'
   key: loginJimChallenge
   tutorial:
@@ -507,7 +556,7 @@
   description: 'Log in with MC SafeSearch''s original user credentials without applying SQL Injection or any other bypass.'
   difficulty: 2
   hint: 'You should listen to MC''s hit song "Protect Ya Passwordz".'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#log-in-with-mc-safesearchs-original-user-credentials'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_log_in_with_mc_safesearchs_original_user_credentials'
   mitigationUrl: ~
   key: loginRapperChallenge
 -
@@ -519,7 +568,7 @@
   description: 'Log in with the support team''s original user credentials without applying SQL Injection or any other bypass.'
   difficulty: 6
   hint: 'The underlying flaw of this challenge is a lot more human error than technical weakness.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/security-misconfiguration.html#log-in-with-the-support-teams-original-user-credentials'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/security-misconfiguration.html#_log_in_with_the_support_teams_original_user_credentials'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html'
   key: loginSupportChallenge
 -
@@ -528,7 +577,7 @@
   description: 'Put an additional product into another user''s shopping basket.'
   difficulty: 3
   hint: 'Have an eye on the HTTP traffic while placing products in the shopping basket. Changing the quantity of products already in the basket doesn''t count.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-access-control.html#put-an-additional-product-into-another-users-shopping-basket'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-access-control.html#_put_an_additional_product_into_another_users_shopping_basket'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Access_Control_Cheat_Sheet.html'
   key: basketManipulateChallenge
 -
@@ -540,7 +589,7 @@
   description: 'Access a misplaced <a href="https://github.com/Neo23x0/sigma">SIEM signature</a> file.'
   difficulty: 4
   hint: 'You need to trick a security mechanism into thinking that the file you want has a valid file type.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#access-a-misplaced-siem-signature-file'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_access_a_misplaced_siem_signature_file'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Logging_Cheat_Sheet.html'
   key: misplacedSignatureFileChallenge
 -
@@ -549,7 +598,7 @@
   description: 'Like any review at least three times as the same user.'
   difficulty: 6
   hint: 'Punctuality is the politeness of kings.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-anti-automation.html#like-any-review-at-least-three-times-as-the-same-user'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-anti-automation.html#_like_any_review_at_least_three_times_as_the_same_user'
   mitigationUrl: ~
   key: timingAttackChallenge
 -
@@ -561,7 +610,7 @@
   description: 'Apply some advanced cryptanalysis to find <i>the real</i> easter egg.'
   difficulty: 4
   hint: 'You might have to peel through several layers of tough-as-nails encryption for this challenge.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/cryptographic-issues.html#apply-some-advanced-cryptanalysis-to-find-the-real-easter-egg'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/cryptographic-issues.html#_apply_some_advanced_cryptanalysis_to_find_the_real_easter_egg'
   mitigationUrl: ~
   key: easterEggLevelTwoChallenge
 -
@@ -572,7 +621,7 @@
   description: 'Let the server sleep for some time. (It has done more than enough hard work for you)'
   difficulty: 4
   hint: 'This challenge is essentially a stripped-down Denial of Service (DoS) attack.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/injection.html#let-the-server-sleep-for-some-time'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/injection.html#_let_the_server_sleep_for_some_time'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Denial_of_Service_Cheat_Sheet.html'
   key: noSqlCommandChallenge
   disabledEnv:
@@ -587,7 +636,7 @@
   description: 'All your orders are belong to us! Even the ones which don''t.'
   difficulty: 5
   hint: 'Take a close look on how the $where query operator works in MongoDB.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/injection.html#all-your-orders-are-belong-to-us'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/injection.html#_all_your_orders_are_belong_to_us'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Injection_Prevention_Cheat_Sheet.html'
   key: noSqlOrdersChallenge
   disabledEnv:
@@ -600,7 +649,7 @@
   description: 'Update multiple product reviews at the same time.'
   difficulty: 4
   hint: 'Take a close look on how the equivalent of UPDATE-statements in MongoDB work.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/injection.html#update-multiple-product-reviews-at-the-same-time'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/injection.html#_update_multiple_product_reviews_at_the_same_time'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Injection_Prevention_Cheat_Sheet.html'
   key: noSqlReviewsChallenge
 -
@@ -611,7 +660,7 @@
   description: 'Let us redirect you to one of our crypto currency addresses which are not promoted any longer.'
   difficulty: 1
   hint: 'We might have failed to take this out of our code properly.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/unvalidated-redirects.html#let-us-redirect-you-to-one-of-our-crypto-currency-addresses'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/unvalidated-redirects.html#_let_us_redirect_you_to_one_of_our_crypto_currency_addresses'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html'
   key: redirectCryptoCurrencyChallenge
 -
@@ -623,7 +672,7 @@
   description: 'Log in with the administrator''s user credentials without previously changing them or applying SQL Injection.'
   difficulty: 2
   hint: 'This one should be equally easy to a) brute force, b) crack the password hash or c) simply guess.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-authentication.html#log-in-with-the-administrators-user-credentials-without-previously-changing-them-or-applying-sql-injection'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-authentication.html#_log_in_with_the_administrators_user_credentials_without_previously_changing_them_or_applying_sql_injection'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html'
   key: weakPasswordChallenge
   tutorial:
@@ -634,7 +683,7 @@
   description: 'Place an order that makes you rich.'
   difficulty: 3
   hint: 'You literally need to make the shop owe you any amount of money.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/improper-input-validation.html#place-an-order-that-makes-you-rich'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/improper-input-validation.html#_place_an_order_that_makes_you_rich'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html'
   key: negativeOrderChallenge
 -
@@ -645,7 +694,7 @@
   description: '<i class="far fa-gem"></i><i class="far fa-gem"></i><i class="far fa-gem"></i><i class="far fa-gem"></i><i class="far fa-gem"></i><!--IvLuRfBJYlmStf9XfL6ckJFngyd9LfV1JaaN/KRTPQPidTuJ7FR+D/nkWJUF+0xUF07CeCeqYfxq+OJVVa0gNbqgYkUNvn//UbE7e95C+6e+7GtdpqJ8mqm4WcPvUGIUxmGLTTAC2+G9UuFCD1DUjg==--> <a href="https://blockchain.info/address/1AbKfgvw9psQ41NbLi8kufDQTezwG8DRZm" target="_blank"><i class="fab fa-btc fa-sm"></i> Unlock Premium Challenge</a> to access exclusive content.'
   difficulty: 6
   hint: 'You do not have to pay anything to unlock this challenge! Nonetheless, donations are very much appreciated.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/cryptographic-issues.html#unlock-premium-challenge-to-access-exclusive-content'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/cryptographic-issues.html#_unlock_premium_challenge_to_access_exclusive_content'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Key_Management_Cheat_Sheet.html'
   key: premiumPaywallChallenge
 -
@@ -658,7 +707,7 @@
   description: 'Read our privacy policy.'
   difficulty: 1
   hint: 'We won''t even ask you to confirm that you did. Just read it. Please. Pretty please.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/miscellaneous.html#read-our-privacy-policy'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/miscellaneous.html#_read_our_privacy_policy'
   mitigationUrl: ~
   key: privacyPolicyChallenge
   tutorial:
@@ -672,7 +721,7 @@
   description: 'Prove that you actually read our privacy policy.'
   difficulty: 3
   hint: 'Only by visiting a special URL you can confirm that you read it carefully.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/security-through-obscurity.html#prove-that-you-actually-read-our-privacy-policy'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/security-through-obscurity.html#_prove_that_you_actually_read_our_privacy_policy'
   mitigationUrl: ~
   key: privacyPolicyProofChallenge
 -
@@ -681,7 +730,7 @@
   description: 'Change the <code>href</code> of the link within the <a href="/#/search?q=OWASP SSL Advanced Forensic Tool (O-Saft)">OWASP SSL Advanced Forensic Tool (O-Saft)</a> product description into <i>https://owasp.slack.com</i>.'
   difficulty: 3
   hint: 'Look for one of the following: a) broken admin functionality, b) holes in RESTful API or c) possibility for SQL Injection.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-access-control.html#change-the-href-of-the-link-within-the-o-saft-product-description'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-access-control.html#_change_the_href_of_the_link_within_the_o_saft_product_description'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html'
   key: changeProductChallenge
 -
@@ -693,7 +742,7 @@
   description: 'Perform a <i>reflected</i> XSS attack with <code>&lt;iframe src="javascript:alert(`xss`)"&gt;</code>.'
   difficulty: 2
   hint: 'Look for a url parameter where its value appears in the page it is leading to.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/xss.html#perform-a-reflected-xss-attack'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/xss.html#_perform_a_reflected_xss_attack'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html'
   key: reflectedXssChallenge
   disabledEnv:
@@ -706,7 +755,7 @@
   description: 'Follow the DRY principle while registering a user.'
   difficulty: 1
   hint: 'You can solve this by cleverly interacting with the UI or bypassing it altogether.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/improper-input-validation.html#follow-the-dry-principle-while-registering-a-user'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/improper-input-validation.html#_follow_the_dry_principle_while_registering_a_user'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html'
   key: passwordRepeatChallenge
 -
@@ -717,7 +766,7 @@
   description: 'Reset Bender''s password via the <a href="/#/forgot-password">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.'
   difficulty: 4
   hint: 'Not as trivial as Jim''s but still not too difficult with some "Futurama" background knowledge.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-authentication.html#reset-benders-password-via-the-forgot-password-mechanism'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-authentication.html#_reset_benders_password_via_the_forgot_password_mechanism'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Choosing_and_Using_Security_Questions_Cheat_Sheet.html'
   key: resetPasswordBenderChallenge
 -
@@ -728,7 +777,7 @@
   description: 'Reset the password of Bjoern''s internal account via the <a href="/#/forgot-password">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.'
   difficulty: 5
   hint: 'Nothing a little bit of Facebook stalking couldn''t reveal. Might involve a historical twist.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-authentication.html#reset-the-password-of-bjoerns-internal-account-via-the-forgot-password-mechanism'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-authentication.html#_reset_the_password_of_bjoerns_internal_account_via_the_forgot_password_mechanism'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Choosing_and_Using_Security_Questions_Cheat_Sheet.html'
   key: resetPasswordBjoernChallenge
 -
@@ -739,7 +788,7 @@
   description: 'Reset Jim''s password via the <a href="/#/forgot-password">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.'
   difficulty: 3
   hint: 'It''s hard for celebrities to pick a security question from a hard-coded list where the answer is not publicly exposed.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-authentication.html#reset-jims-password-via-the-forgot-password-mechanism'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-authentication.html#_reset_jims_password_via_the_forgot_password_mechanism'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Choosing_and_Using_Security_Questions_Cheat_Sheet.html'
   key: resetPasswordJimChallenge
 -
@@ -751,7 +800,7 @@
   description: 'Reset Morty''s password via the <a href="/#/forgot-password">Forgot Password</a> mechanism with <i>his obfuscated answer</i> to his security question.'
   difficulty: 5
   hint: 'Find a way to bypass the rate limiting and brute force the obfuscated answer to Morty''s security question.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-anti-automation.html#reset-mortys-password-via-the-forgot-password-mechanism'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-anti-automation.html#_reset_mortys_password_via_the_forgot_password_mechanism'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Forgot_Password_Cheat_Sheet.html'
   key: resetPasswordMortyChallenge
 -
@@ -760,7 +809,7 @@
   description: 'Deprive the shop of earnings by downloading the blueprint for one of its products.'
   difficulty: 5
   hint: 'The product you might want to give a closer look is the OWASP Juice Shop Logo (3D-printed).'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#deprive-the-shop-of-earnings-by-downloading-the-blueprint-for-one-of-its-products'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_deprive_the_shop_of_earnings_by_downloading_the_blueprint_for_one_of_its_products'
   mitigationUrl: ~
   key: retrieveBlueprintChallenge
 -
@@ -771,7 +820,7 @@
   description: 'Request a hidden resource on server through server.'
   difficulty: 6
   hint: 'Reverse engineering something bad can make good things happen.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-access-control.html#request-a-hidden-resource-on-server-through-server'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-access-control.html#_request_a_hidden_resource_on_server_through_server'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html'
   key: ssrfChallenge
 -
@@ -784,7 +833,7 @@
   description: 'Infect the server with juicy malware by abusing arbitrary command execution.'
   difficulty: 6
   hint: '"SSTi" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/injection.html#infect-the-server-with-juicy-malware-by-abusing-arbitrary-command-execution'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/injection.html#_infect_the_server_with_juicy_malware_by_abusing_arbitrary_command_execution'
   mitigationUrl: ~
   key: sstiChallenge
   disabledEnv:
@@ -800,7 +849,7 @@
   description: 'Find the carefully hidden ''Score Board'' page.'
   difficulty: 1
   hint: 'Try to find a reference or clue behind the scenes. Or simply guess what URL the Score Board might have.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/score-board.html#find-the-carefully-hidden-score-board-page'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/score-board.html#_find_the_carefully_hidden_score_board_page'
   mitigationUrl: ~
   key: scoreBoardChallenge
   tutorial:
@@ -812,8 +861,8 @@
     - Good Practice
   description: 'Behave like any "white-hat" should before getting into the action.'
   difficulty: 2
-  hint: 'Undoubtably you want to read our security policy before conducting any research on our application.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/miscellaneous.html#behave-like-any-white-hat-should-before-getting-into-the-action'
+  hint: 'Undoubtedly you want to read our security policy before conducting any research on our application.'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/miscellaneous.html#_behave_like_any_white_hat_should_before_getting_into_the_action'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Vulnerability_Disclosure_Cheat_Sheet.html'
   key: securityPolicyChallenge
 -
@@ -824,7 +873,7 @@
   description: 'Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src="javascript:alert(`xss`)"&gt;</code> bypassing a <i>server-side</i> security mechanism.'
   difficulty: 4
   hint: 'The "Comment" field in the "Customer Feedback" screen is where you want to put your focus on.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/xss.html#perform-a-persisted-xss-attack-bypassing-a-server-side-security-mechanism'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/xss.html#_perform_a_persisted_xss_attack_bypassing_a_server_side_security_mechanism'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html'
   key: persistedXssFeedbackChallenge
   disabledEnv:
@@ -839,7 +888,7 @@
   description: '<a href="/#/contact">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)'
   difficulty: 4
   hint: 'No matter how good your eyes are, you will need tool assistance for this challenge.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/security-through-obscurity.html#rat-out-a-notorious-character-hiding-in-plain-sight-in-the-shop'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/security-through-obscurity.html#_rat_out_a_notorious_character_hiding_in_plain_sight_in_the_shop'
   mitigationUrl: ~
   key: hiddenImageChallenge
 -
@@ -850,7 +899,7 @@
   description: 'Perform a Remote Code Execution that occupies the server for a while without using infinite loops.'
   difficulty: 6
   hint: 'Your attack payload must not trigger the protection against too many iterations.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/insecure-deserialization.html#perform-a-remote-code-execution-that-occupies-the-server-for-a-while-without-using-infinite-loops'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/insecure-deserialization.html#_perform_a_remote_code_execution_that_occupies_the_server_for_a_while_without_using_infinite_loops'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Denial_of_Service_Cheat_Sheet.html'
   key: rceOccupyChallenge
   disabledEnv:
@@ -865,7 +914,7 @@
   description: '<a href="/#/contact">Inform the development team</a> about a danger to some of <em>their</em> credentials. (Send them the URL of the <em>original report</em> or an assigned CVE or another identifier of this vulnerability)'
   difficulty: 5
   hint: 'This vulnerability will not affect any customer of the shop. It is aimed exclusively at its developers.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/vulnerable-components.html#inform-the-development-team-about-a-danger-to-some-of-their-credentials'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/vulnerable-components.html#_inform_the_development_team_about_a_danger_to_some_of_their_credentials'
   mitigationUrl: ~
   key: supplyChainAttackChallenge
 -
@@ -874,7 +923,7 @@
   description: 'Solve the 2FA challenge for user "wurstbrot". (Disabling, bypassing or overwriting his 2FA settings does not count as a solution)'
   difficulty: 5
   hint: 'The 2FA implementation requires to store a secret for every user. You will need to find a way to access this secret in order to solve this challenge.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-authentication.html#solve-the-2fa-challenge-for-user-wurstbrot'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-authentication.html#_solve_the_2fa_challenge_for_user_wurstbrot'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Multifactor_Authentication_Cheat_Sheet.html'
   key: twoFactorAuthUnsafeSecretStorageChallenge
 -
@@ -883,7 +932,7 @@
   description: 'Forge an essentially unsigned JWT token that impersonates the (non-existing) user <i>jwtn3d@juice-sh.op</i>.'
   difficulty: 5
   hint: 'This challenge exploits a weird option that is supported when signing tokens with JWT.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/vulnerable-components.html#forge-an-essentially-unsigned-jwt-token'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/vulnerable-components.html#_forge_an_essentially_unsigned_jwt_token'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/JSON_Web_Token_for_Java_Cheat_Sheet.html'
   key: jwtUnsignedChallenge
 -
@@ -892,7 +941,7 @@
   description: 'Upload a file larger than 100 kB.'
   difficulty: 3
   hint: 'You can attach a small file to the "Complaint" form. Investigate how this upload actually works.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/improper-input-validation.html#upload-a-file-larger-than-100-kb'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/improper-input-validation.html#_upload_a_file_larger_than_100_kb'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html'
   key: uploadSizeChallenge
 -
@@ -901,7 +950,7 @@
   description: 'Upload a file that has no .pdf or .zip extension.'
   difficulty: 3
   hint: 'You can attach a PDF or ZIP file to the "Complaint" form. Investigate how this upload actually works.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/improper-input-validation.html#upload-a-file-that-has-no-pdf-or-zip-extension'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/improper-input-validation.html#_upload_a_file_that_has_no_pdf_or_zip_extension'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html'
   key: uploadTypeChallenge
 -
@@ -910,7 +959,7 @@
   description: 'Retrieve a list of all user credentials via SQL Injection.'
   difficulty: 4
   hint: 'Gather information on where user data is stored and how it is addressed. Then craft a corresponding UNION SELECT attack.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/injection.html#retrieve-a-list-of-all-user-credentials-via-sql-injection'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/injection.html#_retrieve_a_list_of_all_user_credentials_via_sql_injection'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html'
   key: unionSqlInjectionChallenge
 -
@@ -921,7 +970,7 @@
   description: 'Embed an XSS payload <code>&lt;/script&gt;&lt;script&gt;alert(`xss`)&lt;/script&gt;</code> into our promo video.'
   difficulty: 6
   hint: 'You have to reuse the vulnerability behind one other 6-star challenge to be able to solve this one.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/xss.html#embed-an-xss-payload-into-our-promo-video'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/xss.html#_embed_an_xss_payload_into_our_promo_video'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html'
   key: videoXssChallenge
   disabledEnv:
@@ -937,7 +986,7 @@
   description: 'View another user''s shopping basket.'
   difficulty: 2
   hint: 'Have an eye on the HTTP traffic while shopping. Alternatively try to find a client-side association of users to their basket.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-access-control.html#view-another-users-shopping-basket'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-access-control.html#_view_another_users_shopping_basket'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Access_Control_Cheat_Sheet.html'
   key: basketAccessChallenge
   tutorial:
@@ -950,7 +999,7 @@
   description: '<a href="/#/contact">Inform the shop</a> about a vulnerable library it is using. (Mention the exact library name and version in your comment)'
   difficulty: 4
   hint: 'Report one of two possible answers via the "Customer Feedback" form. Do not forget to submit the library''s version as well.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/vulnerable-components.html#inform-the-shop-about-a-vulnerable-library-it-is-using'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/vulnerable-components.html#_inform_the_shop_about_a_vulnerable_library_it_is_using'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Vulnerability_Disclosure_Cheat_Sheet.html'
   key: knownVulnerableComponentChallenge
 -
@@ -959,7 +1008,7 @@
   description: '<a href="/#/contact">Inform the shop</a> about an algorithm or library it should definitely not use the way it does.'
   difficulty: 2
   hint: 'Report one of four possible answers via the "Customer Feedback" form.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/cryptographic-issues.html#inform-the-shop-about-an-algorithm-or-library-it-should-definitely-not-use-the-way-it-does'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/cryptographic-issues.html#_inform_the_shop_about_an_algorithm_or_library_it_should_definitely_not_use_the_way_it_does'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Vulnerability_Disclosure_Cheat_Sheet.html'
   key: weirdCryptoChallenge
 -
@@ -970,7 +1019,7 @@
   description: 'Enforce a redirect to a page you are not supposed to redirect to.'
   difficulty: 4
   hint: 'You have to find a way to beat the allowlist of allowed redirect URLs.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/unvalidated-redirects.html#enforce-a-redirect-to-a-page-you-are-not-supposed-to-redirect-to'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/unvalidated-redirects.html#_enforce_a_redirect_to_a_page_you_are_not_supposed_to_redirect_to'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html'
   key: redirectChallenge
 -
@@ -981,7 +1030,7 @@
   description: 'Retrieve the content of <code>C:\Windows\system.ini</code> or <code>/etc/passwd</code> from the server.'
   difficulty: 3
   hint: 'The leverage point for this challenge is the deprecated B2B interface.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/xxe.html#retrieve-the-content-of-cwindowssystemini-or-etcpasswd-from-the-server'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/xxe.html#_retrieve_the_content_of_cwindowssystemini_or_etcpasswd_from_the_server'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html'
   key: xxeFileDisclosureChallenge
   disabledEnv:
@@ -996,7 +1045,7 @@
   description: 'Give the server something to chew on for quite a while.'
   difficulty: 5
   hint: 'It is not as easy as sending a large amount of data directly to the deprecated B2B interface.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/xxe.html#give-the-server-something-to-chew-on-for-quite-a-while'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/xxe.html#_give_the_server_something_to_chew_on_for_quite_a_while'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html'
   key: xxeDosChallenge
   disabledEnv:
@@ -1009,7 +1058,7 @@
   description: 'Give a devastating zero-star feedback to the store.'
   difficulty: 1
   hint: 'Before you invest time bypassing the API, you might want to play around with the UI a bit.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/improper-input-validation.html#give-a-devastating-zero-star-feedback-to-the-store'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/improper-input-validation.html#_give_a_devastating_zero_star_feedback_to_the_store'
   mitigationUrl: ~
   key: zeroStarsChallenge
 -
@@ -1020,7 +1069,7 @@
   description: 'Retrieve the photo of Bjoern''s cat in "melee combat-mode".'
   difficulty: 1
   hint: 'Check the Photo Wall for an image that could not be loaded correctly.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/improper-input-validation.html#retrieve-the-photo-of-bjoerns-cat-in-melee-combat-mode'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/improper-input-validation.html#_retrieve_the_photo_of_bjoerns_cat_in_melee_combat_mode'
   mitigationUrl: ~
   key: missingEncodingChallenge
 -
@@ -1031,7 +1080,7 @@
   description: 'Stick <a href="http://placekitten.com/" target="_blank">cute cross-domain kittens</a> all over our delivery boxes.'
   difficulty: 5
   hint: 'This challenge would formally have to be in several categories as the developers made multiple gaffes for this to be possible.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/injection.html#stick-cute-cross-domain-kittens-all-over-our-delivery-boxes'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/injection.html#_stick_cute_cross_domain_kittens_all_over_our_delivery_boxes'
   mitigationUrl: ~
   key: svgInjectionChallenge
 -
@@ -1042,7 +1091,7 @@
   description: 'Find the endpoint that serves usage data to be scraped by a <a href="https://github.com/prometheus/prometheus">popular monitoring system</a>.'
   difficulty: 1
   hint: 'Try to guess what URL the endpoint might have.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#find-the-endpoint-that-serves-usage-data-to-be-scraped-by-a-popular-monitoring-system'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_find_the_endpoint_that_serves_usage_data_to_be_scraped_by_a_popular_monitoring_system'
   mitigationUrl: ~
   key: exposedMetricsChallenge
 -
@@ -1051,7 +1100,7 @@
   description: 'Obtain a Deluxe Membership without paying for it.'
   difficulty: 3
   hint: 'Look closely at what happens when you attempt to upgrade your account.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/improper-input-validation.html#obtain-a-deluxe-membership-without-paying-for-it'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/improper-input-validation.html#_obtain_a_deluxe_membership_without_paying_for_it'
   mitigationUrl: ~
   key: freeDeluxeChallenge
 -
@@ -1060,7 +1109,7 @@
   description: 'Change the name of a user by performing Cross-Site Request Forgery from <a href="http://htmledit.squarefree.com">another origin</a>.'
   difficulty: 3
   hint: 'Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/broken-access-control.html#change-the-name-of-a-user-by-performing-cross-site-request-forgery-from-another-origin'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/broken-access-control.html#_change_the_name_of_a_user_by_performing_cross_site_request_forgery_from_another_origin'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html'
   key: csrfChallenge
 -
@@ -1072,7 +1121,7 @@
   description: 'Use the bonus payload <code>&lt;iframe width=&quot;100%&quot; height=&quot;166&quot; scrolling=&quot;no&quot; frameborder=&quot;no&quot; allow=&quot;autoplay&quot; src=&quot;https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&amp;color=%23ff5500&amp;auto_play=true&amp;hide_related=false&amp;show_comments=true&amp;show_user=true&amp;show_reposts=false&amp;show_teaser=true&quot;&gt;&lt;/iframe&gt;</code> in the <i>DOM XSS</i> challenge.'
   difficulty: 1
   hint: 'Copy + Paste = Solved!'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/xss.html#use-the-bonus-payload-in-the-dom-xss-challenge'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/xss.html#_use_the_bonus_payload_in_the_dom_xss_challenge'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html'
   key: xssBonusChallenge
   tutorial:
@@ -1085,7 +1134,7 @@
   description: 'Reset Uvogin''s password via the <a href="/#/forgot-password">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.'
   difficulty: 4
   hint: 'You might have to do some OSINT on his social media personas to find out his honest answer to the security question.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#reset-uvogins-password-via-the-forgot-password-mechanism'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_reset_uvogins_password_via_the_forgot_password_mechanism'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Choosing_and_Using_Security_Questions_Cheat_Sheet.html'
   key: resetPasswordUvoginChallenge
 -
@@ -1096,7 +1145,7 @@
   description: 'Determine the answer to John''s security question by looking at an upload of him to the Photo Wall and use it to reset his password via the <a href="/#/forgot-password">Forgot Password</a> mechanism.'
   difficulty: 2
   hint: 'Take a look at the meta data of the corresponding photo.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#determine-the-answer-to-johns-security-question'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_determine_the_answer_to_johns_security_question'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Choosing_and_Using_Security_Questions_Cheat_Sheet.html'
   key: geoStalkingMetaChallenge
 -
@@ -1107,7 +1156,7 @@
   description: 'Determine the answer to Emma''s security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href="/#/forgot-password">Forgot Password</a> mechanism.'
   difficulty: 2
   hint: 'Take a look at the details in the photo to determine the location of where it was taken.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html#determine-the-answer-to-emmas-security-question'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/sensitive-data-exposure.html#_determine_the_answer_to_emmas_security_question'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Choosing_and_Using_Security_Questions_Cheat_Sheet.html'
   key: geoStalkingVisualChallenge
 -
@@ -1118,7 +1167,7 @@
   description: 'Permanently disable the support chatbot so that it can no longer answer customer queries.'
   difficulty: 5
   hint: 'Think of a way to get a hold of the internal workings on the chatbot API.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/improper-input-validation.html#permanently-disable-the-support-chatbot'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/improper-input-validation.html#_permanently_disable_the_support_chatbot'
   mitigationUrl: 'https://cheatsheetseries.owasp.org/cheatsheets/Vulnerable_Dependency_Management_Cheat_Sheet.html'
   key: killChatbotChallenge
 -
@@ -1126,10 +1175,10 @@
   category: 'Improper Input Validation'
   tags:
     - Prerequisite
-  description: 'Bypass a security control with a <a href="http://hakipedia.com/index.php/Poison_Null_Byte">Poison Null Byte</a> to access a file not meant for your eyes.'
+  description: 'Bypass a security control with a <a href="https://hakipedia.com/index.php/Poison_Null_Byte">Poison Null Byte</a> to access a file not meant for your eyes.'
   difficulty: 4
   hint: 'Take a look at the details in the photo to determine the location of where it was taken.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/improper-input-validation.html#bypass-a-security-control-with-a-poison-null-byte'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/improper-input-validation.html#_bypass_a_security_control_with_a_poison_null_byte'
   mitigationUrl: ~
   key: nullByteChallenge
 -
@@ -1141,7 +1190,7 @@
   description: 'Receive a coupon code from the support chatbot.'
   difficulty: 1
   hint: 'Just keep asking.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/miscellaneous.html#receive-a-coupon-code-from-the-support-chatbot'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/miscellaneous.html#_receive_a_coupon_code_from_the_support_chatbot'
   mitigationUrl: ~
   key: bullyChatbotChallenge
 -
@@ -1152,6 +1201,7 @@
     - Danger Zone
   difficulty: 5
   hint: 'You should read up on vulnerabilities in popular NodeJs template engines.'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/vulnerable-components.html#_gain_read_access_to_an_arbitrary_local_file_on_the_web_server'
   description: 'Gain read access to an arbitrary local file on the web server.'
   key: 'lfrChallenge'
   disabledEnv:
@@ -1164,6 +1214,6 @@
   description: 'Close multiple "Challenge solved"-notifications in one go.'
   difficulty: 1
   hint: 'Either check the official documentation or inspect a notification UI element directly.'
-  hintUrl: 'https://pwning.owasp-juice.shop/part2/score-board.html#close-multiple-challenge-solved-notifications-in-one-go'
+  hintUrl: 'https://pwning.owasp-juice.shop/companion-guide/latest/part2/score-board.html#_close_multiple_challenge_solved_notifications_in_one_go'
   mitigationUrl: ~
   key: closeNotificationsChallenge
diff --git a/data/static/codefixes/adminSectionChallenge_1_correct.ts b/data/static/codefixes/adminSectionChallenge_1_correct.ts
index 5273237b97d..845bf5eba6c 100644
--- a/data/static/codefixes/adminSectionChallenge_1_correct.ts
+++ b/data/static/codefixes/adminSectionChallenge_1_correct.ts
@@ -157,6 +157,22 @@ const routes: Routes = [
         component: LastLoginIpComponent
       }
     ]
+  },
+  {
+    path: 'juicy-nft',
+    component: NFTUnlockComponent
+  },
+  {
+    path: 'wallet-web3',
+    loadChildren: async () => await loadWeb3WalletModule()
+  },
+  {
+    path: 'web3-sandbox',
+    loadChildren: async () => await loadWeb3SandboxtModule()
+  },
+  {
+    path: 'bee-haven',
+    loadChildren: async () => await loadFaucetModule()
   },
    {
     matcher: oauthMatcher,
diff --git a/data/static/codefixes/adminSectionChallenge_2.ts b/data/static/codefixes/adminSectionChallenge_2.ts
index 6576d14deb4..076541089ad 100644
--- a/data/static/codefixes/adminSectionChallenge_2.ts
+++ b/data/static/codefixes/adminSectionChallenge_2.ts
@@ -154,6 +154,22 @@ const routes: Routes = [
         component: LastLoginIpComponent
       }
     ]
+  },
+  {
+    path: 'juicy-nft',
+    component: NFTUnlockComponent
+  },
+  {
+    path: 'wallet-web3',
+    loadChildren: async () => await loadWeb3WalletModule()
+  },
+  {
+    path: 'web3-sandbox',
+    loadChildren: async () => await loadWeb3SandboxtModule()
+  },
+  {
+    path: 'bee-haven',
+    loadChildren: async () => await loadFaucetModule()
   },
    {
     matcher: oauthMatcher,
diff --git a/data/static/codefixes/adminSectionChallenge_3.ts b/data/static/codefixes/adminSectionChallenge_3.ts
index 08c8f4b826b..5f0595bdda8 100644
--- a/data/static/codefixes/adminSectionChallenge_3.ts
+++ b/data/static/codefixes/adminSectionChallenge_3.ts
@@ -154,6 +154,22 @@ const routes: Routes = [
         component: LastLoginIpComponent
       }
     ]
+  },
+  {
+    path: 'juicy-nft',
+    component: NFTUnlockComponent
+  },
+  {
+    path: 'wallet-web3',
+    loadChildren: async () => await loadWeb3WalletModule()
+  },
+  {
+    path: 'web3-sandbox',
+    loadChildren: async () => await loadWeb3SandboxtModule()
+  },
+  {
+    path: 'bee-haven',
+    loadChildren: async () => await loadFaucetModule()
   },
    {
     matcher: oauthMatcher,
diff --git a/data/static/codefixes/adminSectionChallenge_4.ts b/data/static/codefixes/adminSectionChallenge_4.ts
index 779539a2dee..bc2c3ffc853 100644
--- a/data/static/codefixes/adminSectionChallenge_4.ts
+++ b/data/static/codefixes/adminSectionChallenge_4.ts
@@ -154,6 +154,22 @@ const routes: Routes = [
         component: LastLoginIpComponent
       }
     ]
+  },
+  {
+    path: 'juicy-nft',
+    component: NFTUnlockComponent
+  },
+  {
+    path: 'wallet-web3',
+    loadChildren: async () => await loadWeb3WalletModule()
+  },
+  {
+    path: 'web3-sandbox',
+    loadChildren: async () => await loadWeb3SandboxtModule()
+  },
+  {
+    path: 'bee-haven',
+    loadChildren: async () => await loadFaucetModule()
   },
    {
     matcher: oauthMatcher,
diff --git a/data/static/codefixes/exposedMetricsChallenge_1.ts b/data/static/codefixes/exposedMetricsChallenge_1.ts
index 9b825c485a3..f33f657f421 100644
--- a/data/static/codefixes/exposedMetricsChallenge_1.ts
+++ b/data/static/codefixes/exposedMetricsChallenge_1.ts
@@ -7,7 +7,7 @@ errorhandler.title = `${config.get('application.name')} (Express ${utils.version
 const registerWebsocketEvents = require('./lib/startup/registerWebsocketEvents')
 const customizeApplication = require('./lib/startup/customizeApplication')
 
-export async function start (readyCallback: Function) {
+export async function start (readyCallback: any) {
   const datacreatorEnd = startupGauge.startTimer({ task: 'datacreator' })
   await sequelize.sync({ force: true })
   await datacreator()
diff --git a/data/static/codefixes/exposedMetricsChallenge_2.ts b/data/static/codefixes/exposedMetricsChallenge_2.ts
index 2cb4fa2ee21..28799426bb8 100644
--- a/data/static/codefixes/exposedMetricsChallenge_2.ts
+++ b/data/static/codefixes/exposedMetricsChallenge_2.ts
@@ -6,7 +6,7 @@ errorhandler.title = `${config.get('application.name')} (Express ${utils.version
 const registerWebsocketEvents = require('./lib/startup/registerWebsocketEvents')
 const customizeApplication = require('./lib/startup/customizeApplication')
 
-export async function start (readyCallback: Function) {
+export async function start (readyCallback: any) {
   const datacreatorEnd = startupGauge.startTimer({ task: 'datacreator' })
   await sequelize.sync({ force: true })
   await datacreator()
diff --git a/data/static/codefixes/exposedMetricsChallenge_3_correct.ts b/data/static/codefixes/exposedMetricsChallenge_3_correct.ts
index e7ed765b18e..3685502b4d2 100644
--- a/data/static/codefixes/exposedMetricsChallenge_3_correct.ts
+++ b/data/static/codefixes/exposedMetricsChallenge_3_correct.ts
@@ -7,7 +7,7 @@ errorhandler.title = `${config.get('application.name')} (Express ${utils.version
 const registerWebsocketEvents = require('./lib/startup/registerWebsocketEvents')
 const customizeApplication = require('./lib/startup/customizeApplication')
 
-export async function start (readyCallback: Function) {
+export async function start (readyCallback: any) {
   const datacreatorEnd = startupGauge.startTimer({ task: 'datacreator' })
   await sequelize.sync({ force: true })
   await datacreator()
diff --git a/data/static/codefixes/nftMintChallenge.info.yml b/data/static/codefixes/nftMintChallenge.info.yml
new file mode 100644
index 00000000000..e8ad882cf8b
--- /dev/null
+++ b/data/static/codefixes/nftMintChallenge.info.yml
@@ -0,0 +1,13 @@
+fixes:
+  - id: 1
+    explanation: 'Wrong!'
+  - id: 2
+    explanation: 'Wrong!'
+  - id: 3
+    explanation: 'Wrong!'
+  - id: 4
+    explanation: 'Correct!'
+hints:
+  - 'Hint1'
+  - 'Hint2'
+  - 'Hint3'
diff --git a/data/static/codefixes/nftMintChallenge_1.sol b/data/static/codefixes/nftMintChallenge_1.sol
new file mode 100644
index 00000000000..27fa0def98d
--- /dev/null
+++ b/data/static/codefixes/nftMintChallenge_1.sol
@@ -0,0 +1,31 @@
+pragma solidity ^0.8.0;
+
+import "@openzeppelin/contracts/token/ERC721/ERC721.sol";
+import "@openzeppelin/contracts/access/Ownable.sol";
+import "@openzeppelin/contracts/utils/math/SafeMath.sol";
+import "@openzeppelin/contracts/token/ERC20/IERC20.sol";
+
+contract HoneyPotNFT is ERC721, Ownable {
+    using SafeMath for uint256;
+
+    IERC20 public token = IERC20(0x36435796Ca9be2bf150CE0dECc2D8Fab5C4d6E13);
+    uint256 public constant mintPrice = 1000 * (10**18);
+    uint256 public totalSupply = 0;
+
+    string public constant fixedMetadataHash = "QmRad1vxT3soFMNx9j3bBmkABb4C86anY1f5XeonosHy3m";
+    event NFTMinted(address indexed owner, uint256 tokenId);
+
+    constructor() ERC721("The Enchanted Honey Pot", "EHP") {}
+
+    function mintNFT() external {
+        token.transferFrom(msg.sender, address(this), mintPrice);
+        _safeMint(msg.sender, totalSupply);
+        totalSupply = totalSupply.add(1);
+        emit NFTMinted(msg.sender, totalSupply - 1);
+    }
+
+    function tokenURI(uint256 tokenId) public view override returns (string memory) {
+        require(_exists(tokenId), "Token does not exist.");
+        return fixedMetadataHash;
+    }
+}
\ No newline at end of file
diff --git a/data/static/codefixes/nftMintChallenge_2.sol b/data/static/codefixes/nftMintChallenge_2.sol
new file mode 100644
index 00000000000..27fa0def98d
--- /dev/null
+++ b/data/static/codefixes/nftMintChallenge_2.sol
@@ -0,0 +1,31 @@
+pragma solidity ^0.8.0;
+
+import "@openzeppelin/contracts/token/ERC721/ERC721.sol";
+import "@openzeppelin/contracts/access/Ownable.sol";
+import "@openzeppelin/contracts/utils/math/SafeMath.sol";
+import "@openzeppelin/contracts/token/ERC20/IERC20.sol";
+
+contract HoneyPotNFT is ERC721, Ownable {
+    using SafeMath for uint256;
+
+    IERC20 public token = IERC20(0x36435796Ca9be2bf150CE0dECc2D8Fab5C4d6E13);
+    uint256 public constant mintPrice = 1000 * (10**18);
+    uint256 public totalSupply = 0;
+
+    string public constant fixedMetadataHash = "QmRad1vxT3soFMNx9j3bBmkABb4C86anY1f5XeonosHy3m";
+    event NFTMinted(address indexed owner, uint256 tokenId);
+
+    constructor() ERC721("The Enchanted Honey Pot", "EHP") {}
+
+    function mintNFT() external {
+        token.transferFrom(msg.sender, address(this), mintPrice);
+        _safeMint(msg.sender, totalSupply);
+        totalSupply = totalSupply.add(1);
+        emit NFTMinted(msg.sender, totalSupply - 1);
+    }
+
+    function tokenURI(uint256 tokenId) public view override returns (string memory) {
+        require(_exists(tokenId), "Token does not exist.");
+        return fixedMetadataHash;
+    }
+}
\ No newline at end of file
diff --git a/data/static/codefixes/nftMintChallenge_3.sol b/data/static/codefixes/nftMintChallenge_3.sol
new file mode 100644
index 00000000000..27fa0def98d
--- /dev/null
+++ b/data/static/codefixes/nftMintChallenge_3.sol
@@ -0,0 +1,31 @@
+pragma solidity ^0.8.0;
+
+import "@openzeppelin/contracts/token/ERC721/ERC721.sol";
+import "@openzeppelin/contracts/access/Ownable.sol";
+import "@openzeppelin/contracts/utils/math/SafeMath.sol";
+import "@openzeppelin/contracts/token/ERC20/IERC20.sol";
+
+contract HoneyPotNFT is ERC721, Ownable {
+    using SafeMath for uint256;
+
+    IERC20 public token = IERC20(0x36435796Ca9be2bf150CE0dECc2D8Fab5C4d6E13);
+    uint256 public constant mintPrice = 1000 * (10**18);
+    uint256 public totalSupply = 0;
+
+    string public constant fixedMetadataHash = "QmRad1vxT3soFMNx9j3bBmkABb4C86anY1f5XeonosHy3m";
+    event NFTMinted(address indexed owner, uint256 tokenId);
+
+    constructor() ERC721("The Enchanted Honey Pot", "EHP") {}
+
+    function mintNFT() external {
+        token.transferFrom(msg.sender, address(this), mintPrice);
+        _safeMint(msg.sender, totalSupply);
+        totalSupply = totalSupply.add(1);
+        emit NFTMinted(msg.sender, totalSupply - 1);
+    }
+
+    function tokenURI(uint256 tokenId) public view override returns (string memory) {
+        require(_exists(tokenId), "Token does not exist.");
+        return fixedMetadataHash;
+    }
+}
\ No newline at end of file
diff --git a/data/static/codefixes/nftMintChallenge_4_correct.sol b/data/static/codefixes/nftMintChallenge_4_correct.sol
new file mode 100644
index 00000000000..27fa0def98d
--- /dev/null
+++ b/data/static/codefixes/nftMintChallenge_4_correct.sol
@@ -0,0 +1,31 @@
+pragma solidity ^0.8.0;
+
+import "@openzeppelin/contracts/token/ERC721/ERC721.sol";
+import "@openzeppelin/contracts/access/Ownable.sol";
+import "@openzeppelin/contracts/utils/math/SafeMath.sol";
+import "@openzeppelin/contracts/token/ERC20/IERC20.sol";
+
+contract HoneyPotNFT is ERC721, Ownable {
+    using SafeMath for uint256;
+
+    IERC20 public token = IERC20(0x36435796Ca9be2bf150CE0dECc2D8Fab5C4d6E13);
+    uint256 public constant mintPrice = 1000 * (10**18);
+    uint256 public totalSupply = 0;
+
+    string public constant fixedMetadataHash = "QmRad1vxT3soFMNx9j3bBmkABb4C86anY1f5XeonosHy3m";
+    event NFTMinted(address indexed owner, uint256 tokenId);
+
+    constructor() ERC721("The Enchanted Honey Pot", "EHP") {}
+
+    function mintNFT() external {
+        token.transferFrom(msg.sender, address(this), mintPrice);
+        _safeMint(msg.sender, totalSupply);
+        totalSupply = totalSupply.add(1);
+        emit NFTMinted(msg.sender, totalSupply - 1);
+    }
+
+    function tokenURI(uint256 tokenId) public view override returns (string memory) {
+        require(_exists(tokenId), "Token does not exist.");
+        return fixedMetadataHash;
+    }
+}
\ No newline at end of file
diff --git a/data/static/codefixes/nftUnlockChallenge.info.yml b/data/static/codefixes/nftUnlockChallenge.info.yml
new file mode 100644
index 00000000000..d5b0c716beb
--- /dev/null
+++ b/data/static/codefixes/nftUnlockChallenge.info.yml
@@ -0,0 +1,13 @@
+fixes:
+  - id: 1
+    explanation: 'Wrong!'
+  - id: 2
+    explanation: 'Correct!'
+  - id: 3
+    explanation: 'Wrong!'
+  - id: 4
+    explanation: 'Wrong!'
+hints:
+  - 'Hint1'
+  - 'Hint2'
+  - 'Hint3'
diff --git a/data/static/codefixes/nftUnlockChallenge_1.sol b/data/static/codefixes/nftUnlockChallenge_1.sol
new file mode 100644
index 00000000000..2b52a5e16d9
--- /dev/null
+++ b/data/static/codefixes/nftUnlockChallenge_1.sol
@@ -0,0 +1,43 @@
+pragma solidity ^0.8.4;
+
+import "@openzeppelin/contracts/token/ERC721/ERC721.sol";
+import "@openzeppelin/contracts/token/ERC721/extensions/ERC721URIStorage.sol";
+import "@openzeppelin/contracts/access/Ownable.sol";
+import "@openzeppelin/contracts/utils/Counters.sol";
+
+contract JuiceShopSBT is ERC721, ERC721URIStorage, Ownable {
+    using Counters for Counters.Counter;
+
+    Counters.Counter private _tokenIdCounter;
+
+    constructor() ERC721("JuiceShopSBT", "JS") {}
+
+    function safeMint(address to, string memory uri) public onlyOwner {
+        uint256 tokenId = _tokenIdCounter.current();
+        _tokenIdCounter.increment();
+        _safeMint(to, tokenId);
+        _setTokenURI(tokenId, uri);
+    }
+
+    function _beforeTokenTransfer(
+    address from,
+    address to,
+    uint256 tokenId
+    ) internal override virtual {
+    require(from == address(0), "Err: token transfer is BLOCKED");
+    super._beforeTokenTransfer(from, to, tokenId);
+    }
+
+    function _burn(uint256 tokenId) internal override(ERC721, ERC721URIStorage) {
+        super._burn(tokenId);
+    }
+
+    function tokenURI(uint256 tokenId)
+        public
+        view
+        override(ERC721, ERC721URIStorage)
+        returns (string memory)
+    {
+        return super.tokenURI(tokenId);
+    }
+}
\ No newline at end of file
diff --git a/data/static/codefixes/nftUnlockChallenge_2_correct.sol b/data/static/codefixes/nftUnlockChallenge_2_correct.sol
new file mode 100644
index 00000000000..2b52a5e16d9
--- /dev/null
+++ b/data/static/codefixes/nftUnlockChallenge_2_correct.sol
@@ -0,0 +1,43 @@
+pragma solidity ^0.8.4;
+
+import "@openzeppelin/contracts/token/ERC721/ERC721.sol";
+import "@openzeppelin/contracts/token/ERC721/extensions/ERC721URIStorage.sol";
+import "@openzeppelin/contracts/access/Ownable.sol";
+import "@openzeppelin/contracts/utils/Counters.sol";
+
+contract JuiceShopSBT is ERC721, ERC721URIStorage, Ownable {
+    using Counters for Counters.Counter;
+
+    Counters.Counter private _tokenIdCounter;
+
+    constructor() ERC721("JuiceShopSBT", "JS") {}
+
+    function safeMint(address to, string memory uri) public onlyOwner {
+        uint256 tokenId = _tokenIdCounter.current();
+        _tokenIdCounter.increment();
+        _safeMint(to, tokenId);
+        _setTokenURI(tokenId, uri);
+    }
+
+    function _beforeTokenTransfer(
+    address from,
+    address to,
+    uint256 tokenId
+    ) internal override virtual {
+    require(from == address(0), "Err: token transfer is BLOCKED");
+    super._beforeTokenTransfer(from, to, tokenId);
+    }
+
+    function _burn(uint256 tokenId) internal override(ERC721, ERC721URIStorage) {
+        super._burn(tokenId);
+    }
+
+    function tokenURI(uint256 tokenId)
+        public
+        view
+        override(ERC721, ERC721URIStorage)
+        returns (string memory)
+    {
+        return super.tokenURI(tokenId);
+    }
+}
\ No newline at end of file
diff --git a/data/static/codefixes/nftUnlockChallenge_3.sol b/data/static/codefixes/nftUnlockChallenge_3.sol
new file mode 100644
index 00000000000..2b52a5e16d9
--- /dev/null
+++ b/data/static/codefixes/nftUnlockChallenge_3.sol
@@ -0,0 +1,43 @@
+pragma solidity ^0.8.4;
+
+import "@openzeppelin/contracts/token/ERC721/ERC721.sol";
+import "@openzeppelin/contracts/token/ERC721/extensions/ERC721URIStorage.sol";
+import "@openzeppelin/contracts/access/Ownable.sol";
+import "@openzeppelin/contracts/utils/Counters.sol";
+
+contract JuiceShopSBT is ERC721, ERC721URIStorage, Ownable {
+    using Counters for Counters.Counter;
+
+    Counters.Counter private _tokenIdCounter;
+
+    constructor() ERC721("JuiceShopSBT", "JS") {}
+
+    function safeMint(address to, string memory uri) public onlyOwner {
+        uint256 tokenId = _tokenIdCounter.current();
+        _tokenIdCounter.increment();
+        _safeMint(to, tokenId);
+        _setTokenURI(tokenId, uri);
+    }
+
+    function _beforeTokenTransfer(
+    address from,
+    address to,
+    uint256 tokenId
+    ) internal override virtual {
+    require(from == address(0), "Err: token transfer is BLOCKED");
+    super._beforeTokenTransfer(from, to, tokenId);
+    }
+
+    function _burn(uint256 tokenId) internal override(ERC721, ERC721URIStorage) {
+        super._burn(tokenId);
+    }
+
+    function tokenURI(uint256 tokenId)
+        public
+        view
+        override(ERC721, ERC721URIStorage)
+        returns (string memory)
+    {
+        return super.tokenURI(tokenId);
+    }
+}
\ No newline at end of file
diff --git a/data/static/codefixes/nftUnlockChallenge_4.sol b/data/static/codefixes/nftUnlockChallenge_4.sol
new file mode 100644
index 00000000000..2b52a5e16d9
--- /dev/null
+++ b/data/static/codefixes/nftUnlockChallenge_4.sol
@@ -0,0 +1,43 @@
+pragma solidity ^0.8.4;
+
+import "@openzeppelin/contracts/token/ERC721/ERC721.sol";
+import "@openzeppelin/contracts/token/ERC721/extensions/ERC721URIStorage.sol";
+import "@openzeppelin/contracts/access/Ownable.sol";
+import "@openzeppelin/contracts/utils/Counters.sol";
+
+contract JuiceShopSBT is ERC721, ERC721URIStorage, Ownable {
+    using Counters for Counters.Counter;
+
+    Counters.Counter private _tokenIdCounter;
+
+    constructor() ERC721("JuiceShopSBT", "JS") {}
+
+    function safeMint(address to, string memory uri) public onlyOwner {
+        uint256 tokenId = _tokenIdCounter.current();
+        _tokenIdCounter.increment();
+        _safeMint(to, tokenId);
+        _setTokenURI(tokenId, uri);
+    }
+
+    function _beforeTokenTransfer(
+    address from,
+    address to,
+    uint256 tokenId
+    ) internal override virtual {
+    require(from == address(0), "Err: token transfer is BLOCKED");
+    super._beforeTokenTransfer(from, to, tokenId);
+    }
+
+    function _burn(uint256 tokenId) internal override(ERC721, ERC721URIStorage) {
+        super._burn(tokenId);
+    }
+
+    function tokenURI(uint256 tokenId)
+        public
+        view
+        override(ERC721, ERC721URIStorage)
+        returns (string memory)
+    {
+        return super.tokenURI(tokenId);
+    }
+}
\ No newline at end of file
diff --git a/data/static/codefixes/redirectChallenge_1.ts b/data/static/codefixes/redirectChallenge_1.ts
index e9d83f4be08..53d81bd0496 100644
--- a/data/static/codefixes/redirectChallenge_1.ts
+++ b/data/static/codefixes/redirectChallenge_1.ts
@@ -1,5 +1,5 @@
 export const redirectAllowlist = new Set([
-  'https://github.com/bkimminich/juice-shop',
+  'https://github.com/juice-shop/juice-shop',
   'https://blockchain.info/address/1AbKfgvw9psQ41NbLi8kufDQTezwG8DRZm',
   'https://explorer.dash.org/address/Xr556RzuwX6hg5EGpkybbv5RanJoZN17kW',
   'https://etherscan.io/address/0x0f933ab9fcaaa782d0279c300d73750e1311eae6',
diff --git a/data/static/codefixes/redirectChallenge_2.ts b/data/static/codefixes/redirectChallenge_2.ts
index 6c8e0c82d91..677162e9c9e 100644
--- a/data/static/codefixes/redirectChallenge_2.ts
+++ b/data/static/codefixes/redirectChallenge_2.ts
@@ -1,5 +1,5 @@
 export const redirectAllowlist = new Set([
-  'https://github.com/bkimminich/juice-shop',
+  'https://github.com/juice-shop/juice-shop',
   'https://blockchain.info/address/1AbKfgvw9psQ41NbLi8kufDQTezwG8DRZm',
   'https://explorer.dash.org/address/Xr556RzuwX6hg5EGpkybbv5RanJoZN17kW',
   'https://etherscan.io/address/0x0f933ab9fcaaa782d0279c300d73750e1311eae6',
diff --git a/data/static/codefixes/redirectChallenge_3.ts b/data/static/codefixes/redirectChallenge_3.ts
index d95aec73ab5..a3de65d7b7b 100644
--- a/data/static/codefixes/redirectChallenge_3.ts
+++ b/data/static/codefixes/redirectChallenge_3.ts
@@ -1,5 +1,5 @@
 export const redirectAllowlist = new Set([
-  'https://github.com/bkimminich/juice-shop',
+  'https://github.com/juice-shop/juice-shop',
   'https://blockchain.info/address/1AbKfgvw9psQ41NbLi8kufDQTezwG8DRZm',
   'https://explorer.dash.org/address/Xr556RzuwX6hg5EGpkybbv5RanJoZN17kW',
   'https://etherscan.io/address/0x0f933ab9fcaaa782d0279c300d73750e1311eae6',
diff --git a/data/static/codefixes/redirectChallenge_4_correct.ts b/data/static/codefixes/redirectChallenge_4_correct.ts
index 49a988a3c30..bb5a8597fba 100644
--- a/data/static/codefixes/redirectChallenge_4_correct.ts
+++ b/data/static/codefixes/redirectChallenge_4_correct.ts
@@ -1,5 +1,5 @@
 export const redirectAllowlist = new Set([
-  'https://github.com/bkimminich/juice-shop',
+  'https://github.com/juice-shop/juice-shop',
   'https://blockchain.info/address/1AbKfgvw9psQ41NbLi8kufDQTezwG8DRZm',
   'https://explorer.dash.org/address/Xr556RzuwX6hg5EGpkybbv5RanJoZN17kW',
   'https://etherscan.io/address/0x0f933ab9fcaaa782d0279c300d73750e1311eae6',
diff --git a/data/static/codefixes/redirectCryptoCurrencyChallenge_1.ts b/data/static/codefixes/redirectCryptoCurrencyChallenge_1.ts
index 0a013c95050..8f3647872ff 100644
--- a/data/static/codefixes/redirectCryptoCurrencyChallenge_1.ts
+++ b/data/static/codefixes/redirectCryptoCurrencyChallenge_1.ts
@@ -1,5 +1,5 @@
 export const redirectAllowlist = new Set([
-  'https://github.com/bkimminich/juice-shop',
+  'https://github.com/juice-shop/juice-shop',
   'https://explorer.dash.org/address/Xr556RzuwX6hg5EGpkybbv5RanJoZN17kW',
   'https://etherscan.io/address/0x0f933ab9fcaaa782d0279c300d73750e1311eae6',
   'http://shop.spreadshirt.com/juiceshop',
diff --git a/data/static/codefixes/redirectCryptoCurrencyChallenge_2.ts b/data/static/codefixes/redirectCryptoCurrencyChallenge_2.ts
index 9f59837d5f0..2332e2390b8 100644
--- a/data/static/codefixes/redirectCryptoCurrencyChallenge_2.ts
+++ b/data/static/codefixes/redirectCryptoCurrencyChallenge_2.ts
@@ -1,5 +1,5 @@
 export const redirectAllowlist = new Set([
-  'https://github.com/bkimminich/juice-shop',
+  'https://github.com/juice-shop/juice-shop',
   'https://blockchain.info/address/1AbKfgvw9psQ41NbLi8kufDQTezwG8DRZm',
   'https://etherscan.io/address/0x0f933ab9fcaaa782d0279c300d73750e1311eae6',
   'http://shop.spreadshirt.com/juiceshop',
diff --git a/data/static/codefixes/redirectCryptoCurrencyChallenge_3_correct.ts b/data/static/codefixes/redirectCryptoCurrencyChallenge_3_correct.ts
index 71601c84694..06e19b583d6 100644
--- a/data/static/codefixes/redirectCryptoCurrencyChallenge_3_correct.ts
+++ b/data/static/codefixes/redirectCryptoCurrencyChallenge_3_correct.ts
@@ -1,5 +1,5 @@
 export const redirectAllowlist = new Set([
-  'https://github.com/bkimminich/juice-shop',
+  'https://github.com/juice-shop/juice-shop',
   'http://shop.spreadshirt.com/juiceshop',
   'http://shop.spreadshirt.de/juiceshop',
   'https://www.stickeryou.com/products/owasp-juice-shop/794',
diff --git a/data/static/codefixes/redirectCryptoCurrencyChallenge_4.ts b/data/static/codefixes/redirectCryptoCurrencyChallenge_4.ts
index 19fec507661..86170ca3f02 100644
--- a/data/static/codefixes/redirectCryptoCurrencyChallenge_4.ts
+++ b/data/static/codefixes/redirectCryptoCurrencyChallenge_4.ts
@@ -1,5 +1,5 @@
 export const redirectAllowlist = new Set([
-  'https://github.com/bkimminich/juice-shop',
+  'https://github.com/juice-shop/juice-shop',
   'https://blockchain.info/address/1AbKfgvw9psQ41NbLi8kufDQTezwG8DRZm',
   'https://explorer.dash.org/address/Xr556RzuwX6hg5EGpkybbv5RanJoZN17kW',
   'http://shop.spreadshirt.com/juiceshop',
diff --git a/data/static/codefixes/restfulXssChallenge_1_correct.ts b/data/static/codefixes/restfulXssChallenge_1_correct.ts
index 0e211e4cd44..77020ead022 100644
--- a/data/static/codefixes/restfulXssChallenge_1_correct.ts
+++ b/data/static/codefixes/restfulXssChallenge_1_correct.ts
@@ -50,5 +50,5 @@ ngAfterViewInit () {
         this.breakpoint = 6
       }
       this.cdRef.detectChanges()
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
\ No newline at end of file
diff --git a/data/static/codefixes/restfulXssChallenge_2.ts b/data/static/codefixes/restfulXssChallenge_2.ts
index 4f0a21b913a..fd72a47b988 100644
--- a/data/static/codefixes/restfulXssChallenge_2.ts
+++ b/data/static/codefixes/restfulXssChallenge_2.ts
@@ -51,7 +51,7 @@ ngAfterViewInit () {
         this.breakpoint = 6
       }
       this.cdRef.detectChanges()
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   encodeProductDescription (tableData: any[]) {
diff --git a/data/static/codefixes/restfulXssChallenge_3.ts b/data/static/codefixes/restfulXssChallenge_3.ts
index b9a1c390b38..509aca7409a 100644
--- a/data/static/codefixes/restfulXssChallenge_3.ts
+++ b/data/static/codefixes/restfulXssChallenge_3.ts
@@ -37,7 +37,7 @@ ngAfterViewInit () {
         this.filterTable()
       })
       this.cdRef.detectChanges()
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   trustProductDescription (tableData: any[]) {
diff --git a/data/static/codefixes/restfulXssChallenge_4.ts b/data/static/codefixes/restfulXssChallenge_4.ts
index d30e359987f..5e5b848528a 100644
--- a/data/static/codefixes/restfulXssChallenge_4.ts
+++ b/data/static/codefixes/restfulXssChallenge_4.ts
@@ -51,7 +51,7 @@ ngAfterViewInit () {
         this.breakpoint = 6
       }
       this.cdRef.detectChanges()
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   trustProductDescription (tableData: any[]) {
diff --git a/data/static/codefixes/scoreBoardChallenge_1_correct.ts b/data/static/codefixes/scoreBoardChallenge_1_correct.ts
index 94364436667..59a8ab36830 100644
--- a/data/static/codefixes/scoreBoardChallenge_1_correct.ts
+++ b/data/static/codefixes/scoreBoardChallenge_1_correct.ts
@@ -154,6 +154,22 @@ const routes: Routes = [
         component: LastLoginIpComponent
       }
     ]
+  },
+  {
+    path: 'juicy-nft',
+    component: NFTUnlockComponent
+  },
+  {
+    path: 'wallet-web3',
+    loadChildren: async () => await loadWeb3WalletModule()
+  },
+  {
+    path: 'web3-sandbox',
+    loadChildren: async () => await loadWeb3SandboxtModule()
+  },
+  {
+    path: 'bee-haven',
+    loadChildren: async () => await loadFaucetModule()
   },
    {
     matcher: oauthMatcher,
diff --git a/data/static/codefixes/scoreBoardChallenge_2.ts b/data/static/codefixes/scoreBoardChallenge_2.ts
index 2183a1bcebc..7ff0860b5a2 100644
--- a/data/static/codefixes/scoreBoardChallenge_2.ts
+++ b/data/static/codefixes/scoreBoardChallenge_2.ts
@@ -154,6 +154,22 @@ const routes: Routes = [
         component: LastLoginIpComponent
       }
     ]
+  },
+  {
+    path: 'juicy-nft',
+    component: NFTUnlockComponent
+  },
+  {
+    path: 'wallet-web3',
+    loadChildren: async () => await loadWeb3WalletModule()
+  },
+  {
+    path: 'web3-sandbox',
+    loadChildren: async () => await loadWeb3SandboxtModule()
+  },
+  {
+    path: 'bee-haven',
+    loadChildren: async () => await loadFaucetModule()
   },
    {
     matcher: oauthMatcher,
diff --git a/data/static/codefixes/scoreBoardChallenge_3.ts b/data/static/codefixes/scoreBoardChallenge_3.ts
index 867f702ed1b..f2436585881 100644
--- a/data/static/codefixes/scoreBoardChallenge_3.ts
+++ b/data/static/codefixes/scoreBoardChallenge_3.ts
@@ -150,6 +150,22 @@ const routes: Routes = [
         component: LastLoginIpComponent
       }
     ]
+  },
+  {
+    path: 'juicy-nft',
+    component: NFTUnlockComponent
+  },
+  {
+    path: 'wallet-web3',
+    loadChildren: async () => await loadWeb3WalletModule()
+  },
+  {
+    path: 'web3-sandbox',
+    loadChildren: async () => await loadWeb3SandboxtModule()
+  },
+  {
+    path: 'bee-haven',
+    loadChildren: async () => await loadFaucetModule()
   },
    {
     matcher: oauthMatcher,
diff --git a/data/static/codefixes/web3SandboxChallenge.info.yml b/data/static/codefixes/web3SandboxChallenge.info.yml
new file mode 100644
index 00000000000..f0903d18ba2
--- /dev/null
+++ b/data/static/codefixes/web3SandboxChallenge.info.yml
@@ -0,0 +1,11 @@
+fixes:
+  - id: 1
+    explanation: 'This sandbox is for the developers of the application and was added for easy testing and prototyping. Functionality like this does under no circumstances belong into an application when it goes into production!'
+  - id: 2
+    explanation: 'This sandbox is for the developers of the application and was added for easy testing and prototyping. Should it really be accessible for any user - even the eCommerce customers - who logged into the shop?'
+  - id: 3
+    explanation: 'This sandbox is for the developers of the application and was added for easy testing and prototyping. Are administrators of the web shop really the target audience for such a functionality?'
+hints:
+  - "Among the long list of route mappings, can you spot any that relates to a web3 sandbox feature?"
+  - "If you accidentally scrolled over the relevant line, try using the text search in your browser."
+  - 'Searching for "web3" should bring up some interesting route mappings.'
diff --git a/data/static/codefixes/web3SandboxChallenge_1_correct.ts b/data/static/codefixes/web3SandboxChallenge_1_correct.ts
new file mode 100644
index 00000000000..6dac4593491
--- /dev/null
+++ b/data/static/codefixes/web3SandboxChallenge_1_correct.ts
@@ -0,0 +1,187 @@
+const routes: Routes = [
+  {
+    path: 'administration',
+    component: AdministrationComponent,
+    canActivate: [AdminGuard]
+  },
+  {
+    path: 'accounting',
+    component: AccountingComponent,
+    canActivate: [AccountingGuard]
+  },
+  {
+    path: 'about',
+    component: AboutComponent
+  },
+  {
+    path: 'address/select',
+    component: AddressSelectComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'address/saved',
+    component: SavedAddressComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'address/create',
+    component: AddressCreateComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'address/edit/:addressId',
+    component: AddressCreateComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'delivery-method',
+    component: DeliveryMethodComponent
+  },
+  {
+    path: 'deluxe-membership',
+    component: DeluxeUserComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'saved-payment-methods',
+    component: SavedPaymentMethodsComponent
+  },
+  {
+    path: 'basket',
+    component: BasketComponent
+  },
+  {
+    path: 'order-completion/:id',
+    component: OrderCompletionComponent
+  },
+  {
+    path: 'contact',
+    component: ContactComponent
+  },
+  {
+    path: 'photo-wall',
+    component: PhotoWallComponent
+  },
+  {
+    path: 'complain',
+    component: ComplaintComponent
+  },
+  {
+    path: 'chatbot',
+    component: ChatbotComponent
+  },
+  {
+    path: 'order-summary',
+    component: OrderSummaryComponent
+  },
+  {
+    path: 'order-history',
+    component: OrderHistoryComponent
+  },
+  {
+    path: 'payment/:entity',
+    component: PaymentComponent
+  },
+  {
+    path: 'wallet',
+    component: WalletComponent
+  },
+  {
+    path: 'login',
+    component: LoginComponent
+  },
+  {
+    path: 'forgot-password',
+    component: ForgotPasswordComponent
+  },
+  {
+    path: 'recycle',
+    component: RecycleComponent
+  },
+  {
+    path: 'register',
+    component: RegisterComponent
+  },
+  {
+    path: 'search',
+    component: SearchResultComponent
+  },
+  {
+    path: 'hacking-instructor',
+    component: SearchResultComponent
+  },
+  {
+    path: 'score-board',
+    component: ScoreBoardComponent
+  },
+  {
+    path: 'track-result',
+    component: TrackResultComponent
+  },
+  {
+    path: 'track-result/new',
+    component: TrackResultComponent,
+    data: {
+      type: 'new'
+    }
+  },
+  {
+    path: '2fa/enter',
+    component: TwoFactorAuthEnterComponent
+  },
+  {
+    path: 'privacy-security',
+    component: PrivacySecurityComponent,
+    children: [
+      {
+        path: 'privacy-policy',
+        component: PrivacyPolicyComponent
+      },
+      {
+        path: 'change-password',
+        component: ChangePasswordComponent
+      },
+      {
+        path: 'two-factor-authentication',
+        component: TwoFactorAuthComponent
+      },
+      {
+        path: 'data-export',
+        component: DataExportComponent
+      },
+      {
+        path: 'last-login-ip',
+        component: LastLoginIpComponent
+      }
+    ]
+  },
+  {
+    path: 'juicy-nft',
+    component: NFTUnlockComponent
+  },
+  {
+    path: 'wallet-web3',
+    loadChildren: async () => await loadWeb3WalletModule()
+  },
+  {
+    path: 'bee-haven',
+    loadChildren: async () => await loadFaucetModule()
+  },
+   {
+    matcher: oauthMatcher,
+    data: { params: (window.location.href).substr(window.location.href.indexOf('#')) },
+    component: OAuthComponent
+  },
+  {
+    matcher: tokenMatcher,
+    component: TokenSaleComponent
+  },
+  {
+    path: '403',
+    component: ErrorPageComponent
+  },
+  {
+    path: '**',
+    component: SearchResultComponent
+  }
+]
\ No newline at end of file
diff --git a/data/static/codefixes/web3SandboxChallenge_2.ts b/data/static/codefixes/web3SandboxChallenge_2.ts
new file mode 100644
index 00000000000..c0febd5cf59
--- /dev/null
+++ b/data/static/codefixes/web3SandboxChallenge_2.ts
@@ -0,0 +1,192 @@
+const routes: Routes = [
+  {
+    path: 'administration',
+    component: AdministrationComponent,
+    canActivate: [AdminGuard]
+  },
+  {
+    path: 'accounting',
+    component: AccountingComponent,
+    canActivate: [AccountingGuard]
+  },
+  {
+    path: 'about',
+    component: AboutComponent
+  },
+  {
+    path: 'address/select',
+    component: AddressSelectComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'address/saved',
+    component: SavedAddressComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'address/create',
+    component: AddressCreateComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'address/edit/:addressId',
+    component: AddressCreateComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'delivery-method',
+    component: DeliveryMethodComponent
+  },
+  {
+    path: 'deluxe-membership',
+    component: DeluxeUserComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'saved-payment-methods',
+    component: SavedPaymentMethodsComponent
+  },
+  {
+    path: 'basket',
+    component: BasketComponent
+  },
+  {
+    path: 'order-completion/:id',
+    component: OrderCompletionComponent
+  },
+  {
+    path: 'contact',
+    component: ContactComponent
+  },
+  {
+    path: 'photo-wall',
+    component: PhotoWallComponent
+  },
+  {
+    path: 'complain',
+    component: ComplaintComponent
+  },
+  {
+    path: 'chatbot',
+    component: ChatbotComponent
+  },
+  {
+    path: 'order-summary',
+    component: OrderSummaryComponent
+  },
+  {
+    path: 'order-history',
+    component: OrderHistoryComponent
+  },
+  {
+    path: 'payment/:entity',
+    component: PaymentComponent
+  },
+  {
+    path: 'wallet',
+    component: WalletComponent
+  },
+  {
+    path: 'login',
+    component: LoginComponent
+  },
+  {
+    path: 'forgot-password',
+    component: ForgotPasswordComponent
+  },
+  {
+    path: 'recycle',
+    component: RecycleComponent
+  },
+  {
+    path: 'register',
+    component: RegisterComponent
+  },
+  {
+    path: 'search',
+    component: SearchResultComponent
+  },
+  {
+    path: 'hacking-instructor',
+    component: SearchResultComponent
+  },
+  {
+    path: 'score-board',
+    component: ScoreBoardComponent
+  },
+  {
+    path: 'track-result',
+    component: TrackResultComponent
+  },
+  {
+    path: 'track-result/new',
+    component: TrackResultComponent,
+    data: {
+      type: 'new'
+    }
+  },
+  {
+    path: '2fa/enter',
+    component: TwoFactorAuthEnterComponent
+  },
+  {
+    path: 'privacy-security',
+    component: PrivacySecurityComponent,
+    children: [
+      {
+        path: 'privacy-policy',
+        component: PrivacyPolicyComponent
+      },
+      {
+        path: 'change-password',
+        component: ChangePasswordComponent
+      },
+      {
+        path: 'two-factor-authentication',
+        component: TwoFactorAuthComponent
+      },
+      {
+        path: 'data-export',
+        component: DataExportComponent
+      },
+      {
+        path: 'last-login-ip',
+        component: LastLoginIpComponent
+      }
+    ]
+  },
+  {
+    path: 'juicy-nft',
+    component: NFTUnlockComponent
+  },
+  {
+    path: 'wallet-web3',
+    loadChildren: async () => await loadWeb3WalletModule()
+  },
+  {
+    path: 'web3-sandbox',
+    canActivate: [LoginGuard],
+    loadChildren: async () => await loadWeb3SandboxtModule()
+  },
+  {
+    path: 'bee-haven',
+    loadChildren: async () => await loadFaucetModule()
+  },
+   {
+    matcher: oauthMatcher,
+    data: { params: (window.location.href).substr(window.location.href.indexOf('#')) },
+    component: OAuthComponent
+  },
+  {
+    matcher: tokenMatcher,
+    component: TokenSaleComponent
+  },
+  {
+    path: '403',
+    component: ErrorPageComponent
+  },
+  {
+    path: '**',
+    component: SearchResultComponent
+  }
+]
\ No newline at end of file
diff --git a/data/static/codefixes/web3SandboxChallenge_3.ts b/data/static/codefixes/web3SandboxChallenge_3.ts
new file mode 100644
index 00000000000..5247f2f8f46
--- /dev/null
+++ b/data/static/codefixes/web3SandboxChallenge_3.ts
@@ -0,0 +1,192 @@
+const routes: Routes = [
+  {
+    path: 'administration',
+    component: AdministrationComponent,
+    canActivate: [AdminGuard]
+  },
+  {
+    path: 'accounting',
+    component: AccountingComponent,
+    canActivate: [AccountingGuard]
+  },
+  {
+    path: 'about',
+    component: AboutComponent
+  },
+  {
+    path: 'address/select',
+    component: AddressSelectComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'address/saved',
+    component: SavedAddressComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'address/create',
+    component: AddressCreateComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'address/edit/:addressId',
+    component: AddressCreateComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'delivery-method',
+    component: DeliveryMethodComponent
+  },
+  {
+    path: 'deluxe-membership',
+    component: DeluxeUserComponent,
+    canActivate: [LoginGuard]
+  },
+  {
+    path: 'saved-payment-methods',
+    component: SavedPaymentMethodsComponent
+  },
+  {
+    path: 'basket',
+    component: BasketComponent
+  },
+  {
+    path: 'order-completion/:id',
+    component: OrderCompletionComponent
+  },
+  {
+    path: 'contact',
+    component: ContactComponent
+  },
+  {
+    path: 'photo-wall',
+    component: PhotoWallComponent
+  },
+  {
+    path: 'complain',
+    component: ComplaintComponent
+  },
+  {
+    path: 'chatbot',
+    component: ChatbotComponent
+  },
+  {
+    path: 'order-summary',
+    component: OrderSummaryComponent
+  },
+  {
+    path: 'order-history',
+    component: OrderHistoryComponent
+  },
+  {
+    path: 'payment/:entity',
+    component: PaymentComponent
+  },
+  {
+    path: 'wallet',
+    component: WalletComponent
+  },
+  {
+    path: 'login',
+    component: LoginComponent
+  },
+  {
+    path: 'forgot-password',
+    component: ForgotPasswordComponent
+  },
+  {
+    path: 'recycle',
+    component: RecycleComponent
+  },
+  {
+    path: 'register',
+    component: RegisterComponent
+  },
+  {
+    path: 'search',
+    component: SearchResultComponent
+  },
+  {
+    path: 'hacking-instructor',
+    component: SearchResultComponent
+  },
+  {
+    path: 'score-board',
+    component: ScoreBoardComponent
+  },
+  {
+    path: 'track-result',
+    component: TrackResultComponent
+  },
+  {
+    path: 'track-result/new',
+    component: TrackResultComponent,
+    data: {
+      type: 'new'
+    }
+  },
+  {
+    path: '2fa/enter',
+    component: TwoFactorAuthEnterComponent
+  },
+  {
+    path: 'privacy-security',
+    component: PrivacySecurityComponent,
+    children: [
+      {
+        path: 'privacy-policy',
+        component: PrivacyPolicyComponent
+      },
+      {
+        path: 'change-password',
+        component: ChangePasswordComponent
+      },
+      {
+        path: 'two-factor-authentication',
+        component: TwoFactorAuthComponent
+      },
+      {
+        path: 'data-export',
+        component: DataExportComponent
+      },
+      {
+        path: 'last-login-ip',
+        component: LastLoginIpComponent
+      }
+    ]
+  },
+  {
+    path: 'juicy-nft',
+    component: NFTUnlockComponent
+  },
+  {
+    path: 'wallet-web3',
+    loadChildren: async () => await loadWeb3WalletModule()
+  },
+  {
+    path: 'web3-sandbox',
+    canActivate: [AdminGuard],
+    loadChildren: async () => await loadWeb3SandboxtModule()
+  },
+  {
+    path: 'bee-haven',
+    loadChildren: async () => await loadFaucetModule()
+  },
+   {
+    matcher: oauthMatcher,
+    data: { params: (window.location.href).substr(window.location.href.indexOf('#')) },
+    component: OAuthComponent
+  },
+  {
+    matcher: tokenMatcher,
+    component: TokenSaleComponent
+  },
+  {
+    path: '403',
+    component: ErrorPageComponent
+  },
+  {
+    path: '**',
+    component: SearchResultComponent
+  }
+]
\ No newline at end of file
diff --git a/data/static/codefixes/web3WalletChallenge.info.yml b/data/static/codefixes/web3WalletChallenge.info.yml
new file mode 100644
index 00000000000..e3b3df18f81
--- /dev/null
+++ b/data/static/codefixes/web3WalletChallenge.info.yml
@@ -0,0 +1,13 @@
+fixes:
+  - id: 1
+    explanation: 'Wrong!'
+  - id: 2
+    explanation: 'Wrong!'
+  - id: 3
+    explanation: 'Correct!'
+  - id: 4
+    explanation: 'Wrong!'
+hints:
+  - 'Hint1'
+  - 'Hint2'
+  - 'Hint3'
diff --git a/data/static/codefixes/web3WalletChallenge_1.sol b/data/static/codefixes/web3WalletChallenge_1.sol
new file mode 100644
index 00000000000..1eabd3d55e5
--- /dev/null
+++ b/data/static/codefixes/web3WalletChallenge_1.sol
@@ -0,0 +1,36 @@
+pragma solidity ^0.6.12;
+import 'https://github.com/OpenZeppelin/openzeppelin-contracts/blob/release-v3.3/contracts/math/SafeMath.sol';
+
+contract ETHWalletBank {
+  using SafeMath for uint256;
+
+  mapping(address => uint) public balances;
+  mapping(address => uint) public userWithdrawing;
+
+  event ContractExploited(address indexed culprit);
+
+  function ethdeposit(address _to) public payable {
+    balances[_to] = balances[_to].add(msg.value);
+  }
+
+  function balanceOf(address _who) public view returns (uint balance) {
+    return balances[_who];
+  }
+
+  function withdraw(uint _amount) public {
+    require(_amount <= 0.1 ether, "Withdrawal amount must be less than or equal to 0.1 ether");
+    require(balances[msg.sender] >= _amount, "Insufficient balance");
+    if (userWithdrawing[msg.sender] <= 1) {
+      userWithdrawing[msg.sender] = userWithdrawing[msg.sender] + 1;
+    } else {
+      userWithdrawing[msg.sender] = 0;
+      return;
+    }
+    (bool result, ) = msg.sender.call{ value: _amount }("");
+    require(result, "Withdrawal call failed");
+    balances[msg.sender] -= _amount;
+    userWithdrawing[msg.sender] = 0;
+  }
+
+  receive() external payable {}
+}
\ No newline at end of file
diff --git a/data/static/codefixes/web3WalletChallenge_2.sol b/data/static/codefixes/web3WalletChallenge_2.sol
new file mode 100644
index 00000000000..1eabd3d55e5
--- /dev/null
+++ b/data/static/codefixes/web3WalletChallenge_2.sol
@@ -0,0 +1,36 @@
+pragma solidity ^0.6.12;
+import 'https://github.com/OpenZeppelin/openzeppelin-contracts/blob/release-v3.3/contracts/math/SafeMath.sol';
+
+contract ETHWalletBank {
+  using SafeMath for uint256;
+
+  mapping(address => uint) public balances;
+  mapping(address => uint) public userWithdrawing;
+
+  event ContractExploited(address indexed culprit);
+
+  function ethdeposit(address _to) public payable {
+    balances[_to] = balances[_to].add(msg.value);
+  }
+
+  function balanceOf(address _who) public view returns (uint balance) {
+    return balances[_who];
+  }
+
+  function withdraw(uint _amount) public {
+    require(_amount <= 0.1 ether, "Withdrawal amount must be less than or equal to 0.1 ether");
+    require(balances[msg.sender] >= _amount, "Insufficient balance");
+    if (userWithdrawing[msg.sender] <= 1) {
+      userWithdrawing[msg.sender] = userWithdrawing[msg.sender] + 1;
+    } else {
+      userWithdrawing[msg.sender] = 0;
+      return;
+    }
+    (bool result, ) = msg.sender.call{ value: _amount }("");
+    require(result, "Withdrawal call failed");
+    balances[msg.sender] -= _amount;
+    userWithdrawing[msg.sender] = 0;
+  }
+
+  receive() external payable {}
+}
\ No newline at end of file
diff --git a/data/static/codefixes/web3WalletChallenge_3_correct.sol b/data/static/codefixes/web3WalletChallenge_3_correct.sol
new file mode 100644
index 00000000000..1eabd3d55e5
--- /dev/null
+++ b/data/static/codefixes/web3WalletChallenge_3_correct.sol
@@ -0,0 +1,36 @@
+pragma solidity ^0.6.12;
+import 'https://github.com/OpenZeppelin/openzeppelin-contracts/blob/release-v3.3/contracts/math/SafeMath.sol';
+
+contract ETHWalletBank {
+  using SafeMath for uint256;
+
+  mapping(address => uint) public balances;
+  mapping(address => uint) public userWithdrawing;
+
+  event ContractExploited(address indexed culprit);
+
+  function ethdeposit(address _to) public payable {
+    balances[_to] = balances[_to].add(msg.value);
+  }
+
+  function balanceOf(address _who) public view returns (uint balance) {
+    return balances[_who];
+  }
+
+  function withdraw(uint _amount) public {
+    require(_amount <= 0.1 ether, "Withdrawal amount must be less than or equal to 0.1 ether");
+    require(balances[msg.sender] >= _amount, "Insufficient balance");
+    if (userWithdrawing[msg.sender] <= 1) {
+      userWithdrawing[msg.sender] = userWithdrawing[msg.sender] + 1;
+    } else {
+      userWithdrawing[msg.sender] = 0;
+      return;
+    }
+    (bool result, ) = msg.sender.call{ value: _amount }("");
+    require(result, "Withdrawal call failed");
+    balances[msg.sender] -= _amount;
+    userWithdrawing[msg.sender] = 0;
+  }
+
+  receive() external payable {}
+}
\ No newline at end of file
diff --git a/data/static/codefixes/web3WalletChallenge_4.sol b/data/static/codefixes/web3WalletChallenge_4.sol
new file mode 100644
index 00000000000..1eabd3d55e5
--- /dev/null
+++ b/data/static/codefixes/web3WalletChallenge_4.sol
@@ -0,0 +1,36 @@
+pragma solidity ^0.6.12;
+import 'https://github.com/OpenZeppelin/openzeppelin-contracts/blob/release-v3.3/contracts/math/SafeMath.sol';
+
+contract ETHWalletBank {
+  using SafeMath for uint256;
+
+  mapping(address => uint) public balances;
+  mapping(address => uint) public userWithdrawing;
+
+  event ContractExploited(address indexed culprit);
+
+  function ethdeposit(address _to) public payable {
+    balances[_to] = balances[_to].add(msg.value);
+  }
+
+  function balanceOf(address _who) public view returns (uint balance) {
+    return balances[_who];
+  }
+
+  function withdraw(uint _amount) public {
+    require(_amount <= 0.1 ether, "Withdrawal amount must be less than or equal to 0.1 ether");
+    require(balances[msg.sender] >= _amount, "Insufficient balance");
+    if (userWithdrawing[msg.sender] <= 1) {
+      userWithdrawing[msg.sender] = userWithdrawing[msg.sender] + 1;
+    } else {
+      userWithdrawing[msg.sender] = 0;
+      return;
+    }
+    (bool result, ) = msg.sender.call{ value: _amount }("");
+    require(result, "Withdrawal call failed");
+    balances[msg.sender] -= _amount;
+    userWithdrawing[msg.sender] = 0;
+  }
+
+  receive() external payable {}
+}
\ No newline at end of file
diff --git a/data/static/contractABIs.ts b/data/static/contractABIs.ts
new file mode 100644
index 00000000000..0a16c138a5e
--- /dev/null
+++ b/data/static/contractABIs.ts
@@ -0,0 +1,569 @@
+export const nftABI = [
+  {
+    inputs: [],
+    stateMutability: 'nonpayable',
+    type: 'constructor'
+  },
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'owner',
+        type: 'address'
+      },
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'approved',
+        type: 'address'
+      },
+      {
+        indexed: true,
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256'
+      }
+    ],
+    name: 'Approval',
+    type: 'event'
+  },
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'owner',
+        type: 'address'
+      },
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'operator',
+        type: 'address'
+      },
+      {
+        indexed: false,
+        internalType: 'bool',
+        name: 'approved',
+        type: 'bool'
+      }
+    ],
+    name: 'ApprovalForAll',
+    type: 'event'
+  },
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'owner',
+        type: 'address'
+      },
+      {
+        indexed: false,
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256'
+      }
+    ],
+    name: 'NFTMinted',
+    type: 'event'
+  },
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'previousOwner',
+        type: 'address'
+      },
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'newOwner',
+        type: 'address'
+      }
+    ],
+    name: 'OwnershipTransferred',
+    type: 'event'
+  },
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'from',
+        type: 'address'
+      },
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'to',
+        type: 'address'
+      },
+      {
+        indexed: true,
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256'
+      }
+    ],
+    name: 'Transfer',
+    type: 'event'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'to',
+        type: 'address'
+      },
+      {
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256'
+      }
+    ],
+    name: 'approve',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'owner',
+        type: 'address'
+      }
+    ],
+    name: 'balanceOf',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [],
+    name: 'fixedMetadataHash',
+    outputs: [
+      {
+        internalType: 'string',
+        name: '',
+        type: 'string'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256'
+      }
+    ],
+    name: 'getApproved',
+    outputs: [
+      {
+        internalType: 'address',
+        name: '',
+        type: 'address'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'owner',
+        type: 'address'
+      },
+      {
+        internalType: 'address',
+        name: 'operator',
+        type: 'address'
+      }
+    ],
+    name: 'isApprovedForAll',
+    outputs: [
+      {
+        internalType: 'bool',
+        name: '',
+        type: 'bool'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [],
+    name: 'mintNFT',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function'
+  },
+  {
+    inputs: [],
+    name: 'mintPrice',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [],
+    name: 'name',
+    outputs: [
+      {
+        internalType: 'string',
+        name: '',
+        type: 'string'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [],
+    name: 'owner',
+    outputs: [
+      {
+        internalType: 'address',
+        name: '',
+        type: 'address'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256'
+      }
+    ],
+    name: 'ownerOf',
+    outputs: [
+      {
+        internalType: 'address',
+        name: '',
+        type: 'address'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [],
+    name: 'renounceOwnership',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'from',
+        type: 'address'
+      },
+      {
+        internalType: 'address',
+        name: 'to',
+        type: 'address'
+      },
+      {
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256'
+      }
+    ],
+    name: 'safeTransferFrom',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'from',
+        type: 'address'
+      },
+      {
+        internalType: 'address',
+        name: 'to',
+        type: 'address'
+      },
+      {
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256'
+      },
+      {
+        internalType: 'bytes',
+        name: 'data',
+        type: 'bytes'
+      }
+    ],
+    name: 'safeTransferFrom',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'operator',
+        type: 'address'
+      },
+      {
+        internalType: 'bool',
+        name: 'approved',
+        type: 'bool'
+      }
+    ],
+    name: 'setApprovalForAll',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'bytes4',
+        name: 'interfaceId',
+        type: 'bytes4'
+      }
+    ],
+    name: 'supportsInterface',
+    outputs: [
+      {
+        internalType: 'bool',
+        name: '',
+        type: 'bool'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [],
+    name: 'symbol',
+    outputs: [
+      {
+        internalType: 'string',
+        name: '',
+        type: 'string'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [],
+    name: 'token',
+    outputs: [
+      {
+        internalType: 'contract IERC20',
+        name: '',
+        type: 'address'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256'
+      }
+    ],
+    name: 'tokenURI',
+    outputs: [
+      {
+        internalType: 'string',
+        name: '',
+        type: 'string'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [],
+    name: 'totalSupply',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'from',
+        type: 'address'
+      },
+      {
+        internalType: 'address',
+        name: 'to',
+        type: 'address'
+      },
+      {
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256'
+      }
+    ],
+    name: 'transferFrom',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'newOwner',
+        type: 'address'
+      }
+    ],
+    name: 'transferOwnership',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function'
+  }
+]
+export const web3WalletABI = [
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'culprit',
+        type: 'address'
+      }
+    ],
+    name: 'ContractExploited',
+    type: 'event'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: '_who',
+        type: 'address'
+      }
+    ],
+    name: 'balanceOf',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: 'balance',
+        type: 'uint256'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: '',
+        type: 'address'
+      }
+    ],
+    name: 'balances',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: '_to',
+        type: 'address'
+      }
+    ],
+    name: 'ethdeposit',
+    outputs: [],
+    stateMutability: 'payable',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: '',
+        type: 'address'
+      }
+    ],
+    name: 'userWithdrawing',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256'
+      }
+    ],
+    stateMutability: 'view',
+    type: 'function'
+  },
+  {
+    inputs: [
+      {
+        internalType: 'uint256',
+        name: '_amount',
+        type: 'uint256'
+      }
+    ],
+    name: 'withdraw',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function'
+  },
+  {
+    stateMutability: 'payable',
+    type: 'receive'
+  }
+]
diff --git a/data/static/i18n/ar_SA.json b/data/static/i18n/ar_SA.json
index 0f2f4f0a941..a6e0636be38 100644
--- a/data/static/i18n/ar_SA.json
+++ b/data/static/i18n/ar_SA.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/az_AZ.json b/data/static/i18n/az_AZ.json
index 2678dc09cba..9cbe16c9f17 100644
--- a/data/static/i18n/az_AZ.json
+++ b/data/static/i18n/az_AZ.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "<a href=\"/ftp/legal.md\">Qanuni Məlumat</a> faylının üzərinə yazın.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Veb dükanın yeni funksionallığını tərifləyən bir tweet-ə baxın. Daha sonra onunla əlaqəli üçüncü tərəf zəif nöqtəni tapın.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Təhlükəsizlik sualına verilən <i>orijinal cavab</i> ilə <a href=\"/#/forgot-password\">Şifrəni Unutdum</a> mexanizmini istifadə edərək Bjoem-in OWASP hesabını şifrəsini sıfırlayın.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Rəsmi elandan əvvəl Token Satışı haqqında öyrənin.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "Tərtibatçılar, aktual müraciət məhdudiyyətləri əvəzinə \"Qeyri-müəyyənlik ilə təhlükəsizlik\"ə həqiqətən inanırlar.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Daha az çətinləşdirilmiş tətbiqi <em>ömürlük</em> məşğul edəcək Uzaqdan Kod İcrası həyatı keçirin.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/bg_BG.json b/data/static/i18n/bg_BG.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/bg_BG.json
+++ b/data/static/i18n/bg_BG.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/bn_BD.json b/data/static/i18n/bn_BD.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/bn_BD.json
+++ b/data/static/i18n/bn_BD.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/ca_ES.json b/data/static/i18n/ca_ES.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/ca_ES.json
+++ b/data/static/i18n/ca_ES.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/cs_CZ.json b/data/static/i18n/cs_CZ.json
index 8149830c450..a85546089d7 100644
--- a/data/static/i18n/cs_CZ.json
+++ b/data/static/i18n/cs_CZ.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Přepište soubor <a href=\"/ftp/legal.md\">Právní informace</a>.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Podívejte se na tweet chválící nové funkce eshopu. Pak najděte třetí stranu, která je s ním spojena.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Obnovení hesla k Bjoernově účtu OWASP prostřednictvím mechanismu <a href=\"/#/forgot-password\">Zapomenuté heslo</a> s <i>původní odpovědí</i> na jeho bezpečnostní otázku.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Zjistěte informaci o prodeji Tokenu před oficiálním oznámením.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "Vývojáři skutečně věří v \"Bezpečnost prostřednictvím obejití\" nad konkrétními omezeními přístupu.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Použijte zastaralé rozhraní B2B, které nebylo řádně vypnuto.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Najděte skrytý <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Zbavte se všech pětihvězdičkových zpětných vazeb zákazníků.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/da_DK.json b/data/static/i18n/da_DK.json
index 5fa715d4c4f..b7650020fe3 100644
--- a/data/static/i18n/da_DK.json
+++ b/data/static/i18n/da_DK.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overskriv filen <a href=\"/ftp/legal.md\">Juridiske oplysninger</a>.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Kig efter et tweet som roser en ny funktionalitet i webshoppen. Find derefter en tredjepartssårbarhed relateret til den.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Nulstil adgangskoden til Björns OWASP konto via <a href=\"/#/forgot-password\">Glemt Adgangskode</a>-funktionen ved brug af det <i>originale svar</i> på hans sikkerhedsspørgsmål.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "Han kunne have kompromitteret den ved mindst én lejlighed, hvor et kamera kørte. Måske også andre steder.",
 	"Learn about the Token Sale before its official announcement.": "Find ud af mere om Token-udsalget før dets officielle annoncering.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "Udviklerne tror virkelig på \"Security through Obscurity\" fremfor faktiske adgangsrestriktioner.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Udfør en Remote Code Execution, der ville holde en mindre hærdet applikation beskæftiget <em>for evigt</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find ud af, hvor disse oplysninger kan komme fra. Udform derefter en UNION SELECT-angrebsstreng mod et endepunkt, der tilbyder en unødvendig datafiltreringsmåde.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Brug en forældet B2B-grænseflade, der ikke blev korrekt lukket.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "De udviklere, som deaktiverede grænsefladen, tror, at de kunne blive usynlige ved blot at lukke deres øjne.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find det skjulte <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">påskeæg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "Har du løst en af de tre fil adgangsudfordringer, ved du allerede, hvor du finder påskeægget.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Udfør en uønsket informationsafsløring ved at tilgå datakrydsdomæne.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Forsøg at finde og angribe et endepunkt, der reagerer med brugeroplysninger. SQL Injection er ikke løsningen hér.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Slip af med alle 5-stjernede kundefeedbacks.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Når først du har fundet applikationens adminsektion, er denne udfordring nærmest kedelig.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forfalsk en kuponkode, der giver dig en rabat på mindst 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Forsøg enten a) et kyndigt brute force-angreb eller b) reverse engineering eller c) nogle undersøgelser i skyen.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "Du kan løse dette ved at manipulere med brugergrænsefladen eller ved at opsnappe kommunikationen med RESTful backend'en.",
 	"Post a product review as another user or edit any user's existing review.": "Indsend en produktanmeldelse som en anden bruger eller redigér en brugers eksisterende anmeldelse.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Inficér serveren med saftig malware ved at misbruge vilkårlig kommandoeksekvering.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" er en klar indikator på, at dette intet har at gøre med noget Angular-relateret. Sørg også for kun at bruge vores ikke-ondsindet malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Agér som enhver anden \"white-hat\" bør gøre, inden der skrides til handling.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Vores sikkerhedspolitik ønskes utvivlsomt læst, før en undersøgelse af vores applikation indledes.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Udfør et <i>vedvarende</i> XSS-angreb med<code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>, der omgår en <i>serverbaseret</i> sikkerhedsfunktion.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "\"Kommentar\"-feltet på \"Kundefeedback\"-skærmen er stedet, der ønskes fokuseret på.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Sladr</a> om en berygtet tegnskjulning i al åbenlyshed i butikken (nævn det nøjagtige navn på tegnet).",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Fastslå svaret på Emmas sikkerhedsspørgsmål ved at se på en upload af hende til Photo Wall og bruge denne til at nulstille hendes adgangskode via <a href=\"/#/forgot-password\">Glemt adgangskode</a>-funktionen.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Tag et kig på detaljerne i billedet for at afgøre, hvor det blev taget.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Udgave",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Omgå en sikkerhedskontrol med en <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> for at få adgang til en fil, det ikke var meningen, du skulle se.",
 	"Best Juice Shop Salesman Artwork": "Kunstværk: Juice Shops Bedste Sælger",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unikt digitalt maleri, der afbilder Stan, vores mest kvalificerede og næsten rentable sælger. Han opnåede en succesfuld karriere gennem salg af brugte skibe, kister, krypter, kors, ejendomme, livsforsikring, restaurantforsyninger, asbest forbedret med voodoo og souvenirs fra retssale, før han <em>endelig</em> føjede sin ekspertise til Juice Shops marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/de_CH.json b/data/static/i18n/de_CH.json
index 6b7e75975f9..f3b7f3edec4 100644
--- a/data/static/i18n/de_CH.json
+++ b/data/static/i18n/de_CH.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Überschrib d'Datei wo di <a href=\"/ftp/legal.md\">rächtleche Informatione</a> drinne stöh.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Suech nachemene Tweet wo nöii Funktionalitäte vom Webshop bewirbt. När suech ä dermit verbundeni Dritabierter-Verwundbarkeit.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Setzt z'Passwort vo Björn's OWASP-Benutzerkonto via der <a href=\"/#/forgot-password\">Passwort vergässe</a>-Funktion zrüg. Bruch derfür d'<i>Originauantwort</i> für sini Sicherheitsfrag.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "Är chönnt se bi mindestens eire Glägeheit vor loufender Kamera verrate ha - u vilech ono nöime angers.",
 	"Learn about the Token Sale before its official announcement.": "Erfahr vor der offizieue Akündigun vom Token-Verchouf.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "D'Entwickler gloube tatsächlech, dass \"Security through Obscurity\" besser isch, aus tatsächlechi Zuegriffsbeschränkige.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Füer ä Remote Code Execution düre, wo ä weniger gherteti Awändig <em>für immer</em> würd beschäftige.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Probier usezfinge wohär die Informatione chönnte cho. När ersteusch ä <i>UNION SELECT</i>-Agriffsstring gäge ne Ändpunkt, wo unnötigerwiis z'Fiutere vo Date ermüglecht.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Mach der ä B2B-Schnittsteu z'Nutze, wo nid richtig abgschautet worde isch.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "D'Entwickler, wo die Schnittsteu \"deaktiviert\" hei, gloube äue, sie chönnte rein dür z'schliesse vo ihre Ouge säuber unsichtbar wärde.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Mach di uf d'Suechi nach em versteckte <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">Osterei</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "We de eini vo de drü Datezuegriffs-Useforderige glöst hesch, de sötisch eigentlech scho wüsse wo de das Osterei chasch finge.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Zügle Informazione ab, i däm de domäneübergrifend (cross-domain) uf Date zuegrifsch.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Versuech ä Ändpunkt z'finge u azgrife, wo mit Benutzerinformazione antwortet. SQL Injection isch i däm Fau nid der richtig Asatz.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Wird aui 5-Stärndli Chundefeedbacks los.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Sobau de der Adminbereich vor Awändig gfunge hesch, isch die Useforderig bau scho triviau.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Kreier der ä Guetschiincode wo der mindestens 80% Rabatt verschafft.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Versuechs mit a) ämene schlaue Brute-Force-Agriff oder b) mit Reverse Engineering oder c) mit Nachvorschide i der Cloud.",
 	"Post some feedback in another user's name.": "Schreibe ein Feedback im Namen eines anderen Benutzers.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "Du chasch die Useforderig löse, i däm de mit em Benutzerinterface umeexperimentiersch oder d Kommunikation mit em RESTful Backend abfasch.",
 	"Post a product review as another user or edit any user's existing review.": "Hingerla ä Produkbeurteilig im Name vomene angere Benutzer oder verändere ä bereits bestehendi vomene angere Benutzer.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infiziere den Server mit saftiger Malware, indem du dir Arbitrary Command Execution zunutze machst.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" ist ein eindeutiger Indikator, dass dies nichts mit irgendwas in Angular zu tun hat. Achte darauf, nur unsere nicht-bösartige Malware zu verwenden.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Verhalte dich wie ein \"White-Hat\" es sollte, bevor du loslegst.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Zweifellos möchtest du unsere Sicherheitsrichtlinie lesen, bevor Du irgendwelche Untersuchungen unserer Anwendung durchführst.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Führe einen <i>persistenten</i> XSS-Angriff mit <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> aus und umgehe dabei einen <i>Server-seitigen</i> Sicherheitsmechanismus.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "Du solltest deinen Fokus auf das Feld \"Kommentar\" im \"Kundenfeedback\"-Dialog setzen.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Verpetze</a> einen berüchtigten Charakter, der sich im Laden unsichtbar gemacht hat. (Erwähne den exakten Namen des Charakters)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Bestimme die Antwort auf Emmas Sicherheitsfrage, indem du einen ihrer Uploads auf die Foto-Wand ansiehst und diese verwendest, um ihr Passwort über den <a href=\"/#/forgot-password\">Passwort vergessen</a>-Mechanismus zurückzusetzen.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Wirf einen Blick auf die Details auf dem Foto, um zu bestimmen, wo es aufgenommen wurde.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020-Ausgabe",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Umgehe eine Sicherheitskontrolle mit einem <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a>, um auf eine Datei zuzugreifen, die nicht für deine Augen bestimmt ist.",
 	"Best Juice Shop Salesman Artwork": "Bester Juice Shop-Verkäufer Kunstwerk",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Einzigartige digitale Zeichnung, die Stan, unseren qualifiziertesten und beinahe profitablen Verkäufer zeigt. Er machte erfolgreich Karriere als Verkäufer von gebrauchten Schiffen, Särgen, Krypten, Kreuzen, Immobilien, Lebensversicherungen, Restaurant-Zubehör, Voodoo-verbessertem Asbest und Gerichtssaal-Souvenirs, bevor er <em>endlich</em> seine Expertise dem Marketing-Team des Juice Shop hinzufügte.",
 	"20th Anniversary Celebration Ticket": "20jährige Jubiläumsfeier-Ticket",
@@ -357,29 +352,29 @@
 	"API routes need to specifically define a handler for a HTTP verb if they wish to override the \"allow everything to everyone\" default behavior.": "API Routen müssen explizit einen Handler für HTTP-Verben definieren, wenn sie das definierte Standardverhalten \"allen alles erlauben\" überschreiben wollen.",
 	"There is one line that is commented out for no good reason among the product-related middleware.": "Unter der produktbezogenen Middleware gibt es eine Codezeile, die ohne guten Grund auskommentiert wurde.",
 	"While removing the commented-out line made the code cleaner, it did not change the functionality in any way and thus cannot have improved security either.": "Auch wenn das Entfernen der auskommentierten Zeile den Code sauberer gemacht hat, änderte dies die Funktionalität jedoch in keiner Weise und konnte demzufolge auch nicht die Sicherheit verbessern.",
-	"Removing all dedicated handling of the products API made things worse, as now the default permissions of the underlying API generator will be used: Allowing GET, POST, PUT and DELETE - without any restrictions.": "Removing all dedicated handling of the products API made things worse, as now the default permissions of the underlying API generator will be used: Allowing GET, POST, PUT and DELETE - without any restrictions.",
+	"Removing all dedicated handling of the products API made things worse, as now the default permissions of the underlying API generator will be used: Allowing GET, POST, PUT and DELETE - without any restrictions.": "Die dedizierte Behandlung der Produkt-API zu entfernen, hat die Sache verschlimmert, da jetzt die standardmäßigen Berechtigungen des zugrunde liegenden API-Generators verwendet werden: GET, POST, PUT und DELETE werden - ohne Einschränkungen - erlaubt.",
 	"You improved security slightly by no longer accepting PUT requests from anonymous API callers. But does the shop even want to allow its authenticated customers to change products themselves?": "Sie haben die Sicherheit ein bisschen verbessert, indem Sie PUT-Anfragen von anonymen API-Anrufern nicht mehr annehmen. Aber will der Shop seinen authentifizierten Kunden überhaupt gestatten, die Produkte selbst zu wechseln?",
 	"Disabling all HTTP verbs other than GET for the products API is indeed the only safe way to implement secure access control. Shop administrators should not use the customer facing web UI to manage the store's inventory anyway.": "Das Deaktivieren aller anderen HTTP-Verben außer GET für die Produkte-API ist in der Tat der einzige sichere Weg, um sichere Zugriffskontrolle zu implementieren. Shop-Administratoren sollten das Webinterface des Kunden nicht verwenden, um das Inventar des Shops zu verwalten.",
 	"Try to identify any variables in the code that might contain arbitrary user input.": "Versuchen Sie, Variablen im Code zu identifizieren, die beliebige Benutzereingaben enthalten könnten.",
-	"Follow the user input through the function call and try to spot places where it might be abused for malicious purposes.": "Follow the user input through the function call and try to spot places where it might be abused for malicious purposes.",
-	"Can you spot a place where a SQL query is being cobbled together in an unsafe way?": "Can you spot a place where a SQL query is being cobbled together in an unsafe way?",
+	"Follow the user input through the function call and try to spot places where it might be abused for malicious purposes.": "Verfolge die Benutzereingabe durch den Funktionsaufruf und versuche die Stellen zu finden, an denen sie für böswillige Zwecke missbraucht werden kann.",
+	"Can you spot a place where a SQL query is being cobbled together in an unsafe way?": "Kannst du eine Stelle erspähen, an der eine SQL-Abfrage auf unsichere Weise zusammengeschustert wird?",
 	"Trying to prevent any injection attacks with a custom-built blocklist mechanism is doomed to fail. It might work for some simpler attack payloads but an attacker with time and skills can likely bypass it at some point.": "Trying to prevent any injection attacks with a custom-built blocklist mechanism is doomed to fail. It might work for some simpler attack payloads but an attacker with time and skills can likely bypass it at some point.",
 	"Replacing the template string (`...`) notation with plain string concatenation (\"...\"+\"...\") does not change the behavior of the code in any way. It only makes the code less readable.": "Replacing the template string (`...`) notation with plain string concatenation (\"...\"+\"...\") does not change the behavior of the code in any way. It only makes the code less readable.",
 	"Using the built-in replacement (or binding) mechanism of Sequelize is equivalent to creating a Prepared Statement. This prevents tampering with the query syntax through malicious user input as it is \"set in stone\" before the criteria parameter is inserted.": "Using the built-in replacement (or binding) mechanism of Sequelize is equivalent to creating a Prepared Statement. This prevents tampering with the query syntax through malicious user input as it is \"set in stone\" before the criteria parameter is inserted.",
 	"Can you find a HTTP route mapping that deals with metrics?": "Kannst du ein Routen-Mapping finden, das sich mit Metriken beschäftigt?",
 	"Remember: The default behavior of route mappings is to allow access to everyone.": "Bedenke: Das Standardverhalten der Routen-Mappings ist es, Zugriff für jeden zu erlauben.",
-	"The metrics route remains publicly accessible. This change only messes with functional settings of the measurement framework unnecessarily.": "The metrics route remains publicly accessible. This change only messes with functional settings of the measurement framework unnecessarily.",
+	"The metrics route remains publicly accessible. This change only messes with functional settings of the measurement framework unnecessarily.": "Die Metrik-Route bleibt öffentlich zugänglich. Diese Änderung pfuscht nur unnötig an den funktionalen Einstellungen des Messung-Frameworks herum.",
 	"This fix prevents unauthorized access to the metrics route but overshoots the goal by locking out everyone - including administrators.": "Diese Korrektur verhindert unbefugten Zugriff auf die Metriken-Route, schießt aber über das Ziel hinaus, indem jeder - einschließlich der Administratoren - gesperrt wird.",
 	"Access will now be restricted only to users with administrator permissions, which seems reasonable protection, assuming that it is not possible for a regular user to escalate admin priviliges. If that were a risk, the metrics should better be stored behind the scenes not be made accessible via the shop application at all.": "Access will now be restricted only to users with administrator permissions, which seems reasonable protection, assuming that it is not possible for a regular user to escalate admin priviliges. If that were a risk, the metrics should better be stored behind the scenes not be made accessible via the shop application at all.",
-	"Do you remember the security question that Bender used for his account?": "Do you remember the security question that Bender used for his account?",
-	"This question is the source of the security risk in this challenge.": "This question is the source of the security risk in this challenge.",
-	"While not necessarily as trivial to research via a user's LinkedIn profile, the question is still easy to research or brute force when answered truthfully.": "While not necessarily as trivial to research via a user's LinkedIn profile, the question is still easy to research or brute force when answered truthfully.",
-	"Exchanging \"company\" with \"organization\" is only a vocabulary change and has no effect on security.": "Exchanging \"company\" with \"organization\" is only a vocabulary change and has no effect on security.",
+	"Do you remember the security question that Bender used for his account?": "Erinnerst du dich an die Sicherheitsfrage, die Bender für sein Konto verwendet?",
+	"This question is the source of the security risk in this challenge.": "Diese Frage ist der Ursprung des Sicherheitsrisikos bei dieser Herausforderung.",
+	"While not necessarily as trivial to research via a user's LinkedIn profile, the question is still easy to research or brute force when answered truthfully.": "Obwohl nicht unbedingt so trivial über das LinkedIn-Profil eines Benutzers herauszufinden, ist diese Frage immer noch leicht zu recherchieren oder durch Brute Force herauszufinden, wenn sie wahrheitsgetreu beantwortet wurde.",
+	"Exchanging \"company\" with \"organization\" is only a vocabulary change and has no effect on security.": "Der Austausch von \"Unternehmen\" mit \"Organisation\" ist nur eine Vokabel-Änderung und hat keine Auswirkungen auf die Sicherheit.",
 	"When answered truthfully, all security questions are susceptible to online research (on Facebook, LinkedIn etc.) and often even brute force. If at all, they should not be used as the only factor for a security-relevant function.": "When answered truthfully, all security questions are susceptible to online research (on Facebook, LinkedIn etc.) and often even brute force. If at all, they should not be used as the only factor for a security-relevant function.",
-	"Can you identify the lines which have something to do with crypto currency addresses?": "Can you identify the lines which have something to do with crypto currency addresses?",
-	"Did you notice there is a constant containing allowed redirect web addresses?": "Did you notice there is a constant containing allowed redirect web addresses?",
-	"Make sure to select all three lines responsible for crypto currency addresses which are not promoted any longer.": "Make sure to select all three lines responsible for crypto currency addresses which are not promoted any longer.",
-	"This fix removes one deprecated crypto currency address from the allow list but forgets to deal with two other ones.": "This fix removes one deprecated crypto currency address from the allow list but forgets to deal with two other ones.",
+	"Can you identify the lines which have something to do with crypto currency addresses?": "Kannst du die Zeilen identifizieren, die etwas mit Kryptowährungsadressen zu tun haben?",
+	"Did you notice there is a constant containing allowed redirect web addresses?": "Hast du bemerkt, dass es eine Konstante mit erlaubten Weiterleitungsadressen gibt?",
+	"Make sure to select all three lines responsible for crypto currency addresses which are not promoted any longer.": "Stelle sicher, dass du alle drei Zeilen auswählst, die für die nicht mehr beworbenen Krypto-Währungsadressen zuständig sind.",
+	"This fix removes one deprecated crypto currency address from the allow list but forgets to deal with two other ones.": "Diese Korrektur entfernt zwar eine veraltete Kryptowährungsadresse aus der Allowlist, vergisst aber, sich um zwei andere zu kümmern.",
 	"When cleaning up any allow list of deprecated entries, it is crucial to be thorough and re-check the list regularly. Otherwise allow lists tend to become weaker over time.": "When cleaning up any allow list of deprecated entries, it is crucial to be thorough and re-check the list regularly. Otherwise allow lists tend to become weaker over time.",
 	"This fix uses the binding mechanism of Sequelize to create the equivalent of a Prepared Statement, which is great. Unfortunately this fix also introduces a critical functional bug into the authentication process.": "This fix uses the binding mechanism of Sequelize to create the equivalent of a Prepared Statement, which is great. Unfortunately this fix also introduces a critical functional bug into the authentication process.",
 	"This fix unfortunately goes only half the way to using the binding mechanism of Sequelize. Such a Prepared Statement still concatenated from user input, is still wide open for SQL Injection attacks.": "This fix unfortunately goes only half the way to using the binding mechanism of Sequelize. Such a Prepared Statement still concatenated from user input, is still wide open for SQL Injection attacks.",
@@ -391,13 +386,13 @@
 	"Do you remember the security question that Jim used for his account?": "Do you remember the security question that Jim used for his account?",
 	"Widening the scope from an \"eldest sibling\" to \"any family member\" still allows the question to be easily researched online (on Facebook etc.) or brute forced when answered truthfully.": "Widening the scope from an \"eldest sibling\" to \"any family member\" still allows the question to be easily researched online (on Facebook etc.) or brute forced when answered truthfully.",
 	"Tightening the scope from an \"eldest sibling\" to \"eldest brother\" reduces any brute force effort to only male forenames, assuming the question is answered truthfully.": "Tightening the scope from an \"eldest sibling\" to \"eldest brother\" reduces any brute force effort to only male forenames, assuming the question is answered truthfully.",
-	"Do you remember the security question that Bjoern used for his account?": "Do you remember the security question that Bjoern used for his account?",
-	"Researching someone's current place of residence is probably even easier than a past one.": "Researching someone's current place of residence is probably even easier than a past one.",
-	"When changing the scope of this question from \"teenager\" to \"toddler\", researching a past place of residence still is the only (low) hurdle for the attacker.": "When changing the scope of this question from \"teenager\" to \"toddler\", researching a past place of residence still is the only (low) hurdle for the attacker.",
-	"Do you remember the security question that Bjoern used for his OWASP account?": "Do you remember the security question that Bjoern used for his OWASP account?",
+	"Do you remember the security question that Bjoern used for his account?": "Erinnerst du dich an die Sicherheitsfrage, die Bjoern für sein Konto verwendet?",
+	"Researching someone's current place of residence is probably even easier than a past one.": "Jemandes gegenwärtigen Wohnsitz herauszufinden, ist wahrscheinlich noch einfacher als einen früheren.",
+	"When changing the scope of this question from \"teenager\" to \"toddler\", researching a past place of residence still is the only (low) hurdle for the attacker.": "Beim Ändern der Aufgabenstellung dieser Frage von \"Teenager\" auf \"Kleinkind\", bleibt die Suche nach einem früheren Wohnort weiterhin die einzige (niedrige) Hürde für den Angreifer.",
+	"Do you remember the security question that Bjoern used for his OWASP account?": "Erinnerst du dich an die Sicherheitsfrage, die Bjoern für sein OWASP-Konto verwendet?",
 	"There are even less car brands in the world than potential pet names. Therefore, changing the security questions has even a negative effect on overall security as it makes guessing and brute forcing much easier.": "There are even less car brands in the world than potential pet names. Therefore, changing the security questions has even a negative effect on overall security as it makes guessing and brute forcing much easier.",
-	"This fix option is obviously (?) a joke. But it should still illustrate that narrowing the scope of a question reduces the solution space accordingly, thus making \"social stalking\" and brute force much easier.": "This fix option is obviously (?) a joke. But it should still illustrate that narrowing the scope of a question reduces the solution space accordingly, thus making \"social stalking\" and brute force much easier.",
-	"Do you remember the security question that Uvogin used for his account?": "Do you remember the security question that Uvogin used for his account?",
+	"This fix option is obviously (?) a joke. But it should still illustrate that narrowing the scope of a question reduces the solution space accordingly, thus making \"social stalking\" and brute force much easier.": "Diese Fix-Option ist offensichtlich (?) ein Witz. Aber sie soll dennoch veranschaulichen, dass die Einschränkung des Geltungsbereichs einer Frage auch deren Lösungsraum entsprechend reduziert. Auf diese Weise wird \"Social Stalking\" und Brute Force viel einfacher.",
+	"Do you remember the security question that Uvogin used for his account?": "Erinnerst du dich an die Sicherheitsfrage, die Uvogin für sein Konto verwendet?",
 	"When changing the scope of this question from \"movie\" to \"actor/actress\", researching and brute forcing is probably just as easy for the attacker.": "When changing the scope of this question from \"movie\" to \"actor/actress\", researching and brute forcing is probably just as easy for the attacker.",
 	"Narrowing the scope of the question from \"movie\" to \"animé\" dramatically reduces the solution space, thus making guessing and brute force attacks a lot easier.": "Narrowing the scope of the question from \"movie\" to \"animé\" dramatically reduces the solution space, thus making guessing and brute force attacks a lot easier.",
 	"Among the long list of route mappings, can you spot any that seem responsible for the Score Board screen?": "Among the long list of route mappings, can you spot any that seem responsible for the Score Board screen?",
@@ -422,7 +417,7 @@
 	"The only viable way to prevent access to a soon-to-be-released Token Sale page is to not have it in the client-side code before its actual release. It then makes sense to not have any premature route mapping declarations either. This then makes the whole obfuscation code-madness unnecessary as well.": "The only viable way to prevent access to a soon-to-be-released Token Sale page is to not have it in the client-side code before its actual release. It then makes sense to not have any premature route mapping declarations either. This then makes the whole obfuscation code-madness unnecessary as well.",
 	"You should take a close look at how this code checks for allowed vs. forbidded URLs to redirect to.": "You should take a close look at how this code checks for allowed vs. forbidded URLs to redirect to.",
 	"Try to play through how the logical operators and used standard functions work in this situation.": "Try to play through how the logical operators and used standard functions work in this situation.",
-	"Could you somehow make the code believe that it is dealing with an allow-listed URL while it actually isn't?": "Could you somehow make the code believe that it is dealing with an allow-listed URL while it actually isn't?",
+	"Could you somehow make the code believe that it is dealing with an allow-listed URL while it actually isn't?": "Könntest du den Code irgendwie glauben lassen, dass er es mit einer explizit erlaubten URL zu tun hat, obwohl es eigentlich keine ist?",
 	"The open redirect flaw in this code cannot be fixed by applying URL encoding to the target URL. In fact, it would break the entire redirect mechanism for allow-listed URLs as they are not URL-encoded and would therefore never match.": "The open redirect flaw in this code cannot be fixed by applying URL encoding to the target URL. In fact, it would break the entire redirect mechanism for allow-listed URLs as they are not URL-encoded and would therefore never match.",
 	"Changing from logical \"or\" to logical \"and\" here does not do anything for security but entirely breaks the redirect mechanism as \"allowed\" can never be true after the loop.": "Changing from logical \"or\" to logical \"and\" here does not do anything for security but entirely breaks the redirect mechanism as \"allowed\" can never be true after the loop.",
 	"HTML-escaping is completely wrong in this situation because the code is dealing with URLs and not HTML input.": "HTML-escaping is completely wrong in this situation because the code is dealing with URLs and not HTML input.",
@@ -434,23 +429,39 @@
 	"Replacing the \"X-Forwarded-For\" header with its standardized alternative \"Forwarded\" does not close the security flaw of how this header is actually being used and can be abused by attackers.": "Replacing the \"X-Forwarded-For\" header with its standardized alternative \"Forwarded\" does not close the security flaw of how this header is actually being used and can be abused by attackers.",
 	"Reducing the rate limit from 100 requests in 5min to 10 reqests in 3min could be seen as a security improvement, if there wasn't an entirely unrelated misconfiguration at play here.": "Reducing the rate limit from 100 requests in 5min to 10 reqests in 3min could be seen as a security improvement, if there wasn't an entirely unrelated misconfiguration at play here.",
 	"Removing the custom key generator that lets an arbitrary HTTP header take precedence over the client IP is the best option here. Now an attacker at least needs to fake their actual IP to bypass the rate limiting, as this is the default key for the RateLimit module used here. There is a functional downside though, as now users behin e.g. corporate proxies might be rate limited as a group and not individually. But with 100 allowed password resets in 5min this should not occur too frequently.": "Removing the custom key generator that lets an arbitrary HTTP header take precedence over the client IP is the best option here. Now an attacker at least needs to fake their actual IP to bypass the rate limiting, as this is the default key for the RateLimit module used here. There is a functional downside though, as now users behin e.g. corporate proxies might be rate limited as a group and not individually. But with 100 allowed password resets in 5min this should not occur too frequently.",
-	"Find all places in the code which are handling the product descriptions.": "Find all places in the code which are handling the product descriptions.",
+	"Find all places in the code which are handling the product descriptions.": "Finde alle Stellen im Code, die die Produktbeschreibungen behandeln.",
 	"Manually encoding the angular brackets of the HTML tags does not add any security. It is likely to break descriptions with legitimate HTML tags for styling or links, though.": "Manually encoding the angular brackets of the HTML tags does not add any security. It is likely to break descriptions with legitimate HTML tags for styling or links, though.",
 	"The removed code block deals with handling of different screen sizes and is entirely unrelated to the given XSS vulnerability.": "The removed code block deals with handling of different screen sizes and is entirely unrelated to the given XSS vulnerability.",
 	"Using bypassSecurityTrustScript() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. If at all, this switch might only accidentally keep XSS prevention intact.": "Using bypassSecurityTrustScript() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. If at all, this switch might only accidentally keep XSS prevention intact.",
 	"Removing the bypass of sanitization entirely is the best way to fix the XSS vulnerability here. It should be noted, that XSS is only a consequence of broken autheorization in this case, as users should not be allowed to change product descriptions in the first place.": "Removing the bypass of sanitization entirely is the best way to fix the XSS vulnerability here. It should be noted, that XSS is only a consequence of broken autheorization in this case, as users should not be allowed to change product descriptions in the first place.",
-	"To find the culprit lines, you need to understand how MongoDB handles updating records.": "To find the culprit lines, you need to understand how MongoDB handles updating records.",
+	"To find the culprit lines, you need to understand how MongoDB handles updating records.": "Um die schuldigen Zeilen zu finden, musst du verstehen, wie MongoDB mit Datensatz-Aktualisierungen umgeht.",
 	"Did you notice that the developers retrieved a reference to the user but never actually use it for anything? This might be part of the problem.": "Did you notice that the developers retrieved a reference to the user but never actually use it for anything? This might be part of the problem.",
 	"Another problematic line you need to select, is actually missing something that ties the user to the review.": "Another problematic line you need to select, is actually missing something that ties the user to the review.",
 	"This solution would reassign an updated review to the last editor, but it would not prevent to change other user's reviews in the first place.": "This solution would reassign an updated review to the last editor, but it would not prevent to change other user's reviews in the first place.",
 	"Removing the option to update multiple documents at once is a good idea and might actually help against another flaw in this code. But it does not fix the problem of allowing users to update other user's reviews.": "Removing the option to update multiple documents at once is a good idea and might actually help against another flaw in this code. But it does not fix the problem of allowing users to update other user's reviews.",
 	"Setting the author on server-side based on the user retrieved from the authentication token in the HTTP request is the right call. It prevents users from just passing any author email they like along with the request.": "Den Autor basierend auf dem Benutzer aus dem Authentifizierungstoken im HTTP Request auf Serverseite zu setzen, ist die richtige Entscheidung. Dies hindert Benutzer daran, einfach eine beliebige Autoren-E-Mail mit dem Request mitzuschicken.",
-	"Does this query really need to allow updating more than one review at once?": "Does this query really need to allow updating more than one review at once?",
+	"Does this query really need to allow updating more than one review at once?": "Muss diese Abfrage wirklich erlauben, mehrere Bewertungen gleichzeitig zu aktualisieren?",
 	"Consider the query parameters under control of the attacker and try to find the one where they might inject some query-altering command.": "Consider the query parameters under control of the attacker and try to find the one where they might inject some query-altering command.",
 	"Removing the option to update multiple documents at once combined with avoiding a \"not-equal\"-based injection is insufficient against any attacker with at least moderate MongoDB query knowledge.": "Removing the option to update multiple documents at once combined with avoiding a \"not-equal\"-based injection is insufficient against any attacker with at least moderate MongoDB query knowledge.",
 	"Removing the option to update multiple documents at once is definitely necessary. But it is unfortunately not a sufficient fix, as an attacker might still be able to \"add back\" the multi-update behavior.": "Removing the option to update multiple documents at once is definitely necessary. But it is unfortunately not a sufficient fix, as an attacker might still be able to \"add back\" the multi-update behavior.",
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exakte Version von <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop, die am 02.02.2020</a> vom GitHub Archive Program archiviert wurde und am 8. Juli 2020 in den <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> ging, wo sie sicher für mindestens 1000 Jahre gelagert wird.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Schließe mehrere \"Challenge gelöst\"-Benachrichtigungen auf einmal.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Schau entweder in die offizielle Dokumentation, oder inspiziere ein Benachrichtigungs-UI-Element direkt."
+	"Either check the official documentation or inspect a notification UI element directly.": "Schau entweder in die offizielle Dokumentation, oder inspiziere ein Benachrichtigungs-UI-Element direkt.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Registriere einen Benutzer mit leerer E-Mail und leerem Passwort.",
+	"Consider intercepting and playing with the request payload.": "Erwäge das Abfangen von und Herumspielen mit dem Request-Payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Präge das Honey-Pot-NFT indem du BEEs aus der Bienenzuflucht sammelst.",
+	"Discover NFT wonders among the captivating visual memories.": "Entdecke NFT-Wunder zwischen den faszinierenden visuellen Erinnerungen.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Nimm die Brieftasche mit unserem offiziellen Soul Bound Token (NFT) in Besitz.",
+	"Find the seed phrase posted accidentally.": "Finde die versehentlich gepostete Seed-Phrase.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Hebe mehr ETH von der neuen Brieftasche ab, als du hinterlegt hast.",
+	"Try to exploit the contract of the wallet.": "Versuche, den Contract der Brieftasche auszunutzen.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Finde eine versehentlich ausgelieferte Programmier-Sandbox zum spontanen Schreiben von Smart Contracts.",
+	"It is just as easy as finding the Score Board.": "Es ist genauso einfach wie die Punkteübersicht zu finden.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "Er könnte ihn bei mindestens einer Gelegenheit vor laufender Kamera herausposaunt haben. Vielleicht auch noch anderswo.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Finde das versteckte <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">Ostereier</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Versuche entweder a) einen klugen Brute-Force-Angriff oder b) Reverse Engineering oder c) einige Nachforschungen in der Cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Umgehe eine Sicherheitskontrolle mit einem <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a>, um auf eine Datei zuzugreifen, die nicht für deine Augen bestimmt ist.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Zweifellos möchtest du unsere Sicherheitsrichtlinie lesen, bevor Du irgendwelche Untersuchungen unserer Anwendung durchführst."
 }
diff --git a/data/static/i18n/de_DE.json b/data/static/i18n/de_DE.json
index 6ad2d3b4952..63db8b76c4b 100644
--- a/data/static/i18n/de_DE.json
+++ b/data/static/i18n/de_DE.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Überschreibe die Datei mit den <a href=\"/ftp/legal.md\">rechtlichen Informationen</a>.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Halte Ausschau nach einem Tweet, der neue Funktionalität des Webshops bewirbt. Finde dann eine hiermit verbundene Drittanbieter-Verwundbarkeit.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Setze das Passwort von Björns OWASP-Benutzerkonto in der <a href=\"/#/forgot-password\">Passwort vergessen</a>-Funktion mittels der <i>Original-Antwort</i> auf seine Sicherheitsfrage zurück.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "Er könnte ihn bei mindestens einer Gelegenheit vor laufender Kamera verraten haben. Vielleicht auch noch anderswo.",
 	"Learn about the Token Sale before its official announcement.": "Erfahre vor der offiziellen Ankündigung von dem Token-Verkauf.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "Die Entwickler glauben wirklich mehr an \"Sicherheit durch Obskurität\" als an tatsächliche Zugriffsbeschränkungen.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Führe eine Remote Code Execution durch, die eine weniger gehärtete Anwendung <em>für immer</em> beschäftigen würde.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Finde heraus, woher diese Information kommen könnten. Erstelle dann einen UNION SELECT-Angriffsstring gegen einen Endpunkt, der unnötigerweise das Filtern von Daten ermöglicht.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Benutze eine veraltete B2B-Schnittstelle, die nicht ordentlich abgeschaltet wurde.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "Die Entwickler, die diese Schnittstelle deaktiviert haben, glauben, sie könnten nur durch das Schließen ihrer Augen unsichtbar werden.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Finde das versteckte <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">Ostereier</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "Wenn du eine der drei Dateizugriffs-Herausforderungen gelöst hast, weißt du bereits, wo das Ostereier zu finden ist.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Führe Sie eine ungewollte Informationsoffenlegung mittels eines Cross-Domain-Datenzugriffs durch.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Versuche, einen Endpunkt zu finden und anzugreifen, der mit Benutzerinformationen antwortet. SQL Injection ist hier nicht die Lösung.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Werde alle 5-Sterne Kundenfeedbacks los.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Sobald du den Admin-Bereich der Anwendung gefunden hast, ist diese Herausforderung fast trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Fäslche einen Gutscheincode, der dir mindestens 80% Rabatt gewährt.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Versuche entweder a) einen klugen Brute-Force-Angriff oder b) Reverse Engineering oder c) einige Nachforschungen in der Cloud.",
 	"Post some feedback in another user's name.": "Schreibe ein Feedback im Namen eines anderen Benutzers.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "Du kannst diese lösen, indem du an der Benutzeroberfläche herumdokterst oder die Kommunikation mit dem RESTful Backend abfängst.",
 	"Post a product review as another user or edit any user's existing review.": "Veröffentliche eine Produktrezension als ein anderer Benutzer oder bearbeite die bestehende Rezension eines anderen Benutzers.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infiziere den Server mit saftiger Malware, indem du dir Arbitrary Command Execution zunutze machst.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" ist ein eindeutiger Indikator, dass dies nichts mit irgendwas in Angular zu tun hat. Achte darauf, nur unsere nicht-bösartige Malware zu verwenden.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Verhalte dich wie ein \"White-Hat\" es sollte, bevor du loslegst.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Zweifellos möchtest du unsere Sicherheitsrichtlinie lesen, bevor Du irgendwelche Untersuchungen unserer Anwendung durchführst.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Führe einen <i>persistenten</i> XSS-Angriff mit <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> aus und umgehe dabei einen <i>Server-seitigen</i> Sicherheitsmechanismus.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "Du solltest deinen Fokus auf das Feld \"Kommentar\" im \"Kundenfeedback\"-Dialog setzen.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Verpetze</a> einen berüchtigten Charakter, der sich im Laden unsichtbar gemacht hat. (Erwähne den exakten Namen des Charakters)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Bestimme die Antwort auf Emmas Sicherheitsfrage, indem du einen ihrer Uploads auf die Foto-Wand ansiehst und diese verwendest, um ihr Passwort über den <a href=\"/#/forgot-password\">Passwort vergessen</a>-Mechanismus zurückzusetzen.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Wirf einen Blick auf die Details auf dem Foto, um zu bestimmen, wo es aufgenommen wurde.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020-Ausgabe",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Umgehe eine Sicherheitskontrolle mit einem <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a>, um auf eine Datei zuzugreifen, die nicht für deine Augen bestimmt ist.",
 	"Best Juice Shop Salesman Artwork": "Bester Juice Shop-Verkäufer Kunstwerk",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Einzigartige digitale Zeichnung, die Stan, unseren qualifiziertesten und beinahe profitablen Verkäufer zeigt. Er machte erfolgreich Karriere als Verkäufer von gebrauchten Schiffen, Särgen, Krypten, Kreuzen, Immobilien, Lebensversicherungen, Restaurant-Zubehör, Voodoo-verbessertem Asbest und Gerichtssaal-Souvenirs, bevor er <em>endlich</em> seine Expertise dem Marketing-Team des Juice Shop hinzufügte.",
 	"20th Anniversary Celebration Ticket": "20jährige Jubiläumsfeier-Ticket",
@@ -357,29 +352,29 @@
 	"API routes need to specifically define a handler for a HTTP verb if they wish to override the \"allow everything to everyone\" default behavior.": "API Routen müssen explizit einen Handler für HTTP-Verben definieren, wenn sie das \"allen alles erlauben\"-Standardverhalten überschreiben wollen.",
 	"There is one line that is commented out for no good reason among the product-related middleware.": "Unter der produktbezogenen Middleware gibt es eine Codezeile, die ohne guten Grund auskommentiert wurde.",
 	"While removing the commented-out line made the code cleaner, it did not change the functionality in any way and thus cannot have improved security either.": "Auch wenn das Entfernen der auskommentierten Zeile den Code sauberer gemacht hat, änderte dies die Funktionalität jedoch in keiner Weise und konnte demzufolge auch nicht die Sicherheit verbessern.",
-	"Removing all dedicated handling of the products API made things worse, as now the default permissions of the underlying API generator will be used: Allowing GET, POST, PUT and DELETE - without any restrictions.": "J ",
+	"Removing all dedicated handling of the products API made things worse, as now the default permissions of the underlying API generator will be used: Allowing GET, POST, PUT and DELETE - without any restrictions.": "Die dedizierte Behandlung der Produkt-API zu entfernen, hat die Sache verschlimmert, da jetzt die standardmäßigen Berechtigungen des zugrunde liegenden API-Generators verwendet werden: GET, POST, PUT und DELETE werden - ohne Einschränkungen - erlaubt.",
 	"You improved security slightly by no longer accepting PUT requests from anonymous API callers. But does the shop even want to allow its authenticated customers to change products themselves?": "Du hast die Sicherheit ein bisschen verbessert, indem PUT-Anfragen von anonymen API-Anrufern nicht mehr angenommen werden. Aber will der Shop seinen authentifizierten Kunden überhaupt gestatten, die Produkte selbst zu ändern?",
 	"Disabling all HTTP verbs other than GET for the products API is indeed the only safe way to implement secure access control. Shop administrators should not use the customer facing web UI to manage the store's inventory anyway.": "Das Deaktivieren aller anderen HTTP-Verben außer GET für die Produkte-API ist in der Tat der einzige zuverlässige Weg, um sichere Zugriffskontrolle zu implementieren. Shop-Administratoren sollten sowieso nicht das Webinterface für Kunden verwenden, um das Inventar des Shops zu verwalten.",
 	"Try to identify any variables in the code that might contain arbitrary user input.": "Versuche, Variablen im Code zu identifizieren, die beliebige Benutzereingaben enthalten könnten.",
-	"Follow the user input through the function call and try to spot places where it might be abused for malicious purposes.": "Follow the user input through the function call and try to spot places where it might be abused for malicious purposes.",
-	"Can you spot a place where a SQL query is being cobbled together in an unsafe way?": "Can you spot a place where a SQL query is being cobbled together in an unsafe way?",
+	"Follow the user input through the function call and try to spot places where it might be abused for malicious purposes.": "Verfolge die Benutzereingabe durch den Funktionsaufruf und versuche die Stellen zu finden, an denen sie für böswillige Zwecke missbraucht werden kann.",
+	"Can you spot a place where a SQL query is being cobbled together in an unsafe way?": "Kannst du eine Stelle erspähen, an der eine SQL-Abfrage auf unsichere Weise zusammengeschustert wird?",
 	"Trying to prevent any injection attacks with a custom-built blocklist mechanism is doomed to fail. It might work for some simpler attack payloads but an attacker with time and skills can likely bypass it at some point.": "Trying to prevent any injection attacks with a custom-built blocklist mechanism is doomed to fail. It might work for some simpler attack payloads but an attacker with time and skills can likely bypass it at some point.",
 	"Replacing the template string (`...`) notation with plain string concatenation (\"...\"+\"...\") does not change the behavior of the code in any way. It only makes the code less readable.": "Replacing the template string (`...`) notation with plain string concatenation (\"...\"+\"...\") does not change the behavior of the code in any way. It only makes the code less readable.",
 	"Using the built-in replacement (or binding) mechanism of Sequelize is equivalent to creating a Prepared Statement. This prevents tampering with the query syntax through malicious user input as it is \"set in stone\" before the criteria parameter is inserted.": "Using the built-in replacement (or binding) mechanism of Sequelize is equivalent to creating a Prepared Statement. This prevents tampering with the query syntax through malicious user input as it is \"set in stone\" before the criteria parameter is inserted.",
 	"Can you find a HTTP route mapping that deals with metrics?": "Kannst du ein Routen-Mapping finden, das sich mit Metriken beschäftigt?",
 	"Remember: The default behavior of route mappings is to allow access to everyone.": "Bedenke: Das Standardverhalten der Routen-Mappings ist es, Zugriff für jeden zu erlauben.",
-	"The metrics route remains publicly accessible. This change only messes with functional settings of the measurement framework unnecessarily.": "The metrics route remains publicly accessible. This change only messes with functional settings of the measurement framework unnecessarily.",
+	"The metrics route remains publicly accessible. This change only messes with functional settings of the measurement framework unnecessarily.": "Die Metrik-Route bleibt öffentlich zugänglich. Diese Änderung pfuscht nur unnötig an den funktionalen Einstellungen des Messung-Frameworks herum.",
 	"This fix prevents unauthorized access to the metrics route but overshoots the goal by locking out everyone - including administrators.": "Diese Korrektur verhindert unbefugten Zugriff auf die Metriken-Route, schießt aber über das Ziel hinaus, indem jeder - einschließlich der Administratoren - gesperrt wird.",
 	"Access will now be restricted only to users with administrator permissions, which seems reasonable protection, assuming that it is not possible for a regular user to escalate admin priviliges. If that were a risk, the metrics should better be stored behind the scenes not be made accessible via the shop application at all.": "Access will now be restricted only to users with administrator permissions, which seems reasonable protection, assuming that it is not possible for a regular user to escalate admin priviliges. If that were a risk, the metrics should better be stored behind the scenes not be made accessible via the shop application at all.",
-	"Do you remember the security question that Bender used for his account?": "Do you remember the security question that Bender used for his account?",
-	"This question is the source of the security risk in this challenge.": "This question is the source of the security risk in this challenge.",
-	"While not necessarily as trivial to research via a user's LinkedIn profile, the question is still easy to research or brute force when answered truthfully.": "While not necessarily as trivial to research via a user's LinkedIn profile, the question is still easy to research or brute force when answered truthfully.",
-	"Exchanging \"company\" with \"organization\" is only a vocabulary change and has no effect on security.": "Exchanging \"company\" with \"organization\" is only a vocabulary change and has no effect on security.",
+	"Do you remember the security question that Bender used for his account?": "Erinnerst du dich an die Sicherheitsfrage, die Bender für sein Konto verwendet?",
+	"This question is the source of the security risk in this challenge.": "Diese Frage ist der Ursprung des Sicherheitsrisikos bei dieser Herausforderung.",
+	"While not necessarily as trivial to research via a user's LinkedIn profile, the question is still easy to research or brute force when answered truthfully.": "Obwohl nicht unbedingt so trivial über das LinkedIn-Profil eines Benutzers herauszufinden, ist diese Frage immer noch leicht zu recherchieren oder durch Brute Force herauszufinden, wenn sie wahrheitsgetreu beantwortet wurde.",
+	"Exchanging \"company\" with \"organization\" is only a vocabulary change and has no effect on security.": "Der Austausch von \"Unternehmen\" mit \"Organisation\" ist nur eine Vokabel-Änderung und hat keine Auswirkungen auf die Sicherheit.",
 	"When answered truthfully, all security questions are susceptible to online research (on Facebook, LinkedIn etc.) and often even brute force. If at all, they should not be used as the only factor for a security-relevant function.": "When answered truthfully, all security questions are susceptible to online research (on Facebook, LinkedIn etc.) and often even brute force. If at all, they should not be used as the only factor for a security-relevant function.",
-	"Can you identify the lines which have something to do with crypto currency addresses?": "Can you identify the lines which have something to do with crypto currency addresses?",
-	"Did you notice there is a constant containing allowed redirect web addresses?": "Did you notice there is a constant containing allowed redirect web addresses?",
-	"Make sure to select all three lines responsible for crypto currency addresses which are not promoted any longer.": "Make sure to select all three lines responsible for crypto currency addresses which are not promoted any longer.",
-	"This fix removes one deprecated crypto currency address from the allow list but forgets to deal with two other ones.": "This fix removes one deprecated crypto currency address from the allow list but forgets to deal with two other ones.",
+	"Can you identify the lines which have something to do with crypto currency addresses?": "Kannst du die Zeilen identifizieren, die etwas mit Kryptowährungsadressen zu tun haben?",
+	"Did you notice there is a constant containing allowed redirect web addresses?": "Hast du bemerkt, dass es eine Konstante mit erlaubten Weiterleitungsadressen gibt?",
+	"Make sure to select all three lines responsible for crypto currency addresses which are not promoted any longer.": "Stelle sicher, dass du alle drei Zeilen auswählst, die für die nicht mehr beworbenen Krypto-Währungsadressen zuständig sind.",
+	"This fix removes one deprecated crypto currency address from the allow list but forgets to deal with two other ones.": "Diese Korrektur entfernt zwar eine veraltete Kryptowährungsadresse aus der Allowlist, vergisst aber, sich um zwei andere zu kümmern.",
 	"When cleaning up any allow list of deprecated entries, it is crucial to be thorough and re-check the list regularly. Otherwise allow lists tend to become weaker over time.": "When cleaning up any allow list of deprecated entries, it is crucial to be thorough and re-check the list regularly. Otherwise allow lists tend to become weaker over time.",
 	"This fix uses the binding mechanism of Sequelize to create the equivalent of a Prepared Statement, which is great. Unfortunately this fix also introduces a critical functional bug into the authentication process.": "This fix uses the binding mechanism of Sequelize to create the equivalent of a Prepared Statement, which is great. Unfortunately this fix also introduces a critical functional bug into the authentication process.",
 	"This fix unfortunately goes only half the way to using the binding mechanism of Sequelize. Such a Prepared Statement still concatenated from user input, is still wide open for SQL Injection attacks.": "This fix unfortunately goes only half the way to using the binding mechanism of Sequelize. Such a Prepared Statement still concatenated from user input, is still wide open for SQL Injection attacks.",
@@ -391,13 +386,13 @@
 	"Do you remember the security question that Jim used for his account?": "Do you remember the security question that Jim used for his account?",
 	"Widening the scope from an \"eldest sibling\" to \"any family member\" still allows the question to be easily researched online (on Facebook etc.) or brute forced when answered truthfully.": "Widening the scope from an \"eldest sibling\" to \"any family member\" still allows the question to be easily researched online (on Facebook etc.) or brute forced when answered truthfully.",
 	"Tightening the scope from an \"eldest sibling\" to \"eldest brother\" reduces any brute force effort to only male forenames, assuming the question is answered truthfully.": "Tightening the scope from an \"eldest sibling\" to \"eldest brother\" reduces any brute force effort to only male forenames, assuming the question is answered truthfully.",
-	"Do you remember the security question that Bjoern used for his account?": "Do you remember the security question that Bjoern used for his account?",
-	"Researching someone's current place of residence is probably even easier than a past one.": "Researching someone's current place of residence is probably even easier than a past one.",
-	"When changing the scope of this question from \"teenager\" to \"toddler\", researching a past place of residence still is the only (low) hurdle for the attacker.": "When changing the scope of this question from \"teenager\" to \"toddler\", researching a past place of residence still is the only (low) hurdle for the attacker.",
-	"Do you remember the security question that Bjoern used for his OWASP account?": "Do you remember the security question that Bjoern used for his OWASP account?",
+	"Do you remember the security question that Bjoern used for his account?": "Erinnerst du dich an die Sicherheitsfrage, die Bjoern für sein Konto verwendet?",
+	"Researching someone's current place of residence is probably even easier than a past one.": "Jemandes gegenwärtigen Wohnsitz herauszufinden, ist wahrscheinlich noch einfacher als einen früheren.",
+	"When changing the scope of this question from \"teenager\" to \"toddler\", researching a past place of residence still is the only (low) hurdle for the attacker.": "Beim Ändern der Aufgabenstellung dieser Frage von \"Teenager\" auf \"Kleinkind\", bleibt die Suche nach einem früheren Wohnort weiterhin die einzige (niedrige) Hürde für den Angreifer.",
+	"Do you remember the security question that Bjoern used for his OWASP account?": "Erinnerst du dich an die Sicherheitsfrage, die Bjoern für sein OWASP-Konto verwendet?",
 	"There are even less car brands in the world than potential pet names. Therefore, changing the security questions has even a negative effect on overall security as it makes guessing and brute forcing much easier.": "There are even less car brands in the world than potential pet names. Therefore, changing the security questions has even a negative effect on overall security as it makes guessing and brute forcing much easier.",
-	"This fix option is obviously (?) a joke. But it should still illustrate that narrowing the scope of a question reduces the solution space accordingly, thus making \"social stalking\" and brute force much easier.": "This fix option is obviously (?) a joke. But it should still illustrate that narrowing the scope of a question reduces the solution space accordingly, thus making \"social stalking\" and brute force much easier.",
-	"Do you remember the security question that Uvogin used for his account?": "Do you remember the security question that Uvogin used for his account?",
+	"This fix option is obviously (?) a joke. But it should still illustrate that narrowing the scope of a question reduces the solution space accordingly, thus making \"social stalking\" and brute force much easier.": "Diese Fix-Option ist offensichtlich (?) ein Witz. Aber sie soll dennoch veranschaulichen, dass die Einschränkung des Geltungsbereichs einer Frage auch deren Lösungsraum entsprechend reduziert. Auf diese Weise wird \"Social Stalking\" und Brute Force viel einfacher.",
+	"Do you remember the security question that Uvogin used for his account?": "Erinnerst du dich an die Sicherheitsfrage, die Uvogin für sein Konto verwendet?",
 	"When changing the scope of this question from \"movie\" to \"actor/actress\", researching and brute forcing is probably just as easy for the attacker.": "When changing the scope of this question from \"movie\" to \"actor/actress\", researching and brute forcing is probably just as easy for the attacker.",
 	"Narrowing the scope of the question from \"movie\" to \"animé\" dramatically reduces the solution space, thus making guessing and brute force attacks a lot easier.": "Narrowing the scope of the question from \"movie\" to \"animé\" dramatically reduces the solution space, thus making guessing and brute force attacks a lot easier.",
 	"Among the long list of route mappings, can you spot any that seem responsible for the Score Board screen?": "Among the long list of route mappings, can you spot any that seem responsible for the Score Board screen?",
@@ -422,7 +417,7 @@
 	"The only viable way to prevent access to a soon-to-be-released Token Sale page is to not have it in the client-side code before its actual release. It then makes sense to not have any premature route mapping declarations either. This then makes the whole obfuscation code-madness unnecessary as well.": "The only viable way to prevent access to a soon-to-be-released Token Sale page is to not have it in the client-side code before its actual release. It then makes sense to not have any premature route mapping declarations either. This then makes the whole obfuscation code-madness unnecessary as well.",
 	"You should take a close look at how this code checks for allowed vs. forbidded URLs to redirect to.": "You should take a close look at how this code checks for allowed vs. forbidded URLs to redirect to.",
 	"Try to play through how the logical operators and used standard functions work in this situation.": "Try to play through how the logical operators and used standard functions work in this situation.",
-	"Could you somehow make the code believe that it is dealing with an allow-listed URL while it actually isn't?": "Could you somehow make the code believe that it is dealing with an allow-listed URL while it actually isn't?",
+	"Could you somehow make the code believe that it is dealing with an allow-listed URL while it actually isn't?": "Könntest du den Code irgendwie glauben lassen, dass er es mit einer explizit erlaubten URL zu tun hat, obwohl es eigentlich keine ist?",
 	"The open redirect flaw in this code cannot be fixed by applying URL encoding to the target URL. In fact, it would break the entire redirect mechanism for allow-listed URLs as they are not URL-encoded and would therefore never match.": "The open redirect flaw in this code cannot be fixed by applying URL encoding to the target URL. In fact, it would break the entire redirect mechanism for allow-listed URLs as they are not URL-encoded and would therefore never match.",
 	"Changing from logical \"or\" to logical \"and\" here does not do anything for security but entirely breaks the redirect mechanism as \"allowed\" can never be true after the loop.": "Changing from logical \"or\" to logical \"and\" here does not do anything for security but entirely breaks the redirect mechanism as \"allowed\" can never be true after the loop.",
 	"HTML-escaping is completely wrong in this situation because the code is dealing with URLs and not HTML input.": "HTML-escaping is completely wrong in this situation because the code is dealing with URLs and not HTML input.",
@@ -434,23 +429,39 @@
 	"Replacing the \"X-Forwarded-For\" header with its standardized alternative \"Forwarded\" does not close the security flaw of how this header is actually being used and can be abused by attackers.": "Replacing the \"X-Forwarded-For\" header with its standardized alternative \"Forwarded\" does not close the security flaw of how this header is actually being used and can be abused by attackers.",
 	"Reducing the rate limit from 100 requests in 5min to 10 reqests in 3min could be seen as a security improvement, if there wasn't an entirely unrelated misconfiguration at play here.": "Reducing the rate limit from 100 requests in 5min to 10 reqests in 3min could be seen as a security improvement, if there wasn't an entirely unrelated misconfiguration at play here.",
 	"Removing the custom key generator that lets an arbitrary HTTP header take precedence over the client IP is the best option here. Now an attacker at least needs to fake their actual IP to bypass the rate limiting, as this is the default key for the RateLimit module used here. There is a functional downside though, as now users behin e.g. corporate proxies might be rate limited as a group and not individually. But with 100 allowed password resets in 5min this should not occur too frequently.": "Removing the custom key generator that lets an arbitrary HTTP header take precedence over the client IP is the best option here. Now an attacker at least needs to fake their actual IP to bypass the rate limiting, as this is the default key for the RateLimit module used here. There is a functional downside though, as now users behin e.g. corporate proxies might be rate limited as a group and not individually. But with 100 allowed password resets in 5min this should not occur too frequently.",
-	"Find all places in the code which are handling the product descriptions.": "Find all places in the code which are handling the product descriptions.",
+	"Find all places in the code which are handling the product descriptions.": "Finde alle Stellen im Code, die die Produktbeschreibungen behandeln.",
 	"Manually encoding the angular brackets of the HTML tags does not add any security. It is likely to break descriptions with legitimate HTML tags for styling or links, though.": "Manually encoding the angular brackets of the HTML tags does not add any security. It is likely to break descriptions with legitimate HTML tags for styling or links, though.",
 	"The removed code block deals with handling of different screen sizes and is entirely unrelated to the given XSS vulnerability.": "The removed code block deals with handling of different screen sizes and is entirely unrelated to the given XSS vulnerability.",
 	"Using bypassSecurityTrustScript() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. If at all, this switch might only accidentally keep XSS prevention intact.": "Using bypassSecurityTrustScript() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. If at all, this switch might only accidentally keep XSS prevention intact.",
 	"Removing the bypass of sanitization entirely is the best way to fix the XSS vulnerability here. It should be noted, that XSS is only a consequence of broken autheorization in this case, as users should not be allowed to change product descriptions in the first place.": "Removing the bypass of sanitization entirely is the best way to fix the XSS vulnerability here. It should be noted, that XSS is only a consequence of broken autheorization in this case, as users should not be allowed to change product descriptions in the first place.",
-	"To find the culprit lines, you need to understand how MongoDB handles updating records.": "To find the culprit lines, you need to understand how MongoDB handles updating records.",
+	"To find the culprit lines, you need to understand how MongoDB handles updating records.": "Um die schuldigen Zeilen zu finden, musst du verstehen, wie MongoDB mit Datensatz-Aktualisierungen umgeht.",
 	"Did you notice that the developers retrieved a reference to the user but never actually use it for anything? This might be part of the problem.": "Did you notice that the developers retrieved a reference to the user but never actually use it for anything? This might be part of the problem.",
 	"Another problematic line you need to select, is actually missing something that ties the user to the review.": "Another problematic line you need to select, is actually missing something that ties the user to the review.",
 	"This solution would reassign an updated review to the last editor, but it would not prevent to change other user's reviews in the first place.": "This solution would reassign an updated review to the last editor, but it would not prevent to change other user's reviews in the first place.",
 	"Removing the option to update multiple documents at once is a good idea and might actually help against another flaw in this code. But it does not fix the problem of allowing users to update other user's reviews.": "Removing the option to update multiple documents at once is a good idea and might actually help against another flaw in this code. But it does not fix the problem of allowing users to update other user's reviews.",
 	"Setting the author on server-side based on the user retrieved from the authentication token in the HTTP request is the right call. It prevents users from just passing any author email they like along with the request.": "Den Autor basierend auf dem Benutzer aus dem Authentifizierungstoken im HTTP Request auf Serverseite zu setzen, ist die richtige Entscheidung. Dies hindert Benutzer daran, einfach eine beliebige Autoren-E-Mail mit dem Request mitzuschicken.",
-	"Does this query really need to allow updating more than one review at once?": "Does this query really need to allow updating more than one review at once?",
+	"Does this query really need to allow updating more than one review at once?": "Muss diese Abfrage wirklich erlauben, mehrere Bewertungen gleichzeitig zu aktualisieren?",
 	"Consider the query parameters under control of the attacker and try to find the one where they might inject some query-altering command.": "Consider the query parameters under control of the attacker and try to find the one where they might inject some query-altering command.",
 	"Removing the option to update multiple documents at once combined with avoiding a \"not-equal\"-based injection is insufficient against any attacker with at least moderate MongoDB query knowledge.": "Removing the option to update multiple documents at once combined with avoiding a \"not-equal\"-based injection is insufficient against any attacker with at least moderate MongoDB query knowledge.",
 	"Removing the option to update multiple documents at once is definitely necessary. But it is unfortunately not a sufficient fix, as an attacker might still be able to \"add back\" the multi-update behavior.": "Removing the option to update multiple documents at once is definitely necessary. But it is unfortunately not a sufficient fix, as an attacker might still be able to \"add back\" the multi-update behavior.",
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exakte Version von <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop, die am 02.02.2020</a> vom GitHub Archive Program archiviert wurde und am 8. Juli 2020 in den <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> ging, wo sie sicher für mindestens 1000 Jahre gelagert wird.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Schließe mehrere \"Challenge gelöst\"-Benachrichtigungen auf einmal.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Schau entweder in die offizielle Dokumentation, oder inspiziere ein Benachrichtigungs-UI-Element direkt."
+	"Either check the official documentation or inspect a notification UI element directly.": "Schau entweder in die offizielle Dokumentation, oder inspiziere ein Benachrichtigungs-UI-Element direkt.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Registriere einen Benutzer mit leerer E-Mail und leerem Passwort.",
+	"Consider intercepting and playing with the request payload.": "Erwäge das Abfangen von und Herumspielen mit dem Request-Payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Präge das Honey-Pot-NFT indem du BEEs aus der Bienenzuflucht sammelst.",
+	"Discover NFT wonders among the captivating visual memories.": "Entdecke NFT-Wunder zwischen den faszinierenden visuellen Erinnerungen.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Nimm die Brieftasche mit unserem offiziellen Soul Bound Token (NFT) in Besitz.",
+	"Find the seed phrase posted accidentally.": "Finde die versehentlich gepostete Seed-Phrase.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Hebe mehr ETH von der neuen Brieftasche ab, als du hinterlegt hast.",
+	"Try to exploit the contract of the wallet.": "Versuche, den Contract der Brieftasche auszunutzen.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Finde eine versehentlich ausgelieferte Programmier-Sandbox zum spontanen Schreiben von Smart Contracts.",
+	"It is just as easy as finding the Score Board.": "Es ist genauso einfach wie die Punkteübersicht zu finden.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "Er könnte ihn bei mindestens einer Gelegenheit vor laufender Kamera herausposaunt haben. Vielleicht auch noch anderswo.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Finde das versteckte <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">Ostereier</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Versuche entweder a) einen klugen Brute-Force-Angriff oder b) Reverse Engineering oder c) einige Nachforschungen in der Cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Umgehe eine Sicherheitskontrolle mit einem <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a>, um auf eine Datei zuzugreifen, die nicht für deine Augen bestimmt ist.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Zweifellos möchtest du unsere Sicherheitsrichtlinie lesen, bevor Du irgendwelche Untersuchungen unserer Anwendung durchführst."
 }
diff --git a/data/static/i18n/el_GR.json b/data/static/i18n/el_GR.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/el_GR.json
+++ b/data/static/i18n/el_GR.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/en.json b/data/static/i18n/en.json
index f7bd53d3361..0fbfedefbd2 100644
--- a/data/static/i18n/en.json
+++ b/data/static/i18n/en.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/es_ES.json b/data/static/i18n/es_ES.json
index 099ee8f5c7f..5389cf05b43 100644
--- a/data/static/i18n/es_ES.json
+++ b/data/static/i18n/es_ES.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Sobrescribe el archivo <a href=\"/ftp/legal.md\">Legal Information</a>.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Busca un tweet elogiando la nueva funcionalidad de la tienda web. Luego encuentra una vulnerabilidad de terceros asociada a ella.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Restablece la contraseña de la cuenta OWASP de Bjoern a través del mecanismo <a href=\"/#/forgot-password\">Forgot Password</a> con <i>la respuesta original</i> a su pregunta de seguridad.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "Podría haberlo revelado al menos en una ocasión cuando una cámara estaba funcionando. Quizás también en otro lado.",
 	"Learn about the Token Sale before its official announcement.": "Conozca la venta de tokens antes de su anuncio oficial.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "Los desarrolladores realmente creen en \"Seguridad a través de la oscuridad\" sobre las restricciones de acceso reales.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Realiza una ejecución remota de código que mantendría ocupada <em> para siempre </em> a una aplicación menos resistente.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Descubre de dónde podría venir esta información. Luego, crea una cadena de ataque UNION SELECT contra un endpoint que ofrezca una forma innecesaria de filtrar datos.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Usa una interfaz B2B obsoleta que no fué correctamente deshabilitada.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "Los desarrolladores que desactivaron la interfaz piensan que pueden ser invisibles con solo cerrar sus ojos.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Encuentra el <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">huevo de Pascua</a> oculto.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "Si resolviste uno de los tres desafíos de acceso a archivos, ya sabes donde encontrar el huevo de Pascua.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Realiza una divulgación de información no deseada accediendo a datos entre dominios.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Intenta encontrar y atacar un endpoint que responda con información del usuario. La inyección SQL no es la solución aquí.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Deshazte de todos los comentarios de 5 estrellas de los clientes .",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Una vez que hayas encontrado la sección de administración de la aplicación, este desafío es casi trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Falsifica un código de cupón que te dé un descuento de al menos un 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Prueba a) un ataque informado de fuerza bruta o b) ingeniería inversa o c) alguna investigación en la nube.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "Puedes resolver esto manipulando la interfaz de usuario o interceptando la comunicación con el backend RESTful.",
 	"Post a product review as another user or edit any user's existing review.": "Publica una reseña de producto como otro usuario o edita la reseña existente de cualquier usuario.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infecta al servidor con malware jugoso al abusar de la ejecución de comandos arbitrarios.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" es un claro indicador de que esto no tiene nada que ver con nada de Angular. También asegúrese de usar sólo nuestro malware no malicioso.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Compórtate como cualquier \"sombrero blanco\" debería hacerlo antes de entrar en acción.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Sin duda querrás leer nuestra política de seguridad antes de realizar cualquier investigación sobre nuestra aplicación.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Ejecuta un ataque XSS <i>persistente</i> con <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> evadiendo un mecanismo de seguridad <i>del lado del cliente</i>.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "El campo \"Comentario\" en la pantalla \"Comentarios del cliente\" es donde quieres centrar tu atención.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Descubre</a> un personaje notorio oculto a simple vista en la tienda. (Menciona el nombre exacto del personaje)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/et_EE.json b/data/static/i18n/et_EE.json
index e623f35f421..156b0726f29 100644
--- a/data/static/i18n/et_EE.json
+++ b/data/static/i18n/et_EE.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Kirjuta üle <a href=\"/ftp/legal.md\">Juriidiline Teave</a> fail.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Otsi säutsu, mis kiidab veebipoe uusi funktsioone. Seejärel leidke sellega seotud kolmanda osapoole haavatavus.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Lähtestage Bjoerni OWASP-i konto salasõna <a href=\"/#/forgot-password\">Unustatud parooli</a> mehanismi abil, kasutades tema algset <i>turbeküsimuse vastust</i>.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Teosta koodi kaugkäivitus, mis hoiab vähem karastatud rakenduse hõivatud <em>igavesti</em>. ",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Vabanege kõigist viietärni tagasisidest.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "Saad selle lahendada kasutajaliidese manipuleerimisega või RESTful rakendusliidese pealtkuulamisega.",
 	"Post a product review as another user or edit any user's existing review.": "Postita tootearvustus teise kasutajana või muutke mõne kasutaja olemasolevat arvustust.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Igikeltsa\" 2020 Väljaanne",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Parima mahlapoe müügimehe kunstiteos",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/fi_FI.json b/data/static/i18n/fi_FI.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/fi_FI.json
+++ b/data/static/i18n/fi_FI.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/fr_FR.json b/data/static/i18n/fr_FR.json
index 7be04f2a756..aef722f0583 100644
--- a/data/static/i18n/fr_FR.json
+++ b/data/static/i18n/fr_FR.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Écraser le fichier <a href=\"/ftp/legal.md\">Informations juridiques</a>.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Cherchez un tweet qui fait l'éloge d'une nouvelle fonctionnalité de la boutique en ligne, puis trouvez une vulnérabilité de tierce partie associée à celle-ci.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Réinitialiser le mot de passe du compte OWASP de Bjoern via le mécanisme <a href=\"/#/forgot-password\">Mot de passe oublié</a> avec <i>la réponse originale</i> à sa question de sécurité.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "Il aurait pu le gâcher au moins une fois quand une caméra était en marche, et peut-être aussi ailleurs.",
 	"Learn about the Token Sale before its official announcement.": "En savoir plus sur la vente de jetons avant son annonce officielle.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "Les développeurs croient vraiment en la \"sécurité par l'obscurité\" plutôt qu'à de vraies restrictions d'accès.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Effectue une exécution de code à distance qui garderait une application moins endurcie occupée <em>pour toujours</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Renseignez-vous sur l'origine de ces informations. Concevez ensuite une chaîne d'attaque UNION SELECT contre un endpoint qui offre un moyen inutile de filtrer les données.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Utilisez une interface B2B obsolète qui n'a pas été correctement arrêtée.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "Les développeurs qui ont désactivé l'interface pensent qu'ils pourraient être invisibles en fermant les yeux.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Trouvez <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">l'easter egg</a> caché.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "Si vous avez résolu l'un des trois défis liés à l'accès aux fichiers, vous savez déjà où trouver l'easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Effectuez une divulgation d'informations non souhaitées en accédant à des données inter-domaine.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Essayez de trouver et d'attaquer un endpoint qui répond avec les informations de l'utilisateur. Une injection SQL n'est pas la solution ici.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Vous pouvez vous débarrasser de tous les avis 5 étoiles.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Une fois que vous avez trouvé la section admin de l'application, ce défi est presque trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forgez un code coupon qui vous donne une réduction d'au moins 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Essayez soit a) une attaque de force brute bien connue soit b) du reverse engineering ou c) quelques recherches dans le cloud.",
 	"Post some feedback in another user's name.": "Postez un avis avec le nom d'utilisateur de quelqu'un d'autre",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "Vous pouvez résoudre cela en altérant l'interface utilisateur ou en interceptant la communication avec le backend RESTful.",
 	"Post a product review as another user or edit any user's existing review.": "Postez un avis de produit en tant qu'un autre utilisateur ou modifiez un avis déjà existant d'un utilisateur.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> un personnage notoire caché dans la boutique. (Mentionnez le nom exact du personnage)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Trouvez la réponse à la question de sécurité d'Emma en regardant son image dans le mur des images et utilisez-la pour réinitialiser son mot de passe via lien <a href=\"/#/forgot-password\">Mot de passe oublié</a>.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Regarder attentivement la photo pour déterminer l'endroit où elle a été prise.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "\"Permafrost\" Édition 2020",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Meilleure œuvre d'un vendeur",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/ga_IE.json b/data/static/i18n/ga_IE.json
index 22464e1eb7f..641e6c47d62 100644
--- a/data/static/i18n/ga_IE.json
+++ b/data/static/i18n/ga_IE.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/he_IL.json b/data/static/i18n/he_IL.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/he_IL.json
+++ b/data/static/i18n/he_IL.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/hi_IN.json b/data/static/i18n/hi_IN.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/hi_IN.json
+++ b/data/static/i18n/hi_IN.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/hu_HU.json b/data/static/i18n/hu_HU.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/hu_HU.json
+++ b/data/static/i18n/hu_HU.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/id_ID.json b/data/static/i18n/id_ID.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/id_ID.json
+++ b/data/static/i18n/id_ID.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/it_IT.json b/data/static/i18n/it_IT.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/it_IT.json
+++ b/data/static/i18n/it_IT.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/ja_JP.json b/data/static/i18n/ja_JP.json
index 484f6bc6ce8..018e276b263 100644
--- a/data/static/i18n/ja_JP.json
+++ b/data/static/i18n/ja_JP.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "<a href=\"/ftp/legal.md\">Legal Information</a>ファイルを上書きします。",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "ウェブショップの新しい機能を称賛するツイートを探してください。その後、それに関連付けられたサードパーティの脆弱性を見つけてください。",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "<a href=\"/#/forgot-password\">パスワード忘れた場合</a>のメカニズムからセキュリティの質問に対する<i>元々の答</i>を使って、BjoernのOWASPアカウントのパスワードをリセットしてください。",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "公式発表の前にトークンセールについて学びましょう。",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "これらの開発者は、実際のアクセス制限よりも「隠蔽によるセキュリティ」を信じこんでいます。",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "リモートコード実行 (RCE) の攻撃を行い、堅牢化されていないアプリケーションに対して<em>永遠に</em>負荷をかけ続けましょう。",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "適切にシャットダウンされなかった非推奨のB2Bインターフェースを使用してください。",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "インターフェイスを無効にした開発者は、目を閉じるだけで周りから自分が見えなくなると考えています。",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "隠れた<a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">イースターエッグ</a>を見つける。",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "3つのファイルアクセスの課題のうちの1つを解決すれば、イースターエッグの場所はすでにわかります。",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/ka_GE.json b/data/static/i18n/ka_GE.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/ka_GE.json
+++ b/data/static/i18n/ka_GE.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/ko_KR.json b/data/static/i18n/ko_KR.json
index 34afcc1c60f..caf64d8c979 100644
--- a/data/static/i18n/ko_KR.json
+++ b/data/static/i18n/ko_KR.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/lv_LV.json b/data/static/i18n/lv_LV.json
index 3493c66c427..231c7d68d1b 100644
--- a/data/static/i18n/lv_LV.json
+++ b/data/static/i18n/lv_LV.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/my_MM.json b/data/static/i18n/my_MM.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/my_MM.json
+++ b/data/static/i18n/my_MM.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/nl_NL.json b/data/static/i18n/nl_NL.json
index 50efec12a8e..9b50f165019 100644
--- a/data/static/i18n/nl_NL.json
+++ b/data/static/i18n/nl_NL.json
@@ -1,456 +1,467 @@
 {
 	"Find the carefully hidden 'Score Board' page.": "Vind de zorgvuldige verborgen 'Scorebord' pagina.",
 	"Try to find a reference or clue behind the scenes. Or simply guess what URL the Score Board might have.": "Probeer in de broncode een referentie of een aanwijzing te vinden. Of raad gewoon welke URL het scorebord zou kunnen hebben.",
-	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> without using the frontend application at all.": "Voer een <i>persistente</i> XSS aanval met <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> uit zonder gebruik te maken van de frontend applicatie.",
-	"You need to work with the server-side API directly. Try different HTTP verbs on different entities exposed through the API.": "U moet direct met de server-side API werken. Probeer verschillende HTTP woorden uit op verschillende entiteiten die weergeven via de API.",
-	"Gain access to any access log file of the server.": "Krijg toegang tot elke toegangslog bestand van de server.",
+	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> without using the frontend application at all.": "Voer een <i>persistente</i> XSS-aanval met <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> uit zonder gebruik te maken van de frontend applicatie.",
+	"You need to work with the server-side API directly. Try different HTTP verbs on different entities exposed through the API.": "Je moet direct met de server-side API werken. Probeer verschillende HTTP-woorden uit op de verschillende entiteiten die bereikbaar zijn via de API.",
+	"Gain access to any access log file of the server.": "Krijg toegang tot elke toegangslog-bestand van de server.",
 	"Who would want a server access log to be accessible through a web application?": "Wie wil dat een servertoegangslogboek toegankelijk is via een webapplicatie?",
 	"Register as a user with administrator privileges.": "Registreer als een gebruiker met beheerdersrechten.",
 	"You have to assign the unassignable.": "Je moet het niet-toewijsbare toewijzen.",
-	"Access the administration section of the store.": "Toegang tot het beheer gedeelte van de winkel.",
+	"Access the administration section of the store.": "Toegang tot het beheergedeelte van de winkel.",
 	"It is just slightly harder to find than the score board link.": "Het is net iets moeilijker om te vinden dan de link van het scorebord.",
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overschrijf het <a href=\"/ftp/legal.md\">Legal Information</a> bestand.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Kijk uit naar een tweet waarin de nieuwe functionaliteit van de webshop wordt geprezen. Zoek vervolgens een kwetsbaarheid van een derde partij erbij.",
-	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset het wachtwoord van Björn's OWASP account via het <a href=\"/#/forgot-password\">Wachtwoord</a> mechanisme <a href=\"/#/forgot-password\"> met <i>het oorspronkelijke antwoord</i> op zijn beveiligingsvraag.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "Hij had het ten minste één keer kunnen vrijgeven toen er een camera actief was. Misschien ook nog wel elders.",
-	"Learn about the Token Sale before its official announcement.": "Meer informatie over de Token Verkoop vóór de officiële aankondiging.",
-	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "De ontwikkelaars geloven echt in \"Veiligheid via Obscurity\" boven werkelijke toegangsbeperkingen.",
+	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset het wachtwoord van Björn's OWASP account via het <a href=\"/#/forgot-password\">Wachtwoord</a>-mechanisme <a href=\"/#/forgot-password\"> met <i>het oorspronkelijke antwoord</i> op zijn beveiligingsvraag.",
+	"Learn about the Token Sale before its official announcement.": "Meer informatie over de Tokenverkoop vóór de officiële aankondiging.",
+	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "De ontwikkelaars geloven echt in \"Veiligheid door Vaagheid\" boven werkelijke toegangsbeperkingen.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Voer een Remote Code Execution uit die een minder gehard programma <em>voor altijd zal bezighouden</em>.",
 	"The feature you need to exploit for this challenge is not directly advertised anywhere.": "De functie die je moet exploiten voor deze uitdaging wordt nergens direct aangegeven.",
-	"Submit 10 or more customer feedbacks within 20 seconds.": "Submit 10 or more customer feedbacks within 20 seconds.",
-	"After finding a CAPTCHA bypass, write a script that automates feedback submission. Or open many browser tabs and be really quick.": "Schrijf een script die automatisch feedback kan submitten na het vinden van een CAPTCHA bypass. Of open veel browser tabbladen en probeer het snel.",
+	"Submit 10 or more customer feedbacks within 20 seconds.": "Dien minstens 10 klantenfeedbacks in binnen 20 seconden.",
+	"After finding a CAPTCHA bypass, write a script that automates feedback submission. Or open many browser tabs and be really quick.": "Schrijf een script dat automatisch feedback kan submitten na het vinden van een CAPTCHA bypass. Of open veel browser tabbladen en probeer het snel.",
 	"Change Bender's password into <i>slurmCl4ssic</i> without using SQL Injection or Forgot Password.": "Wijzig Bender zijn wachtwoord in <i>slurmCl4ssic</i> zonder gebruik te maken van SQL Injectie of wachtwoord vergeten.",
 	"In previous releases this challenge was wrongly accused of being based on CSRF.": "In eerdere releases werd deze challenge ten onrechte beschuldigd van het feit dat het gebaseerd was op CSRF.",
 	"Order the Christmas special offer of 2014.": "Bestel de speciale kerstaanbieding van 2014.",
 	"Find out how the application handles unavailable products and try to find a loophole.": "Ontdek hoe de applicatie omgaat met niet-beschikbare producten en probeer een loophole te vinden.",
-	"Bypass the Content Security Policy and perform an XSS attack with <code>&lt;script&gt;alert(`xss`)&lt;/script&gt;</code> on a legacy page within the application.": "Omzeil het Content Security Policy en voer een XSS aanval uit met <code>&lt;script&gt;alert(`xss`)&lt;/script&gt;</code> op een legacy pagina binnen de toepassing.",
-	"What is even \"better\" than a legacy page with a homegrown RegEx sanitizer? Having CSP injection issues on the exact same page as well!": "Wat is zelfs \"beter\" dan een oudere pagina met een homegrown RegEx sanitizer? Het hebben van CSP injectie problemen op precies dezelfde pagina!",
-	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>client-side</i> security mechanism.": "Voer een <i>persistente</i> XSS aanval met <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> uit zonder gebruik te maken van de frontend applicatie.",
+	"Bypass the Content Security Policy and perform an XSS attack with <code>&lt;script&gt;alert(`xss`)&lt;/script&gt;</code> on a legacy page within the application.": "Omzeil de Content Security Policy en voer een XSS-aanval uit met <code>&lt;script&gt;alert(`xss`)&lt;/script&gt;</code> op een vervallen pagina binnen de toepassing.",
+	"What is even \"better\" than a legacy page with a homegrown RegEx sanitizer? Having CSP injection issues on the exact same page as well!": "Wat is zelfs \"beter\" dan een oudere pagina met een homegrown RegEx sanitizer? Het hebben van CSP-injectie problemen op precies dezelfde pagina!",
+	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>client-side</i> security mechanism.": "Voer een <i>persistente</i> XSS-aanval met <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> uit zonder gebruik te maken van de frontend-applicatie.",
 	"Only some input fields validate their input. Even less of these are persisted in a way where their content is shown on another screen.": "Slechts enkele invoervelden valideren hun input. Nog minder van deze velden worden gebruikt op een manier waarop hun inhoud wordt weergegeven op een ander scherm.",
 	"Access a confidential document.": "Toegang tot een vertrouwelijk document.",
 	"Analyze and tamper with links in the application that deliver a file directly.": "Analyseer en manipuleer de links in de applicatie die direct een bestand leveren.",
-	"Perform a <i>DOM</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.": "Voer een <i>DOM</i> XSS aanval uit met <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.",
-	"Look for an input field where its content appears in the HTML when its form is submitted.": "Zoek naar een invoerveld waar de inhoud wordt weergegeven in de HTML wanneer het formulier wordt ingediend.",
-	"Exfiltrate the entire DB schema definition via SQL Injection.": "Exfiltreer de gehele DB-schema definitie via SQL Injection.",
+	"Perform a <i>DOM</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.": "Voer een <i>DOM</i> XSS-aanval uit met <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.",
+	"Look for an input field where its content appears in the HTML when its form is submitted.": "Zoek naar een invoerveld waarvan de inhoud wordt weergegeven in de HTML wanneer het formulier wordt ingediend.",
+	"Exfiltrate the entire DB schema definition via SQL Injection.": "Exfiltreer de gehele DB-schema definitie via SQL-injection.",
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Ontdek waar deze informatie vandaan zou kunnen komen. Maak dan een UNION SELECT string die gebruikt kan worden tegen een eindpunt dat een onnodige manier biedt om gegevens te filteren.",
-	"Use a deprecated B2B interface that was not properly shut down.": "Gebruik een verouderde B2B interface die niet goed is afgesloten.",
+	"Use a deprecated B2B interface that was not properly shut down.": "Gebruik een verouderde B2B-interface die niet goed is afgesloten.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "De ontwikkelaars die de interface hebben uitgeschakeld denken dat ze onzichtbaar kunnen worden door gewoon hun ogen te sluiten.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Vind de verborgen <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">Pasen ei</a>.",
-	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "Als je een van de drie file access challenges hebt kunnen oplossen, weet je al waar je het easteregg kan vinden.",
-	"Perform an unwanted information disclosure by accessing data cross-domain.": "Krijg ongevraagde informatie door middel van cross-domain data toegang.",
-	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Probeer een eindpunt te vinden en voer een aanval hierop uit dat reageert met gebruikersinformatie. SQL Injectie is hier niet de oplossing.",
-	"Log in with the (non-existing) accountant <i>acc0unt4nt@juice-sh.op</i> without ever registering that user.": "Log in met de (niet-bestaande) accountant <i>acc0unt4nt@juice-sh.op</i> zonder deze gebruiker ooit te registreren.",
-	"Try to create the needed user \"out of thin air\".": "Probeer de benodigde gebruiker \"uit dun lucht\" te maken.",
+	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "Als je een van de drie bestandstoegang challenges hebt kunnen oplossen, weet je al waar je het paasei kan vinden.",
+	"Perform an unwanted information disclosure by accessing data cross-domain.": "Krijg ongevraagde informatie door middel van cross-domain datatoegang.",
+	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Zoek een eindpunt dat reageert met gebruikersinformatie en val dit aan. SQL-injectie is hier niet de oplossing.",
+	"Log in with the (non-existing) accountant <i>acc0unt4nt@juice-sh.op</i> without ever registering that user.": "Log in met de (niet-bestaande) account <i>acc0unt4nt@juice-sh.op</i> zonder deze gebruiker ooit te registreren.",
+	"Try to create the needed user \"out of thin air\".": "Probeer de benodigde gebruiker \"uit het niets\" te maken.",
 	"Provoke an error that is neither very gracefully nor consistently handled.": "Veroorzaak een fout aan die niet erg veilig en consequent wordt behandeld.",
 	"Try to submit bad input to forms. Alternatively tamper with URL paths or parameters.": "Probeer foutieve invoer in te dienen op formulieren. Een alternatief is het manipuleren van een URL of de parameters ervan.",
-	"Successfully redeem an expired campaign coupon code.": "Succesvol een verlopen campagne coupon code ingewisseld.",
+	"Successfully redeem an expired campaign coupon code.": "Wissel de verlopen code van een campagnecoupon succesvol in.",
 	"Try to identify past special event or holiday campaigns of the shop first.": "Probeer eerst de geschiedenis van speciale evenementen of vakantiecampagnes van de winkel te identificeren.",
-	"Retrieve the language file that never made it into production.": "Haal het taalbestand op dat het nooit tot productie heeft gemaakt.",
+	"Retrieve the language file that never made it into production.": "Haal het taalbestand op dat nooit in productie is genomen.",
 	"Brute force is not the only option for this challenge, but a perfectly viable one.": "Brute force is niet de enige optie voor deze uitdaging, maar het is wel degelijk mogelijk.",
 	"Get rid of all 5-star customer feedback.": "Verwijder alle 5-sterren klantenfeedback.",
-	"Once you found admin section of the application, this challenge is almost trivial.": "Wanneer je een admin gedeelte van de applicatie hebt gevonden, is deze uitdaging bijna triviaal.",
-	"Forge a coupon code that gives you a discount of at least 80%.": "Maak een couponcode die je een korting van minstens 80% geeft.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Probeer a) een knowledgable brute force attack of b) reverse engineering of c) doe onderzoek in de cloud.",
-	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
+	"Once you found admin section of the application, this challenge is almost trivial.": "Wanneer je het admin-gedeelte van de applicatie hebt gevonden, is deze uitdaging bijna triviaal.",
+	"Forge a coupon code that gives you a discount of at least 80%.": "Maak een couponcode die je een korting geeft van minstens 80%.",
+	"Post some feedback in another user's name.": "Plaats klantenfeedback uit naam van een andere gebruiker.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "Je kunt dit oplossen door te knoeien met de gebruikersinterface of door de verbinding te onderscheppen met de RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Plaats een productbeoordeling als een andere gebruiker of bewerk de bestaande beoordeling van een gebruiker.",
-	"Observe the flow of product review posting and editing and see if you can exploit it.": "Observeer de flow van product beoordelingen plaatsen en bewerken en kijk of je het kunt exploiten.",
-	"Forge an almost properly RSA-signed JWT token that impersonates the (non-existing) user <i>rsa_lord@juice-sh.op</i>.": "Vekrijg een bijna juist RSA-ondertekend JWT token dat de (niet-bestaande) gebruiker <i>rsa_lord@juice-sh.op</i> nabootst.",
+	"Observe the flow of product review posting and editing and see if you can exploit it.": "Observeer hoe productbeoordelingen geplaatst en bewerkt worden en kijk of je dit kunt gebruiken.",
+	"Forge an almost properly RSA-signed JWT token that impersonates the (non-existing) user <i>rsa_lord@juice-sh.op</i>.": "Vekrijg een bijna correct RSA-ondertekend JWT-token dat de (niet-bestaande) gebruiker <i>rsa_lord@juice-sh.op</i> nabootst.",
 	"This challenge is explicitly not about acquiring the RSA private key used for JWT signing.": "Deze uitdaging gaat expliciet niet over het verkrijgen van de RSA private key die wordt gebruikt voor JWT signing.",
-	"Access a developer's forgotten backup file.": "Vekrijg toegang tot het vergeten backup bestand van een ontwikkelaar.",
+	"Access a developer's forgotten backup file.": "Vekrijg toegang tot het vergeten backup-bestand van een ontwikkelaar.",
 	"You need to trick a security mechanism into thinking that the file you want has a valid file type.": "Je moet een beveiligingsmechanisme misleiden om te denken dat het bestand dat je wilt een geldig bestandstype heeft.",
-	"Access a salesman's forgotten backup file.": "Verkrijg toegang tot het vergeten backup bestand van een salesman.",
-	"<a href=\"/#/contact\">Inform the shop</a> about a <i>typosquatting</i> imposter that dug itself deep into the frontend. (Mention the exact name of the culprit)": "<a href=\"/#/contact\">Informeer de shop</a> over een <i>typosquatting</i> imposter dat diep in de frontend zit verwerkt. (Vermeld de exacte naam van de auteur)",
-	"This challenge has nothing to do with mistyping web domains. There is no conveniently misplaced file helping you with this one either. Or is there?": "Deze uitdaging heeft niets te maken met het verkeerd typen van URLs. Er is ook geen misplaatst bestand dat je helpt met dit. Of is die er toch?",
-	"Log in with Chris' erased user account.": "Log in met Chris zijn verwijderde gebruikersaccount.",
-	"Turns out that something is technically and legally wrong with the implementation of the \"right to be forgotten\" for users.": "Blijkt dat er zowel legaal als technisch iets mis is met de de implementatie van het \"Recht op vergeten te worden\" van gebruikers.",
+	"Access a salesman's forgotten backup file.": "Verkrijg toegang tot het vergeten backup-bestand van een verkoper.",
+	"<a href=\"/#/contact\">Inform the shop</a> about a <i>typosquatting</i> imposter that dug itself deep into the frontend. (Mention the exact name of the culprit)": "<a href=\"/#/contact\">Informeer de shop</a> over een <i>typosquatting</i> bedrieger die diep in de frontend zit verwerkt. (Vermeld de exacte naam van de dader)",
+	"This challenge has nothing to do with mistyping web domains. There is no conveniently misplaced file helping you with this one either. Or is there?": "Deze uitdaging heeft niets te maken met het verkeerd typen van URLs. Er is ook geen misplaatst bestand dat je hiermee helpt. Of is die er toch?",
+	"Log in with Chris' erased user account.": "Log in met het verwijderde gebruikersaccount van Chris.",
+	"Turns out that something is technically and legally wrong with the implementation of the \"right to be forgotten\" for users.": "Blijkt dat er zowel juridisch als technisch iets mis is met de de implementatie van het \"Recht op vergeten te worden\" van gebruikers.",
 	"Steal someone else's personal data without using Injection.": "Steel iemands persoonlijke gegevens zonder Injectie te gebruiken.",
-	"Trick the regular Data Export to give you more than actually belongs to you.": "Manipuleer de reguliere gegevensexport om meer gegevens te krijgen dan dat ze tot jou toe behoren.",
-	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> through an HTTP header.": "Voer een <i>persistente</i> XSS aanval met <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> uit door middel van een HTTP Header.",
+	"Trick the regular Data Export to give you more than actually belongs to you.": "Manipuleer de reguliere gegevensexport zodat je meer dan alleen jouw eigen gegevens krijgt.",
+	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> through an HTTP header.": "Voer een <i>persistente</i> XSS-aanval uit met <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> in een HTTP-header.",
 	"Finding a piece of displayed information that could originate from an HTTP header is part of this challenge.": "Een stuk weergegeven informatie vinden dat uit een HTTP-header kan komen maakt deel uit van deze challenge.",
-	"Solve challenge #999. Unfortunately, this challenge does not exist.": "los uitdaging #999 op. Helaas bestaat deze uitdaging niet.",
-	"You need to trick the hacking progress persistence feature into thinking you solved challenge #999.": "Je moet de hacking progress feature manipuleren zodat hij denkt dat je challenge #999 hebt opgelost.",
-	"Dumpster dive the Internet for a leaked password and log in to the original user account it belongs to. (Creating a new account with the same password does not qualify as a solution.)": "Zoek over het internet naar een gelekt wachtwoord en log in met het originele account dat hieraan verbonden is. (Een nieuw account aanmaken met hetzelfde wachtwoord telt niet als een oplossing.)",
+	"Solve challenge #999. Unfortunately, this challenge does not exist.": "Los uitdaging #999 op. Helaas bestaat deze uitdaging niet.",
+	"You need to trick the hacking progress persistence feature into thinking you solved challenge #999.": "Je moet de hacking progress registratiefunctie manipuleren, zodat hij denkt dat je challenge #999 hebt opgelost.",
+	"Dumpster dive the Internet for a leaked password and log in to the original user account it belongs to. (Creating a new account with the same password does not qualify as a solution.)": "Doorzoek het internet naar een gelekt wachtwoord en log in met het originele account dat hieraan verbonden is. (Een nieuw account aanmaken met hetzelfde wachtwoord telt niet als een oplossing.)",
 	"Once you have it, a technique called \"Password Spraying\" might prove useful.": "Zodra je het hebt, kan een techniek met de naam \"Password Spraying\" nuttig zijn.",
 	"Identify an unsafe product that was removed from the shop and <a href=\"/#/contact\">inform the shop</a> which ingredients are dangerous.": "Identificeer een onveilig product dat is verwijderd uit de winkel en <a href=\"/#/contact\">informeer de winkel</a> welke ingrediënten gevaarlijk zijn.",
-	"Your own SQLi and someone else's Ctrl-V will be your accomplices in this challenge!": "Je eigen SQLi en iemand anders Ctrl-V zijn jouw verdiensten in deze uitdaging!",
-	"<a href=\"/#/contact\">Inform the shop</a> about a <i>typosquatting</i> trick it has been a victim of at least in <code>v6.2.0-SNAPSHOT</code>. (Mention the exact name of the culprit)": "<a href=\"/#/contact\">Informeer de winkel</a> over een <i>typosquatting</i> truc waarvan het ten minste het slachtoffer is geworden in <code>v6.2.0-SNAPSHOT</code>. (Vermeld de exacte naam van de auteur)",
-	"This challenge has nothing to do with mistyping web domains. Investigate the forgotten developer's backup file instead.": "Deze uitdaging heeft niets te maken met veranderen van URLs. Onderzoek in plaats daarvan het back-upbestand dat de ontwikkelaar is vergeten te verwijderen.",
+	"Your own SQLi and someone else's Ctrl-V will be your accomplices in this challenge!": "Je eigen SQLi en de Ctrl-V van iemand anders zijn jouw handlangers in deze uitdaging!",
+	"<a href=\"/#/contact\">Inform the shop</a> about a <i>typosquatting</i> trick it has been a victim of at least in <code>v6.2.0-SNAPSHOT</code>. (Mention the exact name of the culprit)": "<a href=\"/#/contact\">Informeer de winkel</a> over een <i>typosquatting</i> truc waarvan het in ieder geval in <code>v6.2.0-SNAPSHOT</code> het slachtoffer is geweest. (Vermeld de exacte naam van de dader)",
+	"This challenge has nothing to do with mistyping web domains. Investigate the forgotten developer's backup file instead.": "Deze uitdaging heeft niets te maken met typfouten in domeinnamen. Onderzoek in plaats daarvan het back-upbestand dat de ontwikkelaar is vergeten te verwijderen.",
 	"Log in with the administrator's user account.": "Log in met het gebruikersaccount van de beheerder.",
-	"Try different SQL Injection attack patterns depending whether you know the admin's email address or not.": "Probeer verschillende SQL Injection aanvalspatronen ondanks of je het emailadres van de beheerder hebt of niet.",
-	"Log in with Amy's original user credentials. (This could take 93.83 billion trillion trillion centuries to brute force, but luckily she did not read the \"One Important Final Note\")": "Log in met de originele gebruikersgegevens van Amy. (Dit kan 93.83 biljoen triljoen triljoen jaar duren om te brute forcen, maar gelukkig las ze de \"Eén belangrijke slotopmerking\" niet.).",
+	"Try different SQL Injection attack patterns depending whether you know the admin's email address or not.": "Probeer verschillende aanvalspatronen voor SQL-injectie, afhankelijk van of je het emailadres van de beheerder wel of niet hebt.",
+	"Log in with Amy's original user credentials. (This could take 93.83 billion trillion trillion centuries to brute force, but luckily she did not read the \"One Important Final Note\")": "Log in met de originele gebruikersgegevens van Amy. (Dit kan 93.83 miljard biljoen biljoen eeuwen duren om te brute forcen, maar gelukkig las ze de \"Eén belangrijke slotopmerking\" niet.).",
 	"This challenge will make you go after a needle in a haystack.": "Door deze uitdaging ga je zoeken naar een naald in een hooiberg.",
-	"Log in with Bender's user account.": "Log in met Bender zijn gebruikersaccount.",
-	"If you know Bender's email address, try SQL Injection. Bender's password hash might not help you very much.": "Als je het e-mailadres van Bender weet, probeer dan SQL Injectie. Het wachtwoord hash zal je niet heel erg helpen.",
+	"Log in with Bender's user account.": "Log in met het gebruikersaccount van Bender.",
+	"If you know Bender's email address, try SQL Injection. Bender's password hash might not help you very much.": "Als je het e-mailadres van Bender weet, probeer dan SQL-injectie. De hash van zijn wachtwoord zal je niet heel erg helpen.",
 	"Log in with Bjoern's Gmail account <i>without</i> previously changing his password, applying SQL Injection, or hacking his Google account.": "Log in met Björn's Gmail account <i>zonder</i> eerder zijn wachtwoord te wijzigen, SQL Injectie toe te passen of zijn Google-account te hacken.",
 	"The security flaw behind this challenge is 100% OWASP Juice Shop's fault and 0% Google's.": "De beveiligingsfout achter deze uitdaging is 100% een fout van de OWASP Juice Shop en 0% van Google's.",
-	"Exploit OAuth 2.0 to log in with the Chief Information Security Officer's user account.": "Exploit OAuth 2.0 om in te loggen met de Chief Information Security Officer's gebruikersaccount.",
-	"Don't try to beat Google's OAuth 2.0 service. Rather investigate implementation flaws on OWASP Juice Shop's end.": "Probeer de OAuth 2.0-service van Google niet te verslaan. Onderzoek eerder de implementatiefouten van de OWASP Juice Shop.",
-	"Log in with Jim's user account.": "Log in met Jim's gebruikersaccount.",
+	"Exploit OAuth 2.0 to log in with the Chief Information Security Officer's user account.": "Gebruik OAuth 2.0 om in te loggen met het gebruikersaccount van de Chief Information Security Officer.",
+	"Don't try to beat Google's OAuth 2.0 service. Rather investigate implementation flaws on OWASP Juice Shop's end.": "Probeer niet de OAuth 2.0-service van Google te verslaan. Onderzoek in plaats daarvan de implementatiefouten van de OWASP Juice Shop.",
+	"Log in with Jim's user account.": "Log in met het gebruikersaccount van Jim.",
 	"Try cracking Jim's password hash if you harvested it already. Alternatively, if you know Jim's email address, try SQL Injection.": "Probeer Jim's wachtwoord hash te kraken als je deze al hebt verkegen. Als je ook het e-mailadres van Jim weet, probeer dan SQL Injection.",
-	"Log in with MC SafeSearch's original user credentials without applying SQL Injection or any other bypass.": "Log in met de originele gebruikersgegevens van MC SafeSearch zonder SQL Injectie of andere bypass toe te passen.",
-	"You should listen to MC's hit song \"Protect Ya Passwordz\".": "Je moet luisteren naar het hit nummer van MC: \"Protect Ya Passwordz\".",
-	"Log in with the support team's original user credentials without applying SQL Injection or any other bypass.": "Log in met de originele gebruikersgegevens van het supportteam zonder SQL Injectie of andere bypass toe te passen.",
-	"The underlying flaw of this challenge is a lot more human error than technical weakness.": "De onderliggende fout van deze uitdaging is veel meer menselijke fouten dan technische zwakheid.",
+	"Log in with MC SafeSearch's original user credentials without applying SQL Injection or any other bypass.": "Log in met de originele gebruikersgegevens van MC SafeSearch zonder SQL-injectie of andere bypass toe te passen.",
+	"You should listen to MC's hit song \"Protect Ya Passwordz\".": "Je zou moeten luisteren naar het hit nummer van MC: \"Protect Ya Passwordz\".",
+	"Log in with the support team's original user credentials without applying SQL Injection or any other bypass.": "Log in met de originele gebruikersgegevens van het supportteam zonder SQL-injectie of andere bypass toe te passen.",
+	"The underlying flaw of this challenge is a lot more human error than technical weakness.": "De onderliggende fout van deze uitdaging is meer een menselijke fout dan een technische zwakheid.",
 	"Put an additional product into another user's shopping basket.": "Plaats een extra product in het winkelmandje van een andere gebruiker.",
-	"Have an eye on the HTTP traffic while placing products in the shopping basket. Changing the quantity of products already in the basket doesn't count.": "Houd rekening met het HTTP-verkeer tijdens het toevoegen van producten in de winkelwagen. Het wijzigen van de hoeveelheid producten die al in de mand staan telt niet mee.",
-	"Access a misplaced <a href=\"https://github.com/Neo23x0/sigma\">SIEM signature</a> file.": "Krijg toegang tot een verkeerd geplaatst <a href=\"https://github.com/Neo23x0/sigma\">SIEM signature</a> bestand.",
-	"Like any review at least three times as the same user.": "Like een willekeurige recensie ten minste drie keer als dezelfde gebruiker.",
+	"Have an eye on the HTTP traffic while placing products in the shopping basket. Changing the quantity of products already in the basket doesn't count.": "Let op het HTTP-verkeer tijdens het toevoegen van producten aan het winkelmandje. Het wijzigen van het aantal van een product in het mandje telt niet mee.",
+	"Access a misplaced <a href=\"https://github.com/Neo23x0/sigma\">SIEM signature</a> file.": "Krijg toegang tot een verkeerd geplaatst <a href=\"https://github.com/Neo23x0/sigma\">SIEM signature</a>-bestand.",
+	"Like any review at least three times as the same user.": "Like een willekeurige productbeoordeling ten minste drie keer als dezelfde gebruiker.",
 	"Punctuality is the politeness of kings.": "Punctualiteit is de beleefdheid van koningen.",
-	"Apply some advanced cryptanalysis to find <i>the real</i> easter egg.": "Pas geavanceerde cryptanalyse toe om <i>de echte</i> easter egg te vinden.",
-	"You might have to peel through several layers of tough-as-nails encryption for this challenge.": "Mogelijk moet je door verschillende lagen tough-as-nails encryptie heen gaan voor deze challenge.",
+	"Apply some advanced cryptanalysis to find <i>the real</i> easter egg.": "Pas geavanceerde cryptanalyse toe om <i>het echte</i> paasei te vinden.",
+	"You might have to peel through several layers of tough-as-nails encryption for this challenge.": "Mogelijk moet je door verschillende lagen spijkerharde encryptie breken voor deze challenge.",
 	"Let the server sleep for some time. (It has done more than enough hard work for you)": "Laat de server even rusten. (Het heeft meer dan genoeg werk voor je gedaan)",
-	"This challenge is essentially a stripped-down Denial of Service (DoS) attack.": "Deze uitdaging is in wezen een gestripte variant van de Service (DoS)-aanval.",
-	"All your orders are belong to us! Even the ones which don't.": "Al je bestellingen horen bij ons! Zelfs zij die dat niet doen.",
-	"Take a close look on how the $where query operator works in MongoDB.": "Kijk eens hoe de $where query operator in MongoDB werkt.",
+	"This challenge is essentially a stripped-down Denial of Service (DoS) attack.": "Deze uitdaging is in wezen een uitgeklede Denial of Service (DoS)-aanval.",
+	"All your orders are belong to us! Even the ones which don't.": "Al jouw bestellingen zijn behoren van ons! Zelfs die die dat niet zijn.",
+	"Take a close look on how the $where query operator works in MongoDB.": "Kijk eens goed hoe de $where query-operator van MongoDB werkt.",
 	"Update multiple product reviews at the same time.": "Update meerdere productbeoordelingen tegelijkertijd.",
-	"Take a close look on how the equivalent of UPDATE-statements in MongoDB work.": "Kijk eens hoe het equivalent van UPDATE-statements in MongoDB wordt gebruikt.",
-	"Let us redirect you to one of our crypto currency addresses which are not promoted any longer.": "Laten ons je omleiden naar een van onze crypto valutaadressen die niet langer worden gebruikt.",
-	"We might have failed to take this out of our code properly.": "Misschien was het niet goed gelukt om dit uit onze code te halen.",
-	"Log in with the administrator's user credentials without previously changing them or applying SQL Injection.": "Log in met de gebruikersgegevens van de beheerder, zonder deze eerder te wijzigen of SQL Injectie toe te passen.",
-	"This one should be equally easy to a) brute force, b) crack the password hash or c) simply guess.": "Dit zou net zo gemakkelijk moeten zijn als a) brute force, b) het wachtwoord hash kraken of c) simpelweg raden.",
+	"Take a close look on how the equivalent of UPDATE-statements in MongoDB work.": "Kijk eens goed hoe het equivalent van UPDATE-statements in MongoDB wordt gebruikt.",
+	"Let us redirect you to one of our crypto currency addresses which are not promoted any longer.": "Laat ons je doorverwijzen naar een van onze cryptovaluta-adressen die niet langer worden gebruikt.",
+	"We might have failed to take this out of our code properly.": "Misschien is het niet goed gelukt om dit uit onze code te halen.",
+	"Log in with the administrator's user credentials without previously changing them or applying SQL Injection.": "Log in met de gebruikersgegevens van de beheerder, zonder deze eerder te wijzigen of SQL-injectie toe te passen.",
+	"This one should be equally easy to a) brute force, b) crack the password hash or c) simply guess.": "Dit zou even gemakkelijk moeten zijn a) te brute forcen, b) het wachtwoord-hash te kraken of c) simpelweg te raden.",
 	"Place an order that makes you rich.": "Plaats een bestelling die je rijk maakt.",
-	"You literally need to make the shop owe you any amount of money.": "Je moet ervoor zorgen dat de winkel een bedrag aan jou verschuldigd is.",
+	"You literally need to make the shop owe you any amount of money.": "Je moet ervoor zorgen dat de winkel jou een bedrag verschuldigd is.",
 	"<i class=\"far fa-gem\"></i><i class=\"far fa-gem\"></i><i class=\"far fa-gem\"></i><i class=\"far fa-gem\"></i><i class=\"far fa-gem\"></i><!--IvLuRfBJYlmStf9XfL6ckJFngyd9LfV1JaaN/KRTPQPidTuJ7FR+D/nkWJUF+0xUF07CeCeqYfxq+OJVVa0gNbqgYkUNvn//UbE7e95C+6e+7GtdpqJ8mqm4WcPvUGIUxmGLTTAC2+G9UuFCD1DUjg==--> <a href=\"https://blockchain.info/address/1AbKfgvw9psQ41NbLi8kufDQTezwG8DRZm\" target=\"_blank\"><i class=\"fab fa-btc fa-sm\"></i> Unlock Premium Challenge</a> to access exclusive content.": "<i class=\"far fa-gem\"></i><i class=\"far fa-gem\"></i><i class=\"far fa-gem\"></i><i class=\"far fa-gem\"></i><i class=\"far fa-gem\"></i><!--IvLuRfBJYlmStf9XfL6ckJFngyd9LfV1JaaN/KRTPQPidTuJ7FR+D/nkWJUF+0xUF07CeCeqYfxq+OJVVa0gNbqgYkUNvn//UbE7e95C+6e+7GtdpqJ8mqm4WcPvUGIUxmGLTTAC2+G9UuFCD1DUjg==--> <a href=\"https://blockchain.info/address/1AbKfgvw9psQ41NbLi8kufDQTezwG8DRZm\" target=\"_blank\"><i class=\"fab fa-btc fa-sm\"></i> Ontgrendel Premium Challenge</a> om toegang te krijgen tot exclusieve content.",
 	"You do not have to pay anything to unlock this challenge! Nonetheless, donations are very much appreciated.": "Je hoeft niets te betalen om deze uitdaging te ontgrendelen! Toch worden donaties zeer gewaardeerd.",
 	"Read our privacy policy.": "Lees onze privacyverklaring.",
 	"We won't even ask you to confirm that you did. Just read it. Please. Pretty please.": "We zullen je zelfs niet vragen om te bevestigen dat je het gedaan hebt. Lees het. Alstublieft.",
-	"Prove that you actually read our privacy policy.": "Bewijs dat je onze privacybeleid echt leest.",
-	"Only by visiting a special URL you can confirm that you read it carefully.": "Alleen door een speciale URL te bezoeken kunt u bevestigen dat u het zorgvuldig leest.",
-	"Change the <code>href</code> of the link within the <a href=\"/#/search?q=OWASP SSL Advanced Forensic Tool (O-Saft)\">OWASP SSL Advanced Forensic Tool (O-Saft)</a> product description into <i>https://owasp.slack.com</i>.": "Wijzig de <code>href</code> van de <a href=\"/#/search?q=OWASP SSL Advanced Forensic Tool (O-Saft)\">OWASP SSL Advanced Forensic Tool (O-Saft)</a> productbeschrijving naar <i>https://owasp.slack.com</i>.",
-	"Look for one of the following: a) broken admin functionality, b) holes in RESTful API or c) possibility for SQL Injection.": "Zoek naar een van de volgende: a) defecte admin functionaliteit, b) gaten in de RESTful API of c) mogelijkheid voor SQL Injectie.",
-	"Perform a <i>reflected</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.": "Voer een <i>DOM</i> XSS aanval uit met <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.",
-	"Look for an input field where its content appears in the response HTML when its form is submitted.": "Zoek naar een invoerveld waar de inhoud wordt weergegeven in de HTML wanneer het formulier wordt ingediend.",
+	"Prove that you actually read our privacy policy.": "Bewijs dat je onze privacyverklaring echt gelezen hebt.",
+	"Only by visiting a special URL you can confirm that you read it carefully.": "Alleen door een speciale URL te bezoeken kan je bevestigen dat je het zorgvuldig gelezen hebt.",
+	"Change the <code>href</code> of the link within the <a href=\"/#/search?q=OWASP SSL Advanced Forensic Tool (O-Saft)\">OWASP SSL Advanced Forensic Tool (O-Saft)</a> product description into <i>https://owasp.slack.com</i>.": "Wijzig de <code>href</code> van de productbeschrijving van <a href=\"/#/search?q=OWASP SSL Advanced Forensic Tool (O-Saft)\">OWASP SSL Advanced Forensic Tool (O-Saft)</a> naar <i>https://owasp.slack.com</i>.",
+	"Look for one of the following: a) broken admin functionality, b) holes in RESTful API or c) possibility for SQL Injection.": "Zoek naar: a) een defecte beheerfunctionaliteit, b) gaten in de RESTful API of c) een mogelijkheid voor SQL-injectie.",
+	"Perform a <i>reflected</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.": "Voer een <i>reflexieve</i> XSS-aanval uit met <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.",
+	"Look for an input field where its content appears in the response HTML when its form is submitted.": "Zoek naar een invoerveld waarvan de inhoud wordt weergegeven in het HTML-antwoord wanneer het formulier wordt ingediend.",
 	"Follow the DRY principle while registering a user.": "Volg het DRY principe bij het registreren van een gebruiker.",
 	"You can solve this by cleverly interacting with the UI or bypassing it altogether.": "Je kunt dit oplossen door slim gebruik te maken van de UI of door deze volledig te omzeilen.",
-	"Reset Bender's password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset het wachtwoord van Bender's OWASP account via het <a href=\"/#/forgot-password\">Wachtwoord</a> mechanisme <a href=\"/#/forgot-password\"> met <i>het oorspronkelijke antwoord</i> op zijn beveiligingsvraag.",
-	"Not as trivial as Jim's but still not too difficult with some \"Futurama\" background knowledge.": "Niet zo triviaal als Jim maar nog steeds niet zo moeilijk met wat \"Futurama\" achtergrondkennis.",
-	"Reset the password of Bjoern's internal account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset het wachtwoord van Björn's OWASP account via het <a href=\"/#/forgot-password\">Wachtwoord</a> mechanisme <a href=\"/#/forgot-password\"> met <i>het oorspronkelijke antwoord</i> op zijn beveiligingsvraag.",
-	"Nothing a little bit of Facebook stalking couldn't reveal. Might involve a historical twist.": "Niets wat een beetje Facebook-stalking kon onthullen. Het kan een historische omwenteling met zich meebrengen.",
-	"Reset Jim's password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset het wachtwoord van Jim's OWASP account via het <a href=\"/#/forgot-password\">Wachtwoord</a> mechanisme <a href=\"/#/forgot-password\"> met <i>het oorspronkelijke antwoord</i> op zijn beveiligingsvraag.",
-	"It's hard for celebrities to pick a security question from a hard-coded list where the answer is not publicly exposed.": "Het is moeilijk voor beroemdheden om een veiligheidsvraag te kiezen uit een vooraf ingevulde lijst waar het antwoord niet publiekelijk wordt onthuld.",
-	"Reset Morty's password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>his obfuscated answer</i> to his security question.": "Reset het wachtwoord van Morty's OWASP account via het <a href=\"/#/forgot-password\">Wachtwoord</a> mechanisme <a href=\"/#/forgot-password\"> met <i>het gehusselde antwoord</i> op zijn beveiligingsvraag.",
-	"Find a way to bypass the rate limiting and brute force the obfuscated answer to Morty's security question.": "Zoek een manier om de rate limit te omzeilen en brute force het gehusselde antwoord van Morty's beveiligingsvraag.",
-	"Deprive the shop of earnings by downloading the blueprint for one of its products.": "Verminder de winstwinkel door de blauwdruk voor een van zijn producten te downloaden.",
+	"Reset Bender's password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset het wachtwoord van het OWASP-account van Bender via het <a href=\"/#/forgot-password\">Wachtwoord Vergeten</a>-mechanisme <a href=\"/#/forgot-password\"> met <i>het oorspronkelijke antwoord</i> op zijn beveiligingsvraag.",
+	"Not as trivial as Jim's but still not too difficult with some \"Futurama\" background knowledge.": "Niet zo triviaal als bij Jim, maar nog steeds niet zo moeilijk met wat \"Futurama\" achtergrondkennis.",
+	"Reset the password of Bjoern's internal account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset het wachtwoord van het OWASP-account van Björn via het <a href=\"/#/forgot-password\">Wachtwoord Vergeten</a>-mechanisme <a href=\"/#/forgot-password\"> met <i>het oorspronkelijke antwoord</i> op zijn beveiligingsvraag.",
+	"Nothing a little bit of Facebook stalking couldn't reveal. Might involve a historical twist.": "Niets wat een beetje Facebook-stalking niet kan onthullen. Er kan een historische draai nodig zijn.",
+	"Reset Jim's password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset het wachtwoord van het OWASP-account van Jim via het <a href=\"/#/forgot-password\">Wachtwoord Vergeten</a>-mechanisme <a href=\"/#/forgot-password\"> met <i>het oorspronkelijke antwoord</i> op zijn beveiligingsvraag.",
+	"It's hard for celebrities to pick a security question from a hard-coded list where the answer is not publicly exposed.": "Het is moeilijk voor beroemdheden om een veiligheidsvraag te kiezen uit een vaste lijst, zonder dat het antwoord publiekelijk bekend is.",
+	"Reset Morty's password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>his obfuscated answer</i> to his security question.": "Reset het wachtwoord van het OWASP-account van Morty via het <a href=\"/#/forgot-password\">Wachtwoord Vergeten</a>-mechanisme <a href=\"/#/forgot-password\"> met <i>zijn versluierde antwoord</i> op zijn beveiligingsvraag.",
+	"Find a way to bypass the rate limiting and brute force the obfuscated answer to Morty's security question.": "Zoek een manier om de beperkingen op herhaald proberen te omzeilen en brute force het versluierde antwoord van Mortys beveiligingsvraag.",
+	"Deprive the shop of earnings by downloading the blueprint for one of its products.": "Beroof de winkel van zijn winst, door de blauwdruk van een van zijn producten te downloaden.",
 	"The product you might want to give a closer look is the OWASP Juice Shop Logo (3D-printed).": "Het product dat je misschien wat nauwkeuriger wilt bekijken is het OWASP Juice Shop Logo (3D-geprint).",
-	"Request a hidden resource on server through server.": "Vraag een verborgen bron aan op server via de server.",
+	"Request a hidden resource on server through server.": "Vraag de server om een verborgen bron via de server.",
 	"Reverse engineering something bad can make good things happen.": "Met Reverse Engineering kan je van iets slechts wat goeds maken.",
-	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infecteer de server met sappige malware door het misbruiken van willekeurige commando-executie.",
-	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is een duidelijke indicator dat dit niets met Angular te maken heeft. Zorg ervoor dat je alleen onze niet-kwaadaardige malware gebruikt.",
+	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infecteer de server met sappige malware door het misbruik te maken van de mogelijkheid een willekeurige commando uit te voeren.",
+	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is een duidelijke indicatie dat dit niets met Angular te maken heeft. Zorg ervoor dat je alleen onze niet-kwaadaardige malware gebruikt.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Gedraag je als een \"white-hat\" voordat je in actie komt.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Je zal ongetwijfeld ons veiligheidsbeleid willen lezen voordat je de applicatie zal gaan onderzoeken.",
-	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Voer een <i>persistente</i> XSS aanval met <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> uit zonder gebruik te maken van de backend applicatie.",
-	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "Het veld \"Commentaar\" in het scherm \"Klant Feedback\" is waar je je focus op wilt hebben.",
-	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
-	"No matter how good your eyes are, you will need tool assistance for this challenge.": "No matter how good your eyes are, you will need tool assistance for this challenge.",
-	"Perform a Remote Code Execution that occupies the server for a while without using infinite loops.": "Perform a Remote Code Execution that occupies the server for a while without using infinite loops.",
-	"Your attack payload must not trigger the protection against too many iterations.": "Your attack payload must not trigger the protection against too many iterations.",
-	"This vulnerability will not affect any customer of the shop. It is aimed exclusively at its developers.": "This vulnerability will not affect any customer of the shop. It is aimed exclusively at its developers.",
-	"Solve the 2FA challenge for user \"wurstbrot\". (Disabling, bypassing or overwriting his 2FA settings does not count as a solution)": "Solve the 2FA challenge for user \"wurstbrot\". (Disabling, bypassing or overwriting his 2FA settings does not count as a solution)",
-	"The 2FA implementation requires to store a secret for every user. You will need to find a way to access this secret in order to solve this challenge.": "The 2FA implementation requires to store a secret for every user. You will need to find a way to access this secret in order to solve this challenge.",
-	"Forge an essentially unsigned JWT token that impersonates the (non-existing) user <i>jwtn3d@juice-sh.op</i>.": "Forge an essentially unsigned JWT token that impersonates the (non-existing) user <i>jwtn3d@juice-sh.op</i>.",
-	"This challenge exploits a weird option that is supported when signing tokens with JWT.": "This challenge exploits a weird option that is supported when signing tokens with JWT.",
-	"Upload a file larger than 100 kB.": "Upload a file larger than 100 kB.",
-	"You can attach a small file to the \"Complaint\" form. Investigate how this upload actually works.": "You can attach a small file to the \"Complaint\" form. Investigate how this upload actually works.",
-	"Upload a file that has no .pdf or .zip extension.": "Upload a file that has no .pdf or .zip extension.",
-	"You can attach a PDF or ZIP file to the \"Complaint\" form. Investigate how this upload actually works.": "You can attach a PDF or ZIP file to the \"Complaint\" form. Investigate how this upload actually works.",
-	"Retrieve a list of all user credentials via SQL Injection.": "Retrieve a list of all user credentials via SQL Injection.",
-	"Gather information on where user data is stored and how it is addressed. Then craft a corresponding UNION SELECT attack.": "Gather information on where user data is stored and how it is addressed. Then craft a corresponding UNION SELECT attack.",
-	"Embed an XSS payload <code>&lt;/script&gt;&lt;script&gt;alert(`xss`)&lt;/script&gt;</code> into our promo video.": "Embed an XSS payload <code>&lt;/script&gt;&lt;script&gt;alert(`xss`)&lt;/script&gt;</code> into our promo video.",
-	"You have to reuse the vulnerability behind one other 6-star challenge to be able to solve this one.": "You have to reuse the vulnerability behind one other 6-star challenge to be able to solve this one.",
-	"View another user's shopping basket.": "View another user's shopping basket.",
-	"Have an eye on the HTTP traffic while shopping. Alternatively try to find a client-side association of users to their basket.": "Have an eye on the HTTP traffic while shopping. Alternatively try to find a client-side association of users to their basket.",
-	"<a href=\"/#/contact\">Inform the shop</a> about a vulnerable library it is using. (Mention the exact library name and version in your comment)": "<a href=\"/#/contact\">Inform the shop</a> about a vulnerable library it is using. (Mention the exact library name and version in your comment)",
+	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Voer een <i>persistente</i> XSS-aanval met <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> uit, zonder gebruik te maken van de backend-applicatie.",
+	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "Het veld \"Commentaar\" in het scherm \"Klantfeedback\" is waar je je focus op wilt hebben.",
+	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Ontdek</a> een berucht personage dat zich in het volle zicht schuilhoudt in de shop. (Noem de precieze naam van het personage)",
+	"No matter how good your eyes are, you will need tool assistance for this challenge.": "Hoe goed je ogen ook zijn, je hebt hulp van een tool nodig voor deze uitdaging.",
+	"Perform a Remote Code Execution that occupies the server for a while without using infinite loops.": "Voer een Remote Code Execution zonder oneindige loops uit, die de server een tijdje bezighoudt.",
+	"Your attack payload must not trigger the protection against too many iterations.": "De data die je als onderdeel van je aanval stuurt mag de bescherming tegen teveel pogingen niet activeren.",
+	"This vulnerability will not affect any customer of the shop. It is aimed exclusively at its developers.": "Deze kwetsbaarheid heeft geen effect op de winkel en is uitsluitend gericht op de ontwikkelaars van de winkel.",
+	"Solve the 2FA challenge for user \"wurstbrot\". (Disabling, bypassing or overwriting his 2FA settings does not count as a solution)": "Los de 2FA-uitdaging voor gebruiker \"wurstbrot\" op. (Uitschakelen, omzeilen of overschrijven van zijn 2FA-instellingen telt niet als een oplossing)",
+	"The 2FA implementation requires to store a secret for every user. You will need to find a way to access this secret in order to solve this challenge.": "De 2FA-implementatie vereist dat voor elke gebruiker een geheim wordt opgeslagen. Je moet een manier vinden om deze geheimen te lezen om deze uitdaging te voltooien.",
+	"Forge an essentially unsigned JWT token that impersonates the (non-existing) user <i>jwtn3d@juice-sh.op</i>.": "Vervals een feitelijk niet-ondertekend JWT-token dat van de (niet-bestaande) gebruiker <i>jwtn3d@juice-sh.op</i> lijkt te zijn.",
+	"This challenge exploits a weird option that is supported when signing tokens with JWT.": "Deze uitdaging maakt gebruik van een merkwaardige optie in het ondertekenen van tokens met JWT.",
+	"Upload a file larger than 100 kB.": "Upload een file van meer dan 100 kB.",
+	"You can attach a small file to the \"Complaint\" form. Investigate how this upload actually works.": "Je kunt een klein bestand meesturen met het \"Klachten\"-formulier. Onderzoek hoe dit feitelijk werkt.",
+	"Upload a file that has no .pdf or .zip extension.": "Upload een bestand zonder extensie .pdf of .zip.",
+	"You can attach a PDF or ZIP file to the \"Complaint\" form. Investigate how this upload actually works.": "Je kunt een PDF- of ZIP-bestand meesturen met het \"Klachten\"-formulier. Onderzoek hoe dit feitelijk werkt.",
+	"Retrieve a list of all user credentials via SQL Injection.": "Haal de lijst met alle gebruikerscredentials op met behulp van SQL-injection.",
+	"Gather information on where user data is stored and how it is addressed. Then craft a corresponding UNION SELECT attack.": "Verzamel informatie over de locatie en ontsluiting van gebruikersgegevens. Zet daarna een bijbehorende UNION SELECT-aanval op.",
+	"Embed an XSS payload <code>&lt;/script&gt;&lt;script&gt;alert(`xss`)&lt;/script&gt;</code> into our promo video.": "Plaats een XSS-payload <code>&lt;/script&gt;&lt;script&gt;alert(`xss`)&lt;/script&gt;</code> in onze promo-video.",
+	"You have to reuse the vulnerability behind one other 6-star challenge to be able to solve this one.": "Je moet opnieuw gebruik maken van een kwetsbaarheid uit een van de andere 6-sterren uitdagingen voor de oplossing van deze uitdaging.",
+	"View another user's shopping basket.": "Bekijk het winkelmandje van een andere gebruiker.",
+	"Have an eye on the HTTP traffic while shopping. Alternatively try to find a client-side association of users to their basket.": "Kijk naar het HTTP-verkeer terwijl je winkelt. Je kunt ook kijken naar de relatie van een klant met diens winkelmandje.",
+	"<a href=\"/#/contact\">Inform the shop</a> about a vulnerable library it is using. (Mention the exact library name and version in your comment)": "<a href=\"/#/contact\">Informeer de winkel</a> over een kwetsbaarheid in een bibliotheek die ze gebruiken. (Noem de precieze bibliotheek en versie in je melding)",
 	"Report one of two possible answers via the \"Customer Feedback\" form. Do not forget to submit the library's version as well.": "Report one of two possible answers via the \"Customer Feedback\" form. Do not forget to submit the library's version as well.",
-	"<a href=\"/#/contact\">Inform the shop</a> about an algorithm or library it should definitely not use the way it does.": "<a href=\"/#/contact\">Inform the shop</a> about an algorithm or library it should definitely not use the way it does.",
-	"Report one of four possible answers via the \"Customer Feedback\" form.": "Report one of four possible answers via the \"Customer Feedback\" form.",
-	"Enforce a redirect to a page you are not supposed to redirect to.": "Enforce a redirect to a page you are not supposed to redirect to.",
-	"You have to find a way to beat the allowlist of allowed redirect URLs.": "You have to find a way to beat the allowlist of allowed redirect URLs.",
-	"Retrieve the content of <code>C:\\Windows\\system.ini</code> or <code>/etc/passwd</code> from the server.": "Retrieve the content of <code>C:\\Windows\\system.ini</code> or <code>/etc/passwd</code> from the server.",
-	"The leverage point for this challenge is the deprecated B2B interface.": "The leverage point for this challenge is the deprecated B2B interface.",
-	"Give the server something to chew on for quite a while.": "Give the server something to chew on for quite a while.",
-	"It is not as easy as sending a large amount of data directly to the deprecated B2B interface.": "It is not as easy as sending a large amount of data directly to the deprecated B2B interface.",
-	"Give a devastating zero-star feedback to the store.": "Give a devastating zero-star feedback to the store.",
-	"Before you invest time bypassing the API, you might want to play around with the UI a bit.": "Before you invest time bypassing the API, you might want to play around with the UI a bit.",
-	"Your eldest siblings middle name?": "Your eldest siblings middle name?",
-	"Mother's maiden name?": "Mother's maiden name?",
-	"Mother's birth date? (MM/DD/YY)": "Mother's birth date? (MM/DD/YY)",
-	"Father's birth date? (MM/DD/YY)": "Father's birth date? (MM/DD/YY)",
-	"Maternal grandmother's first name?": "Maternal grandmother's first name?",
-	"Paternal grandmother's first name?": "Paternal grandmother's first name?",
-	"Name of your favorite pet?": "Name of your favorite pet?",
-	"Last name of dentist when you were a teenager? (Do not include 'Dr.')": "Last name of dentist when you were a teenager? (Do not include 'Dr.')",
-	"Your ZIP/postal code when you were a teenager?": "Your ZIP/postal code when you were a teenager?",
-	"Company you first work for as an adult?": "Company you first work for as an adult?",
-	"Your favorite book?": "Your favorite book?",
-	"Your favorite movie?": "Your favorite movie?",
-	"Number of one of your customer or ID cards?": "Number of one of your customer or ID cards?",
-	"Apple Juice (1000ml)": "Apple Juice (1000ml)",
-	"The all-time classic.": "The all-time classic.",
-	"Orange Juice (1000ml)": "Orange Juice (1000ml)",
-	"Made from oranges hand-picked by Uncle Dittmeyer.": "Made from oranges hand-picked by Uncle Dittmeyer.",
-	"Eggfruit Juice (500ml)": "Eggfruit Juice (500ml)",
-	"Now with even more exotic flavour.": "Nu met nog meer exotische smaak.",
-	"Raspberry Juice (1000ml)": "Raspberry sap (1000ml)",
-	"Made from blended Raspberry Pi, water and sugar.": "Gemaakt van gemengd Raspberry Pi, water en suiker.",
+	"<a href=\"/#/contact\">Inform the shop</a> about an algorithm or library it should definitely not use the way it does.": "<a href=\"/#/contact\">Informeer de winkel</a> over een algoritme of bibliotheek welke ze zeker niet moeten gebruiken zoals ze doen.",
+	"Report one of four possible answers via the \"Customer Feedback\" form.": "Rapporteer een van de vier mogelijke antwoorden met het \"Klantfeedback\"-formulier.",
+	"Enforce a redirect to a page you are not supposed to redirect to.": "Dwing een doorverwijzing af naar een pagina waar je niet naartoe verwezen zou moeten worden.",
+	"You have to find a way to beat the allowlist of allowed redirect URLs.": "Je moet een manier vinden om de allowlist met toegestane verwijs-URLs te slim af te zijn.",
+	"Retrieve the content of <code>C:\\Windows\\system.ini</code> or <code>/etc/passwd</code> from the server.": "Haal van de server de inhoud op van <code>C:\\Windows\\system.ini</code> of <code>/etc/passwd</code>.",
+	"The leverage point for this challenge is the deprecated B2B interface.": "In deze uitdaging is een verouderde B2B-interface het aangrijpingspunt.",
+	"Give the server something to chew on for quite a while.": "Geef de server iets te doen waarmee het een flinke tijd bezig is.",
+	"It is not as easy as sending a large amount of data directly to the deprecated B2B interface.": "Het is niet zo eenvoudig als het rechtstreeks naar het versturen verouderde B2B-interface van een grote hoeveelheid data.",
+	"Give a devastating zero-star feedback to the store.": "Geef een vernietigende nul-sterren beoordeling aan de winkel.",
+	"Before you invest time bypassing the API, you might want to play around with the UI a bit.": "Voordat je probeert de API te omzeilen doe je er goed aan eens goed naar de UI te kijken.",
+	"Your eldest siblings middle name?": "Tweede naam van je oudste broer of zus?",
+	"Mother's maiden name?": "Meisjesnaam van je moeder?",
+	"Mother's birth date? (MM/DD/YY)": "Geboortedatum van je moeder? (MM/DD/YY)",
+	"Father's birth date? (MM/DD/YY)": "Geboortedatum van je vader? (MM/DD/YY)",
+	"Maternal grandmother's first name?": "Voornaam van je oma van moederskant?",
+	"Paternal grandmother's first name?": "Voornaam van je opa van vaderskant?",
+	"Name of your favorite pet?": "Naam van je favoriete huisdier?",
+	"Last name of dentist when you were a teenager? (Do not include 'Dr.')": "Achternaam van de tandarts uit je tienerjaren? (zonder titels)",
+	"Your ZIP/postal code when you were a teenager?": "Postcode uit je tienerjaren?",
+	"Company you first work for as an adult?": "Eerste werkgever als volwassene?",
+	"Your favorite book?": "Je favoriete boek?",
+	"Your favorite movie?": "Je favoriete film?",
+	"Number of one of your customer or ID cards?": "Kaartnummer van een van je klantenkaarten of ID-bewijzen?",
+	"Apple Juice (1000ml)": "Appelsap (1000ml)",
+	"The all-time classic.": "The klassieker.",
+	"Orange Juice (1000ml)": "Jus d'Orange (1000ml)",
+	"Made from oranges hand-picked by Uncle Dittmeyer.": "Van handgeplukte sinaasappels van Oom Dittmeyer.",
+	"Eggfruit Juice (500ml)": "Canistelsap (500ml)",
+	"Now with even more exotic flavour.": "Nu met nog exotischer smaak.",
+	"Raspberry Juice (1000ml)": "Frambozensap (1000ml)",
+	"Made from blended Raspberry Pi, water and sugar.": "Van gepureerde Raspberry Pi, water en suiker.",
 	"Lemon Juice (500ml)": "Citroensap (500ml)",
-	"Sour but full of vitamins.": "Zuur maar vol vitaminen.",
+	"Sour but full of vitamins.": "Zuur, maar vol vitaminen.",
 	"Banana Juice (1000ml)": "Bananensap (1000ml)",
-	"Monkeys love it the most.": "Apen houden er het meest van.",
+	"Monkeys love it the most.": "Favoriet bij apen.",
 	"OWASP Juice Shop T-Shirt": "OWASP Juice Shop T-shirt",
 	"Real fans wear it 24/7!": "Echte fans dragen het 24/7!",
-	"OWASP Juice Shop CTF Girlie-Shirt": "OWASP Juice Shop CTF Girlie-shirt",
+	"OWASP Juice Shop CTF Girlie-Shirt": "OWASP Juice Shop CTF meidenshirt",
 	"For serious Capture-the-Flag heroines only!": "Alleen voor serieuze Capture-the-Flag heldinnen!",
-	"OWASP SSL Advanced Forensic Tool (O-Saft)": "OWASP SSL Geavanceerd Forensic Tool (O-Saft)",
-	"O-Saft is an easy to use tool to show information about SSL certificate and tests the SSL connection according given list of ciphers and various SSL configurations. <a href=\"https://www.owasp.org/index.php/O-Saft\" target=\"_blank\">More...</a>": "O-Saft is een makkelijk te gebruiken tool voor het tonen van informatie over een SSL-certificaat en test de SSL-verbinding volgens bepaalde coderingen en diverse SSL-configuraties. <a href=\"https://www.owasp.org/index.php/O-Saft\" target=\"_blank\">Meer...</a>",
+	"OWASP SSL Advanced Forensic Tool (O-Saft)": "OWASP SSL Geavanceerd Forensisch Tool (O-Saft)",
+	"O-Saft is an easy to use tool to show information about SSL certificate and tests the SSL connection according given list of ciphers and various SSL configurations. <a href=\"https://www.owasp.org/index.php/O-Saft\" target=\"_blank\">More...</a>": "O-Saft is een makkelijk te gebruiken tool voor het tonen van informatie over een SSL-certificaat en test de SSL-verbinding volgens ingestelde encryptiemethoden en verschillende SSL-configuraties. <a href=\"https://www.owasp.org/index.php/O-Saft\" target=\"_blank\">Meer...</a>",
 	"Christmas Super-Surprise-Box (2014 Edition)": "Kerstmis Super-Surprise-Box (2014 Editie)",
-	"Contains a random selection of 10 bottles (each 500ml) of our tastiest juices and an extra fan shirt for an unbeatable price! (Seasonal special offer! Limited availability!)": "Bevat een willekeurige selectie van 10 flessen (elk 500ml) van onze meest smaakvolle sappen en een extra fan shirt voor een onverslaanbare prijs! (Seizoensgebonden speciale aanbieding! Beperkt beschikbaar!)",
-	"Rippertuer Special Juice": "Rippertuer speciale sap",
-	"Contains a magical collection of the rarest fruits gathered from all around the world, like Cherymoya Annona cherimola, Jabuticaba Myrciaria cauliflora, Bael Aegle marmelos... and others, at an unbelievable price! <br/><span style=\"color:red;\">This item has been made unavailable because of lack of safety standards.</span> (This product is unsafe! We plan to remove it from the stock!)": "Bevat een magische verzameling van de zeldzame vruchten die over de hele wereld zijn verzameld, zoals Cherymoya Annona cherimola, Jabuticaba Myrciaria cauliflora, Bael Aegle marmelos... en anderen, tegen een ongelooflijke prijs! <br/><span style=\"color:red;\">Dit artikel is niet beschikbaar gemaakt omdat er te weinig veiligheidsnormen zijn.</span> (Dit product is niet veilig! We zijn van plan het uit de voorraad te verwijderen!)",
-	"OWASP Juice Shop Sticker (2015/2016 design)": "OWASP Juice Shop Sticker (2015/2016 design)",
-	"Die-cut sticker with the official 2015/2016 logo. By now this is a rare collectors item. <em>Out of stock!</em>": "Die-cut sticker met het officiële 2015/2016 logo. Hierdoor is dit een zeldzame verzamelaars item. <em>Niet op voorraad!</em>",
+	"Contains a random selection of 10 bottles (each 500ml) of our tastiest juices and an extra fan shirt for an unbeatable price! (Seasonal special offer! Limited availability!)": "Bevat een willekeurige selectie van 10 flessen (elk 500ml) van onze meest smaakvolle sappen en een extra fan-shirt voor een onverslaanbare prijs! (Seizoensgebonden speciale aanbieding! Beperkt beschikbaar!)",
+	"Rippertuer Special Juice": "Rippertuer speciaal sap",
+	"Contains a magical collection of the rarest fruits gathered from all around the world, like Cherymoya Annona cherimola, Jabuticaba Myrciaria cauliflora, Bael Aegle marmelos... and others, at an unbelievable price! <br/><span style=\"color:red;\">This item has been made unavailable because of lack of safety standards.</span> (This product is unsafe! We plan to remove it from the stock!)": "Bevat een magische verzameling van de zeldzame vruchten van over de hele wereld, zoals Cherymoya Annona cherimola, Jabuticaba Myrciaria cauliflora, Bael Aegle marmelos... en anderen, tegen een ongelooflijke prijs! <br/><span style=\"color:red;\">Dit artikel is niet beschikbaar gemaakt omdat er te weinig veiligheidsnormen zijn.</span> (Dit product is niet veilig! We zijn van plan het uit de voorraad te verwijderen!)",
+	"OWASP Juice Shop Sticker (2015/2016 design)": "OWASP Juice Shop Sticker (2015/2016 ontwerp)",
+	"Die-cut sticker with the official 2015/2016 logo. By now this is a rare collectors item. <em>Out of stock!</em>": "Gestanste sticker met het officiële logo uit 2015/2016. Inmiddels een zeldzaam verzamelitem. <em>Niet op voorraad!</em>",
 	"OWASP Juice Shop Iron-Ons (16pcs)": "OWASP Juice Shop Iron-Ons (16 stuks)",
-	"Upgrade your clothes with washer safe <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">iron-ons</a> of the OWASP Juice Shop or CTF Extension logo!": "Upgrade je kleren met wasmachine veilige <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">iron-ons</a> van de OWASP Juice Shop of CTF Extensie logo!",
+	"Upgrade your clothes with washer safe <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">iron-ons</a> of the OWASP Juice Shop or CTF Extension logo!": "Upgrade je kleren met wasmachine bestendige <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">strijkplaatjes</a> van het logo van de OWASP Juice Shop of de CTF Extensie!",
 	"OWASP Juice Shop Magnets (16pcs)": "OWASP Juice Shop magneten (16 stuks)",
-	"Your fridge will be even cooler with these OWASP Juice Shop or CTF Extension logo <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">magnets</a>!": "Je koelkast zal nog cooler zijn met deze OWASP Juice Shop of CTF Extension logo <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">magneten</a>!",
-	"OWASP Juice Shop Sticker Page": "OWASP Juice Shop Sticker Pagina",
-	"Massive decoration opportunities with these OWASP Juice Shop or CTF Extension <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">sticker pages</a>! Each page has 16 stickers on it.": "Enorme decoratie mogelijkheden met deze OWASP Juice Shop of CTF Extensie <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">sticker vel</a>! Elk vel heeft 16 stickers erop.",
-	"OWASP Juice Shop Sticker Single": "Enkele OWASP Juice Shop Sticker",
-	"Super high-quality vinyl <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">sticker single</a> with the OWASP Juice Shop or CTF Extension logo! The ultimate laptop decal!": "Super hoge kwaliteit vinyl <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">enkele sticker</a> met de OWASP Juice Shop of CTF Extensie logo! De ultieme laptop decal!",
+	"Your fridge will be even cooler with these OWASP Juice Shop or CTF Extension logo <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">magnets</a>!": "Je koelkast is nog cooler met deze <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">magneten</a> met logo van de OWASP Juice Shop of de CTF Extension!",
+	"OWASP Juice Shop Sticker Page": "OWASP Juice Shop Sticker-pagina",
+	"Massive decoration opportunities with these OWASP Juice Shop or CTF Extension <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">sticker pages</a>! Each page has 16 stickers on it.": "Enorme decoratie mogelijkheden met deze OWASP Juice Shop of CTF Extensie <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">sticker vellen</a>! Elk vel heeft 16 stickers.",
+	"OWASP Juice Shop Sticker Single": "Enkele OWASP Juice Shop-sticker",
+	"Super high-quality vinyl <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">sticker single</a> with the OWASP Juice Shop or CTF Extension logo! The ultimate laptop decal!": "Superhoge kwaliteit vinyl <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">enkele sticker</a> met het logo van de OWASP Juice Shop of de CTF Extensie! De ultieme laptop decal!",
 	"OWASP Juice Shop Temporary Tattoos (16pcs)": "OWASP Juice Shop Tijdelijke Tattoos (16 stuks)",
-	"Get one of these <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">temporary tattoos</a> to proudly wear the OWASP Juice Shop or CTF Extension logo on your skin! If you tweet a photo of yourself with the tattoo, you get a couple of our stickers for free! Please mention <a href=\"https://twitter.com/owasp_juiceshop\" target=\"_blank\"><code>@owasp_juiceshop</code></a> in your tweet!": "Krijg een van deze <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">tijdelijke tattoos</a> om met trots het OWASP Juice Shop of CTF Extensie logo op je huid te dragen! Als je een foto van jezelf tweet met de tatoeage, krijg je gratis een paar van onze stickers! Gebruik <a href=\"https://twitter.com/owasp_juiceshop\" target=\"_blank\"><code>@owasp_juiceshop</code></a> in je tweet!",
-	"OWASP Juice Shop Mug": "OWASP Juice Shop Mok",
+	"Get one of these <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">temporary tattoos</a> to proudly wear the OWASP Juice Shop or CTF Extension logo on your skin! If you tweet a photo of yourself with the tattoo, you get a couple of our stickers for free! Please mention <a href=\"https://twitter.com/owasp_juiceshop\" target=\"_blank\"><code>@owasp_juiceshop</code></a> in your tweet!": "Neem een van deze <a href=\"https://www.stickeryou.com/products/owasp-juice-shop/794\" target=\"_blank\">tijdelijke tattoos</a> om met trots het logo van de OWASP Juice Shop of de CTF Extensie op je huid te dragen! Als je een foto van jezelf tweet met de tatoeage, krijg je gratis een paar van onze stickers! Gebruik <a href=\"https://twitter.com/owasp_juiceshop\" target=\"_blank\"><code>@owasp_juiceshop</code></a> in je tweet!",
+	"OWASP Juice Shop Mug": "OWASP Juice Shop-mok",
 	"Black mug with regular logo on one side and CTF logo on the other! Your colleagues will envy you!": "Zwarte mok met het normale logo aan de ene kant en het CTF logo aan de andere kant! Je collega's zullen jaloers zijn!",
-	"OWASP Juice Shop Hoodie": "OWASP Juice Shop Hoodie",
-	"Mr. Robot-style apparel. But in black. And with logo.": "Mr. Robot-stijl. Maar in het zwart. En met logo.",
-	"OWASP Juice Shop-CTF Velcro Patch": "OWASP Juice Shop-CTF Embleem",
-	"4x3.5\" embroidered patch with velcro backside. The ultimate decal for every tactical bag or backpack!": "4x3.5\" embleem met klittenbandachterzijde. De ultieme decal voor elke tactische zak of rugzak!",
-	"Woodruff Syrup \"Forest Master X-Treme\"": "Woodruff siroop \"Forest Master X-Treme\"",
-	"Harvested and manufactured in the Black Forest, Germany. Can cause hyperactive behavior in children. Can cause permanent green tongue when consumed undiluted.": "Geoogst en geproduceerd in het Zwarte Woud, Duitsland. Kan hyperactief gedrag veroorzaken bij kinderen. Kan permanente groene tong veroorzaken wanneer het verbruikt niet wordt gematigd.",
+	"OWASP Juice Shop Hoodie": "OWASP Juice Shop-hoodie",
+	"Mr. Robot-style apparel. But in black. And with logo.": "Mr. Robot-stijl kleding. Maar in het zwart. En met logo.",
+	"OWASP Juice Shop-CTF Velcro Patch": "OWASP Juice Shop-CTF Embleem met klittenband",
+	"4x3.5\" embroidered patch with velcro backside. The ultimate decal for every tactical bag or backpack!": "4x3.5\" geborduurd embleem met klittenbandachterzijde. De ultieme decal voor elke tactische tas of rugzak!",
+	"Woodruff Syrup \"Forest Master X-Treme\"": "Woodruff-siroop \"Forest Master X-Treme\"",
+	"Harvested and manufactured in the Black Forest, Germany. Can cause hyperactive behavior in children. Can cause permanent green tongue when consumed undiluted.": "Geoogst en geproduceerd in het Zwarte Woud, Duitsland. Kan hyperactief gedrag veroorzaken bij kinderen. Kan permanente groene tong veroorzaken wanneer het onverdund gebruikt wordt.",
 	"Green Smoothie": "Groene Smoothie",
-	"Looks poisonous but is actually very good for your health! Made from green cabbage, spinach, kiwi and grass.": "Ziet er giftig uit, maar is eigenlijk heel goed voor je gezondheid! Gemaakt van groene kool, spinazie, kiwi en gras.",
-	"Quince Juice (1000ml)": "Quince sap (1000ml)",
-	"Juice of the <em>Cydonia oblonga</em> fruit. Not exactly sweet but rich in Vitamin C.": "SAP van het <em>Cydonia oblonga</em> fruit. Niet precies zoet, maar rijk aan Vitamine C.",
-	"Apple Pomace": "Appel Overblijfsel",
-	"Finest pressings of apples. Allergy disclaimer: Might contain traces of worms. Can be <a href=\"/#recycle\">sent back to us</a> for recycling.": "Best geperste appels. Allergische disclaimer: Kunnen sporen van wormen bevatten. Kan <a href=\"/#recycle\">worden teruggestuurd naar ons</a> voor recycling.",
-	"Fruit Press": "Fruit Perser",
-	"Fruits go in. Juice comes out. Pomace you can send back to us for recycling purposes.": "Fruit gaat erin. Sap komt eruit. Overblijfsel kunt u terugsturen voor recyclingdoeleinden.",
-	"OWASP Juice Shop Logo (3D-printed)": "OWASP Juice Shop Logo (3D-geprint)",
-	"This rare item was designed and handcrafted in Sweden. This is why it is so incredibly expensive despite its complete lack of purpose.": "Dit zeldzame product is in Zweden ontworpen en zorgvuldig gemaakt en daarom is het zo ontzettend duur ondanks het totale gebrek aan bruikbaarheid.",
+	"Looks poisonous but is actually very good for your health! Made from green cabbage, spinach, kiwi and grass.": "Ziet er giftig uit, maar is juist heel goed voor je gezondheid! Gemaakt van groene kool, spinazie, kiwi en gras.",
+	"Quince Juice (1000ml)": "Kweeperensap (1000ml)",
+	"Juice of the <em>Cydonia oblonga</em> fruit. Not exactly sweet but rich in Vitamin C.": "Sap van de kweepeer, <em>Cydonia oblonga</em>. Niet echt zoet, maar rijk aan Vitamine C.",
+	"Apple Pomace": "Appelmoes",
+	"Finest pressings of apples. Allergy disclaimer: Might contain traces of worms. Can be <a href=\"/#recycle\">sent back to us</a> for recycling.": "Geperst uit de beste appels. Allergiewaarschuwing: Kan sporen van wormen bevatten. Kan naar ons <a href=\"/#recycle\">teruggestuurd worden</a> voor recycling.",
+	"Fruit Press": "Fruitpers",
+	"Fruits go in. Juice comes out. Pomace you can send back to us for recycling purposes.": "Fruit gaat erin. Sap komt eruit. Fruitpulp kunt u terugsturen voor recyclingdoeleinden.",
+	"OWASP Juice Shop Logo (3D-printed)": "OWASP Juice Shop-logo (3D-geprint)",
+	"This rare item was designed and handcrafted in Sweden. This is why it is so incredibly expensive despite its complete lack of purpose.": "Dit zeldzame product is ontworpen en handgemaakt in Zweden. Daarom is het zo ontzettend duur, ook al is het totaal nutteloos.",
 	"Juice Shop Artwork": "Juice Shop Artwork",
 	"Unique masterpiece painted with different kinds of juice on 90g/m² lined paper.": "Uniek meesterstuk geschilderd met verschillende soorten sap op 90g/m2 gelinieerd papier.",
-	"Global OWASP WASPY Award 2017 Nomination": "Globale OWASP WASPY Award 2017 nominatie",
-	"Your chance to nominate up to three quiet pillars of the OWASP community ends 2017-06-30! <a href=\"https://www.owasp.org/index.php/WASPY_Awards_2017\">Nominate now!</a>": "Jou kans om tot drie stille pijlers van de OWASP gemeenschap aan te dragen eindigt 2017-06-30! <a href=\"https://www.owasp.org/index.php/WASPY_Awards_2017\">Nomineer nu!</a>",
-	"Strawberry Juice (500ml)": "Aardbeien sap (500ml)",
+	"Global OWASP WASPY Award 2017 Nomination": "Nominatie voor de Wereldwijde OWASP WASPY Award 2017",
+	"Your chance to nominate up to three quiet pillars of the OWASP community ends 2017-06-30! <a href=\"https://www.owasp.org/index.php/WASPY_Awards_2017\">Nominate now!</a>": "Jouw kans om tot drie stille pijlers van de OWASP-gemeenschap aan te dragen eindigt op 2017-06-30! <a href=\"https://www.owasp.org/index.php/WASPY_Awards_2017\">Nomineer nu!</a>",
+	"Strawberry Juice (500ml)": "Aardbeiensap (500ml)",
 	"Sweet & tasty!": "Zoet & smakelijk!",
-	"Carrot Juice (1000ml)": "Wortel sap (1000ml)",
+	"Carrot Juice (1000ml)": "Wortelsap (1000ml)",
 	"As the old German saying goes: \"Carrots are good for the eyes. Or has anyone ever seen a rabbit with glasses?\"": "Zoals het oude Duitse gezegde luidt: \"Wortels zijn goed voor de ogen. Of heeft iemand ooit een konijn met een bril gezien?\"",
-	"OWASP Juice Shop Sweden Tour 2017 Sticker Sheet (Special Edition)": "OWASP Juice Shop Zweden Tour 2017 Sticker Sheet (Special Edition)",
+	"OWASP Juice Shop Sweden Tour 2017 Sticker Sheet (Special Edition)": "OWASP Juice Shop Zweden Tour 2017 Stickervel (Speciale Editie)",
 	"10 sheets of Sweden-themed stickers with 15 stickers on each.": "10 vellen Zweedse themastickers met 15 stickers op elk vel.",
 	"Pwning OWASP Juice Shop": "Pwning OWASP Juice Shop",
-	"Melon Bike (Comeback-Product 2018 Edition)": "Meloen fiets (Comeback-Product 2018 Editie)",
-	"The wheels of this bicycle are made from real water melons. You might not want to ride it up/down the curb too hard.": "De wielen van deze fiets zijn gemaakt van echte watermeloenen. Je moet niet te hard van de stoep af gaan ermee.",
+	"Melon Bike (Comeback-Product 2018 Edition)": "Meloenfiets (Comeback-Product 2018 Editie)",
+	"The wheels of this bicycle are made from real water melons. You might not want to ride it up/down the curb too hard.": "De wielen van deze fiets zijn gemaakt van echte watermeloenen. Rij er niet te hard mee de stoep op en af.",
 	"OWASP Juice Shop Coaster (10pcs)": "OWASP Juice Shop Bierviltjes (10 stuks)",
-	"Our 95mm circle coasters are printed in full color and made from thick, premium coaster board.": "Onze 95mm bierviltjes worden volledig bedrukt en gemaakt van dik, premium bierviltkarton.",
-	"Retrieve the photo of Bjoern's cat in \"melee combat-mode\".": "Haal de foto van Björn's kat op in \"melee combat-mode\".",
-	"Check the Photo Wall for an image that could not be loaded correctly.": "Controleer de Photo Wall op een afbeelding die niet goed geladen kon worden.",
-	"Stick <a href=\"http://placekitten.com/\" target=\"_blank\">cute cross-domain kittens</a> all over our delivery boxes.": "Plak <a href=\"http://placekitten.com/\" target=\"_blank\">schattige cross-domain kittens</a> over al onze bezorg boxen.",
-	"This challenge would formally have to be in several categories as the developers made multiple gaffes for this to be possible.": "Deze uitdaging zou formeel in meerdere categorieën moeten staan, omdat de ontwikkelaars meerdere gaffes hebben gemaakt om dit mogelijk te maken.",
-	"ea.": "ea.",
+	"Our 95mm circle coasters are printed in full color and made from thick, premium coaster board.": "Onze 95mm bierviltjes worden full color bedrukt en zijn gemaakt van dik, premium bierviltkarton.",
+	"Retrieve the photo of Bjoern's cat in \"melee combat-mode\".": "Haal de foto van Björn's kat in \"melee combat-mode\" op.",
+	"Check the Photo Wall for an image that could not be loaded correctly.": "Zoek in de Photo Wall naar een afbeelding die niet goed geladen kon worden.",
+	"Stick <a href=\"http://placekitten.com/\" target=\"_blank\">cute cross-domain kittens</a> all over our delivery boxes.": "Plak onze bezorg boxen vol met <a href=\"http://placekitten.com/\" target=\"_blank\">schattige cross-domain kittens</a>.",
+	"This challenge would formally have to be in several categories as the developers made multiple gaffes for this to be possible.": "Deze uitdaging zou formeel in meerdere categorieën moeten staan, omdat dit mogelijk is geworden door meerdere blunders van de ontwikkelaars.",
+	"ea.": "per stuk",
 	"Delivery Price": "Leveringsprijs",
 	"Total Price": "Totaalprijs",
-	"Bonus Points Earned": "Bonus punten verdiend",
-	"The bonus points from this order will be added 1:1 to your wallet ¤-fund for future purchases!": "De bonuspunten van deze bestelling worden toegevoegd 1:1 aan uw portemonnee ¤-fund voor toekomstige aankopen!",
+	"Bonus Points Earned": "Bonuspunten verdiend",
+	"The bonus points from this order will be added 1:1 to your wallet ¤-fund for future purchases!": "De bonuspunten van deze bestelling worden 1:1 toegevoegd aan uw ¤-fund portemonnee voor toekomstige aankopen!",
 	"Thank you for your order!": "Bedankt voor uw bestelling!",
 	"Order Confirmation": "Orderbevestiging",
 	"Customer": "Klant",
 	"Order": "Order",
 	"Date": "Datum",
 	"OWASP Juice Shop Holographic Sticker": "OWASP Juice Shop Holografische Sticker",
-	"Die-cut holographic sticker. Stand out from those 08/15-sticker-covered laptops with this shiny beacon of 80's coolness!": "Die-cut holografische sticker. Kom boven die 08/15-sticker-bedekte laptops uit met deze shiny holografische 80's sticker!",
-	"OWASP Snakes and Ladders - Mobile Apps": "OWASP Snakes en Ladders - Mobiele Apps",
-	"This amazing mobile app security awareness board game is <a href=\"https://steamcommunity.com/sharedfiles/filedetails/?id=1970691216\">available for Tabletop Simulator on Steam Workshop</a> now!": "Dit geweldige mobiele app security awareness bordspel is <a href=\"https://steamcommunity.com/sharedfiles/filedetails/?id=1970691216\">beschikbaar voor Tabletop Simulator op Steam Workshop</a> nu!",
-	"OWASP Snakes and Ladders - Web Applications": "OWASP Snakes en Ladders - Web Applicaties",
-	"This amazing web application security awareness board game is <a href=\"https://steamcommunity.com/sharedfiles/filedetails/?id=1969196030\">available for Tabletop Simulator on Steam Workshop</a> now!": "Dit geweldige web applicatie security bordspel is <a href=\"https://steamcommunity.com/sharedfiles/filedetails/?id=1969196030\">beschikbaar voor Tabletop Simulator op Steam Workshop</a> nu!",
-	"<em>The official Companion Guide</em> by Björn Kimminich available <a href=\"https://leanpub.com/juice-shop\">for free on LeanPub</a> and also <a href=\"https://pwning.owasp-juice.shop\">readable online</a>!": "<em>De officiële Companion Guide</em> van Björn Kimminich is beschikbaar <a href=\"https://leanpub.com/juice-shop\">gratis op LeanPub</a> en ook <a href=\"https://pwning.owasp-juice.shop\">leesbaar online</a>!",
-	"We are out of stock! Sorry for the inconvenience.": "We zijn uit voorraad! Sorry voor het ongemak.",
+	"Die-cut holographic sticker. Stand out from those 08/15-sticker-covered laptops with this shiny beacon of 80's coolness!": "Gestanste holografische sticker. Steek boven die 08/15-sticker-bedekte laptops uit met deze glanzende holografische 80's sticker!",
+	"OWASP Snakes and Ladders - Mobile Apps": "OWASP Slangen en Ladders - Mobiele Apps",
+	"This amazing mobile app security awareness board game is <a href=\"https://steamcommunity.com/sharedfiles/filedetails/?id=1970691216\">available for Tabletop Simulator on Steam Workshop</a> now!": "Deze geweldige mobiele app met veiligheidsbewustzijnsbordspel is nu <a href=\\\"https://steamcommunity.com/sharedfiles/filedetails/?id=1970691216\\\">beschikbaar voor Tabletop Simulator op Steam Workshop</a>!",
+	"OWASP Snakes and Ladders - Web Applications": "OWASP Slangen en Ladders - Webapplicaties",
+	"This amazing web application security awareness board game is <a href=\"https://steamcommunity.com/sharedfiles/filedetails/?id=1969196030\">available for Tabletop Simulator on Steam Workshop</a> now!": "Dit geweldige webapplicatie met veiligheidsbewustzijnsbordspel is nu <a href=\\\"https://steamcommunity.com/sharedfiles/filedetails/?id=1969196030\\\">beschikbaar voor Tabletop Simulator op Steam Workshop</a>!",
+	"<em>The official Companion Guide</em> by Björn Kimminich available <a href=\"https://leanpub.com/juice-shop\">for free on LeanPub</a> and also <a href=\"https://pwning.owasp-juice.shop\">readable online</a>!": "<em>De officiële Companion Guide</em> van Björn Kimminich is <a href=\"https://leanpub.com/juice-shop\">gratis op LeanPub</a> beschikbaar en ook <a href=\"https://pwning.owasp-juice.shop\">online leesbaar</a>!",
+	"We are out of stock! Sorry for the inconvenience.": "We zijn uitverkocht! Sorry voor het ongemak.",
 	"Wrong answer to CAPTCHA. Please try again.": "Onjuist antwoord op CAPTCHA. Probeer het opnieuw.",
 	"Invalid email or password.": "Ongeldig e-mailadres of wachtwoord.",
 	"Current password is not correct.": "Huidig wachtwoord is niet correct.",
 	"Password cannot be empty.": "Wachtwoord mag niet leeg zijn.",
 	"New and repeated password do not match.": "Nieuw en herhaald wachtwoord komt niet overeen.",
 	"Wrong answer to security question.": "Verkeerd antwoord op beveiligingsvraag.",
-	"<a href=\"/#/contact\">Inform the development team</a> about a danger to some of <em>their</em> credentials. (Send them the URL of the <em>original report</em> or an assigned CVE or another identifier of this vulnerability)": "<a href=\"/#/contact\">Informeer het ontwikkelingsteam</a> over een gevaar voor sommige van <em>hun</em> gegevens. (Stuur ze de URL van het <em>oorspronkelijke rapport</em> of een toegewezen CVE of een andere identificatie van deze kwetsbaarheid)",
-	"You can order only up to {{quantity}} items of this product.": "U kunt maximaal {{quantity}} producten van dit product bestellen.",
+	"<a href=\"/#/contact\">Inform the development team</a> about a danger to some of <em>their</em> credentials. (Send them the URL of the <em>original report</em> or an assigned CVE or another identifier of this vulnerability)": "<a href=\"/#/contact\">Informeer het ontwikkelteam</a> over een gevaar voor sommige van <em>hun</em> gegevens. (Stuur ze de URL van het <em>oorspronkelijke rapport</em>, een toegewezen CVE of een andere identificatie van deze kwetsbaarheid)",
+	"You can order only up to {{quantity}} items of this product.": "U kunt maximaal {{quantity}} stuks van dit product bestellen.",
 	" <em>(This challenge is <strong>not available</strong> on Docker!)</em>": " <em>(Deze uitdaging is <strong>niet beschikbaar</strong> op Docker!)</em>",
 	" <em>(This challenge is <strong>not available</strong> on Heroku!)</em>": " <em>(Deze uitdaging is <strong>niet beschikbaar</strong> op Heroku!)</em>",
 	" <em>(This challenge is <strong>not available</strong> on Gitpod!)</em>": " <em>(This challenge is <strong>not available</strong> on Gitpod!)</em>",
-	" <em>(This challenge is <strong>potentially harmful</strong> on Docker!)</em>": " <em>(Deze uitdaging is <strong>mogelijk kwetsbaar</strong> op Docker!)</em>",
-	" <em>(This challenge is <strong>potentially harmful</strong> on Gitpod!)</em>": " <em>(This challenge is <strong>potentially harmful</strong> on Gitpod!)</em>",
-	" <em>(This challenge is <strong>potentially harmful</strong> on Heroku!)</em>": " <em>(Deze uitdaging is <strong>mogelijk kwetsbaar</strong> op Heroku!)</em>",
-	"Find the endpoint that serves usage data to be scraped by a <a href=\"https://github.com/prometheus/prometheus\">popular monitoring system</a>.": "Zoek het eindpunt dat gebruikgegevens dient om te worden gescraped door een <a href=\"https://github.com/prometheus/prometheus\">populair monitoring-systeem</a>.",
-	"Try to guess what URL the endpoint might have.": "Probeer te raden welke URL het eindpunt kan hebben.",
-	"Look for a url parameter where its value appears in the page it is leading to.": "Zoek naar een url parameter waar de waarde verschijnt op de pagina waarnaar het leidt.",
-	"Change the name of a user by performing Cross-Site Request Forgery from <a href=\"http://htmledit.squarefree.com\">another origin</a>.": "Wijzig de naam van een gebruiker door het uitvoeren van een Cross-Site Forgery Request van <a href=\"http://htmledit.squarefree.com\">een andere oorsprong</a>.",
-	"Use the bonus payload <code>&lt;iframe width=&quot;100%&quot; height=&quot;166&quot; scrolling=&quot;no&quot; frameborder=&quot;no&quot; allow=&quot;autoplay&quot; src=&quot;https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&amp;color=%23ff5500&amp;auto_play=true&amp;hide_related=false&amp;show_comments=true&amp;show_user=true&amp;show_reposts=false&amp;show_teaser=true&quot;&gt;&lt;/iframe&gt;</code> in the <i>DOM XSS</i> challenge.": "Gebruik de bonus payload <code>&lt;iframe width=&quot;100%&quot; height=&quot;166&quot; scrolling=&quot;no&quot; frameborder=&quot;no&quot; allow=&quot;autoplay&quot; src=&quot;https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&amp;color=%23ff5500&amp;auto_play=true&amp;hide_related=false&amp;show_comments=true&amp;show_user=true&amp;show_reposts=false&amp;show_teaser=true&quot;&gt;&lt;/iframe&gt;</code> in de <i>DOM XSS</i> challenge.",
-	"Copy + Paste = Solved!": "Kopieer + plakken = Opgelost!",
-	"Obtain a Deluxe Membership without paying for it.": "Verkrijg een Deluxe lidmaatschap zonder daarvoor te betalen.",
-	"Look closely at what happens when you attempt to upgrade your account.": "Kijk goed wat er gebeurt als je probeert je account up te graden.",
+	" <em>(This challenge is <strong>potentially harmful</strong> on Docker!)</em>": " <em>(Deze uitdaging is <strong>mogelijk schadelijk</strong> op Docker!)</em>",
+	" <em>(This challenge is <strong>potentially harmful</strong> on Gitpod!)</em>": " <em>(Deze uitdaging is <strong>mogelijk schadelijk</strong> op Gitpod!)</em>",
+	" <em>(This challenge is <strong>potentially harmful</strong> on Heroku!)</em>": " <em>(Deze uitdaging is <strong>mogelijk schadelijk</strong> op Heroku!)</em>",
+	"Find the endpoint that serves usage data to be scraped by a <a href=\"https://github.com/prometheus/prometheus\">popular monitoring system</a>.": "Zoek het eindpunt dat gebruikgegevens levert om te worden gescraped door een <a href=\"https://github.com/prometheus/prometheus\">populair monitoring-systeem</a>.",
+	"Try to guess what URL the endpoint might have.": "Probeer de URL te raden die het eindpunt kan hebben.",
+	"Look for a url parameter where its value appears in the page it is leading to.": "Zoek naar een url-parameter waarvan de waarde verschijnt op de pagina waarnaar de URL leidt.",
+	"Change the name of a user by performing Cross-Site Request Forgery from <a href=\"http://htmledit.squarefree.com\">another origin</a>.": "Wijzig de naam van een gebruiker door een Cross-Site Forgery Request van <a href=\"http://htmledit.squarefree.com\">een andere oorsprong</a> uit te voeren.",
+	"Use the bonus payload <code>&lt;iframe width=&quot;100%&quot; height=&quot;166&quot; scrolling=&quot;no&quot; frameborder=&quot;no&quot; allow=&quot;autoplay&quot; src=&quot;https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&amp;color=%23ff5500&amp;auto_play=true&amp;hide_related=false&amp;show_comments=true&amp;show_user=true&amp;show_reposts=false&amp;show_teaser=true&quot;&gt;&lt;/iframe&gt;</code> in the <i>DOM XSS</i> challenge.": "Gebruik de bonus-payload <code>&lt;iframe width=&quot;100%&quot; height=&quot;166&quot; scrolling=&quot;no&quot; frameborder=&quot;no&quot; allow=&quot;autoplay&quot; src=&quot;https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&amp;color=%23ff5500&amp;auto_play=true&amp;hide_related=false&amp;show_comments=true&amp;show_user=true&amp;show_reposts=false&amp;show_teaser=true&quot;&gt;&lt;/iframe&gt;</code> van de <i>DOM XSS</i> challenge.",
+	"Copy + Paste = Solved!": "Kopiëren + Plakken = Opgelost!",
+	"Obtain a Deluxe Membership without paying for it.": "Verkrijg een Deluxe-lidmaatschap zonder daarvoor te betalen.",
+	"Look closely at what happens when you attempt to upgrade your account.": "Kijk goed wat er gebeurt wannner je probeert je account up te graden.",
 	" <em>(This challenge is <strong>not available</strong> on Windows!)</em>": " <em>(Deze uitdaging is <strong>niet beschikbaar</strong> op Windows!)</em>",
-	"Reset Uvogin's password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset het wachtwoord van Uvogin's OWASP account via het <a href=\"/#/forgot-password\">Wachtwoord</a> mechanisme <a href=\"/#/forgot-password\"> met <i>het oorspronkelijke antwoord</i> op zijn beveiligingsvraag.",
-	"You might have to do some OSINT on his social media personas to find out his honest answer to the security question.": "Misschien moet je wat OSINT doen op zijn sociale media om zijn antwoord op de veiligheidsvraag te vinden.",
-	"Juice Shop Adversary Trading Card (Common)": "Juice Shop Adversary Trading Card (Common)",
-	"Common rarity \"Juice Shop\" card for the <a href=\"https://docs.google.com/forms/d/e/1FAIpQLSecLEakawSQ56lBe2JOSbFwFYrKDCIN7Yd3iHFdQc5z8ApwdQ/viewform\">Adversary Trading Cards</a> CCG.": "Common zeldzaamheid \"Juice Shop\" kaart voor de <a href=\"https://docs.google.com/forms/d/e/1FAIpQLSecLEakawSQ56lBe2JOSbFwFYrKDCIN7Yd3iHFdQc5z8ApwdQ/viewform\">Adversary Trading Cards</a> CCG.",
+	"Reset Uvogin's password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset het wachtwoord van Uvogin met het <a href=\"/#/forgot-password\">Wachtwoord Vergeten</a>-mechanisme <a href=\"/#/forgot-password\"> en <i>het oorspronkelijke antwoord</i> op zijn beveiligingsvraag.",
+	"You might have to do some OSINT on his social media personas to find out his honest answer to the security question.": "Misschien moet je wat OSINT doen op zijn sociale media om het echte antwoord op zijn veiligheidsvraag te vinden.",
+	"Juice Shop Adversary Trading Card (Common)": "Juice Shop Adversary Trading Card (Normaal)",
+	"Common rarity \"Juice Shop\" card for the <a href=\"https://docs.google.com/forms/d/e/1FAIpQLSecLEakawSQ56lBe2JOSbFwFYrKDCIN7Yd3iHFdQc5z8ApwdQ/viewform\">Adversary Trading Cards</a> CCG.": "Zeldzame \"Juice Shop\"-kaart voor de <a href=\"https://docs.google.com/forms/d/e/1FAIpQLSecLEakawSQ56lBe2JOSbFwFYrKDCIN7Yd3iHFdQc5z8ApwdQ/viewform\">Adversary Trading Cards</a> CCG.",
 	"Juice Shop Adversary Trading Card (Super Rare)": "Juice Shop Adversary Trading Card (Super Zeldzaam)",
-	"Super rare \"Juice Shop\" card with holographic foil-coating for the <a href=\"https://docs.google.com/forms/d/e/1FAIpQLSecLEakawSQ56lBe2JOSbFwFYrKDCIN7Yd3iHFdQc5z8ApwdQ/viewform\">Adversary Trading Cards</a> CCG.": "Super zeldzame \"Juice Shop\" kaart voor de <a href=\"https://docs.google.com/forms/d/e/1FAIpQLSecLEakawSQ56lBe2JOSbFwFYrKDCIN7Yd3iHFdQc5z8ApwdQ/viewform\">Adversary Trading Cards</a> CCG.",
-	"OWASP Juice Shop \"King of the Hill\" Facemask": "OWASP Juice Shop \"King of the Hill\" Facemask",
-	"Facemask with compartment for filter from 50% cotton and 50% polyester.": "Facemask met vak voor filter van 50% katoen en 50% polyester.",
-	"Determine the answer to John's security question by looking at an upload of him to the Photo Wall and use it to reset his password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Bepaal het antwoord op de veiligheidsvraag van John door een upload van hem op de Photo Wall te bekijken en deze te gebruiken om zijn wachtwoord te resetten via het <a href=\"/#/forgot-password\">Wachtwoord vergeten</a> mechanisme.",
+	"Super rare \"Juice Shop\" card with holographic foil-coating for the <a href=\"https://docs.google.com/forms/d/e/1FAIpQLSecLEakawSQ56lBe2JOSbFwFYrKDCIN7Yd3iHFdQc5z8ApwdQ/viewform\">Adversary Trading Cards</a> CCG.": "Super zeldzame \"Juice Shop\"-kaart voor de <a href=\"https://docs.google.com/forms/d/e/1FAIpQLSecLEakawSQ56lBe2JOSbFwFYrKDCIN7Yd3iHFdQc5z8ApwdQ/viewform\">Adversary Trading Cards</a> CCG.",
+	"OWASP Juice Shop \"King of the Hill\" Facemask": "OWASP Juice Shop \"King of the Hill\" Masker",
+	"Facemask with compartment for filter from 50% cotton and 50% polyester.": "Masker met ruimte voor filter van 50% katoen en 50% polyester.",
+	"Determine the answer to John's security question by looking at an upload of him to the Photo Wall and use it to reset his password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Bepaal het antwoord op de veiligheidsvraag van John door een upload van hem op de Photo Wall te bekijken en deze te gebruiken om zijn wachtwoord te resetten via het <a href=\"/#/forgot-password\">Wachtwoord Vergeten</a>-mechanisme.",
 	"Take a look at the meta data of the corresponding photo.": "Bekijk de meta-gegevens van de bijbehorende foto.",
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Bepaal het antwoord op de veiligheidsvraag van Emma door een upload van haar op de Photo Wall te bekijken en deze te gebruiken om zijn wachtwoord te resetten via het <a href=\"/#/forgot-password\">Wachtwoord vergeten</a> mechanisme.",
-	"Take a look at the details in the photo to determine the location of where it was taken.": "Kijk naar de de details van de foto om de locatie te bepalen van deze foto.",
+	"Take a look at the details in the photo to determine the location of where it was taken.": "Kijk naar de details van de foto om bepalen van waar deze foto genomen is.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Editie",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Omzeil een beveiligingscontrole met een <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> om toegang te krijgen tot een bestand dat niet voor je ogen is bedoeld.",
-	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
-	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
-	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
-	"Get your <a href=\"https://20thanniversary.owasp.org/\" target=\"_blank\">free 🎫 for OWASP 20th Anniversary Celebration</a> online conference! Hear from world renowned keynotes and special speakers, network with your peers and interact with our event sponsors. With an anticipated 10k+ attendees from around the world, you will not want to miss this live on-line event!": "Get your <a href=\"https://20thanniversary.owasp.org/\" target=\"_blank\">free 🎫 for OWASP 20th Anniversary Celebration</a> online conference! Hear from world renowned keynotes and special speakers, network with your peers and interact with our event sponsors. With an anticipated 10k+ attendees from around the world, you will not want to miss this live on-line event!",
-	"OWASP Juice Shop Card (non-foil)": "OWASP Juice Shop Card (non-foil)",
-	"Mythic rare <small><em>(obviously...)</em></small> card \"OWASP Juice Shop\" with three distinctly useful abilities. Alpha printing, mint condition. A true collectors piece to own!": "Mythic rare <small><em>(obviously...)</em></small> card \"OWASP Juice Shop\" with three distinctly useful abilities. Alpha printing, mint condition. A true collectors piece to own!",
-	"Line {{vulnLine}} is responsible for this vulnerability or security flaw. Select it and submit to proceed.": "Line {{vulnLine}} is responsible for this vulnerability or security flaw. Select it and submit to proceed.",
-	"Lines {{vulnLines}} are responsible for this vulnerability or security flaw. Select them and submit to proceed.": "Lines {{vulnLines}} are responsible for this vulnerability or security flaw. Select them and submit to proceed.",
-	"Receive a coupon code from the support chatbot.": "Receive a coupon code from the support chatbot.",
-	"Just keep asking.": "Just keep asking.",
-	"Permanently disable the support chatbot so that it can no longer answer customer queries.": "Permanently disable the support chatbot so that it can no longer answer customer queries.",
-	"Think of a way to get a hold of the internal workings on the chatbot API.": "Think of a way to get a hold of the internal workings on the chatbot API.",
-	"Gain read access to an arbitrary local file on the web server.": "Gain read access to an arbitrary local file on the web server.",
-	"You should read up on vulnerabilities in popular NodeJs template engines.": "You should read up on vulnerabilities in popular NodeJs template engines.",
-	"Try to identify where (potentially malicious) user input is coming into the code.": "Try to identify where (potentially malicious) user input is coming into the code.",
-	"What is the code doing with the user input other than using it to filter the data source?": "What is the code doing with the user input other than using it to filter the data source?",
-	"Look for a line where the developers fiddled with Angular's built-in security model.": "Look for a line where the developers fiddled with Angular's built-in security model.",
-	"Using bypassSecurityTrustStyle() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. If at all, this switch might only accidentally keep XSS prevention intact. The context where the parameter is used is not CSS, making this switch totally pointless.": "Using bypassSecurityTrustStyle() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. If at all, this switch might only accidentally keep XSS prevention intact. The context where the parameter is used is not CSS, making this switch totally pointless.",
-	"Using bypassSecurityTrustResourceUrl() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. This switch might only accidentally keep XSS prevention intact, but the new URL context does not make any sense here.": "Using bypassSecurityTrustResourceUrl() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. This switch might only accidentally keep XSS prevention intact, but the new URL context does not make any sense here.",
-	"Using bypassSecurityTrustScript() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. If at all, this switch might only accidentally keep XSS prevention intact. The context where the parameter is used is not a script either, so this switch would be nonsensical.": "Using bypassSecurityTrustScript() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. If at all, this switch might only accidentally keep XSS prevention intact. The context where the parameter is used is not a script either, so this switch would be nonsensical.",
-	"Removing the bypass of sanitization entirely is the best way to fix this vulnerability. Fiddling with Angular's built-in sanitization was entirely unnecessary as the user input for a text search should not be expected to contain HTML that needs to be rendered but merely plain text.": "Removing the bypass of sanitization entirely is the best way to fix this vulnerability. Fiddling with Angular's built-in sanitization was entirely unnecessary as the user input for a text search should not be expected to contain HTML that needs to be rendered but merely plain text.",
-	"Can you identify one or more routes which have something to do with log files?": "Can you identify one or more routes which have something to do with log files?",
-	"Did you spot the directory listing clearly linked to log files?": "Did you spot the directory listing clearly linked to log files?",
-	"Did you notice that there is a seperate route for retrieving individual log files?": "Did you notice that there is a seperate route for retrieving individual log files?",
-	"Make sure to select both lines responsible for the log file data leakage.": "Make sure to select both lines responsible for the log file data leakage.",
-	"Switching off the detailed view option is a cosmetic change on the directory listing but still allows the logs to be browsed and accessed.": "Switching off the detailed view option is a cosmetic change on the directory listing but still allows the logs to be browsed and accessed.",
-	"Removing the route that serves individual log files is likely to plumb the data leak but still provides information to the attacker unnecessarily.": "Removing the route that serves individual log files is likely to plumb the data leak but still provides information to the attacker unnecessarily.",
-	"Removing only the directory listing will still allow attackers to download individual log files if they can come up with a valid file name.": "Removing only the directory listing will still allow attackers to download individual log files if they can come up with a valid file name.",
-	"There should generally be no good reason to expose server logs through a web URL of the server itself, epecially not when that server is Internet-facing.": "There should generally be no good reason to expose server logs through a web URL of the server itself, epecially not when that server is Internet-facing.",
-	"Among the long list of route mappings, can you spot any that seem responsible for admin-related functionality?": "Among the long list of route mappings, can you spot any that seem responsible for admin-related functionality?",
-	"Luckily the route mappings were originally in alphabetical order before the developers forgot about that rule at some point.": "Luckily the route mappings were originally in alphabetical order before the developers forgot about that rule at some point.",
-	"Assuming that the original \"AdminGuard\" provided access control only to admin users, switching to \"LoginGuard\" seems like a downgrade that would give access to any authenticated user.": "Assuming that the original \"AdminGuard\" provided access control only to admin users, switching to \"LoginGuard\" seems like a downgrade that would give access to any authenticated user.",
-	"Obfuscating the path to the administration section does not add any security, even if it wasn't just a trivial Base64 encoding.": "Obfuscating the path to the administration section does not add any security, even if it wasn't just a trivial Base64 encoding.",
-	"This obfuscation attempt is hard to undo by hand but trivial when executed in a JavaScript console. Regardless, obfuscating the route does not add any level of security.": "This obfuscation attempt is hard to undo by hand but trivial when executed in a JavaScript console. Regardless, obfuscating the route does not add any level of security.",
-	"While attempts could be made to limit access to administrative functions of a web shop through access control, it is definitely safer to apply the \"separation of concerns\" pattern more strictly by internally hosting a distinct admin backend application with no Internet exposure.": "While attempts could be made to limit access to administrative functions of a web shop through access control, it is definitely safer to apply the \"separation of concerns\" pattern more strictly by internally hosting a distinct admin backend application with no Internet exposure.",
-	"Can you identify one or more routes which have something to do with file serving?": "Can you identify one or more routes which have something to do with file serving?",
-	"Did you notice that there are seperate routes the directory listing and retrieving individual files?": "Did you notice that there are seperate routes the directory listing and retrieving individual files?",
-	"Make sure to select both lines responsible for the data leakage.": "Make sure to select both lines responsible for the data leakage.",
-	"Removing only the directory listing will still allow attackers to download individual files if they can come up with a valid file name.": "Removing only the directory listing will still allow attackers to download individual files if they can come up with a valid file name.",
-	"Removing the routes that serve individual files is likely to plumb the data leak but still provides information to the attacker unnecessarily.": "Removing the routes that serve individual files is likely to plumb the data leak but still provides information to the attacker unnecessarily.",
-	"Switching off the icons is a cosmetic change on the directory listing but still allows the files to be browsed and accessed.": "Switching off the icons is a cosmetic change on the directory listing but still allows the files to be browsed and accessed.",
-	"Getting rid of the /ftp folder entirely is the only way to plumb this data leakage for good. Valid static content in it needs to be moved to a more suitable location and order confirmation PDFs had no business to be placed there publicly accessible in the first place. Everything else in that folder was just accidentally put & forgotten there anyway.": "Getting rid of the /ftp folder entirely is the only way to plumb this data leakage for good. Valid static content in it needs to be moved to a more suitable location and order confirmation PDFs had no business to be placed there publicly accessible in the first place. Everything else in that folder was just accidentally put & forgotten there anyway.",
-	"In the long list of API-handling middleware, try to find the ones dealing with products offered in the shop first.": "In the long list of API-handling middleware, try to find the ones dealing with products offered in the shop first.",
-	"API routes need to specifically define a handler for a HTTP verb if they wish to override the \"allow everything to everyone\" default behavior.": "API routes need to specifically define a handler for a HTTP verb if they wish to override the \"allow everything to everyone\" default behavior.",
-	"There is one line that is commented out for no good reason among the product-related middleware.": "There is one line that is commented out for no good reason among the product-related middleware.",
-	"While removing the commented-out line made the code cleaner, it did not change the functionality in any way and thus cannot have improved security either.": "While removing the commented-out line made the code cleaner, it did not change the functionality in any way and thus cannot have improved security either.",
-	"Removing all dedicated handling of the products API made things worse, as now the default permissions of the underlying API generator will be used: Allowing GET, POST, PUT and DELETE - without any restrictions.": "Removing all dedicated handling of the products API made things worse, as now the default permissions of the underlying API generator will be used: Allowing GET, POST, PUT and DELETE - without any restrictions.",
-	"You improved security slightly by no longer accepting PUT requests from anonymous API callers. But does the shop even want to allow its authenticated customers to change products themselves?": "You improved security slightly by no longer accepting PUT requests from anonymous API callers. But does the shop even want to allow its authenticated customers to change products themselves?",
-	"Disabling all HTTP verbs other than GET for the products API is indeed the only safe way to implement secure access control. Shop administrators should not use the customer facing web UI to manage the store's inventory anyway.": "Disabling all HTTP verbs other than GET for the products API is indeed the only safe way to implement secure access control. Shop administrators should not use the customer facing web UI to manage the store's inventory anyway.",
-	"Try to identify any variables in the code that might contain arbitrary user input.": "Try to identify any variables in the code that might contain arbitrary user input.",
-	"Follow the user input through the function call and try to spot places where it might be abused for malicious purposes.": "Follow the user input through the function call and try to spot places where it might be abused for malicious purposes.",
-	"Can you spot a place where a SQL query is being cobbled together in an unsafe way?": "Can you spot a place where a SQL query is being cobbled together in an unsafe way?",
-	"Trying to prevent any injection attacks with a custom-built blocklist mechanism is doomed to fail. It might work for some simpler attack payloads but an attacker with time and skills can likely bypass it at some point.": "Trying to prevent any injection attacks with a custom-built blocklist mechanism is doomed to fail. It might work for some simpler attack payloads but an attacker with time and skills can likely bypass it at some point.",
-	"Replacing the template string (`...`) notation with plain string concatenation (\"...\"+\"...\") does not change the behavior of the code in any way. It only makes the code less readable.": "Replacing the template string (`...`) notation with plain string concatenation (\"...\"+\"...\") does not change the behavior of the code in any way. It only makes the code less readable.",
-	"Using the built-in replacement (or binding) mechanism of Sequelize is equivalent to creating a Prepared Statement. This prevents tampering with the query syntax through malicious user input as it is \"set in stone\" before the criteria parameter is inserted.": "Using the built-in replacement (or binding) mechanism of Sequelize is equivalent to creating a Prepared Statement. This prevents tampering with the query syntax through malicious user input as it is \"set in stone\" before the criteria parameter is inserted.",
-	"Can you find a HTTP route mapping that deals with metrics?": "Can you find a HTTP route mapping that deals with metrics?",
-	"Remember: The default behavior of route mappings is to allow access to everyone.": "Remember: The default behavior of route mappings is to allow access to everyone.",
-	"The metrics route remains publicly accessible. This change only messes with functional settings of the measurement framework unnecessarily.": "The metrics route remains publicly accessible. This change only messes with functional settings of the measurement framework unnecessarily.",
-	"This fix prevents unauthorized access to the metrics route but overshoots the goal by locking out everyone - including administrators.": "This fix prevents unauthorized access to the metrics route but overshoots the goal by locking out everyone - including administrators.",
-	"Access will now be restricted only to users with administrator permissions, which seems reasonable protection, assuming that it is not possible for a regular user to escalate admin priviliges. If that were a risk, the metrics should better be stored behind the scenes not be made accessible via the shop application at all.": "Access will now be restricted only to users with administrator permissions, which seems reasonable protection, assuming that it is not possible for a regular user to escalate admin priviliges. If that were a risk, the metrics should better be stored behind the scenes not be made accessible via the shop application at all.",
-	"Do you remember the security question that Bender used for his account?": "Do you remember the security question that Bender used for his account?",
-	"This question is the source of the security risk in this challenge.": "This question is the source of the security risk in this challenge.",
-	"While not necessarily as trivial to research via a user's LinkedIn profile, the question is still easy to research or brute force when answered truthfully.": "While not necessarily as trivial to research via a user's LinkedIn profile, the question is still easy to research or brute force when answered truthfully.",
-	"Exchanging \"company\" with \"organization\" is only a vocabulary change and has no effect on security.": "Exchanging \"company\" with \"organization\" is only a vocabulary change and has no effect on security.",
-	"When answered truthfully, all security questions are susceptible to online research (on Facebook, LinkedIn etc.) and often even brute force. If at all, they should not be used as the only factor for a security-relevant function.": "When answered truthfully, all security questions are susceptible to online research (on Facebook, LinkedIn etc.) and often even brute force. If at all, they should not be used as the only factor for a security-relevant function.",
-	"Can you identify the lines which have something to do with crypto currency addresses?": "Can you identify the lines which have something to do with crypto currency addresses?",
-	"Did you notice there is a constant containing allowed redirect web addresses?": "Did you notice there is a constant containing allowed redirect web addresses?",
-	"Make sure to select all three lines responsible for crypto currency addresses which are not promoted any longer.": "Make sure to select all three lines responsible for crypto currency addresses which are not promoted any longer.",
-	"This fix removes one deprecated crypto currency address from the allow list but forgets to deal with two other ones.": "This fix removes one deprecated crypto currency address from the allow list but forgets to deal with two other ones.",
-	"When cleaning up any allow list of deprecated entries, it is crucial to be thorough and re-check the list regularly. Otherwise allow lists tend to become weaker over time.": "When cleaning up any allow list of deprecated entries, it is crucial to be thorough and re-check the list regularly. Otherwise allow lists tend to become weaker over time.",
-	"This fix uses the binding mechanism of Sequelize to create the equivalent of a Prepared Statement, which is great. Unfortunately this fix also introduces a critical functional bug into the authentication process.": "This fix uses the binding mechanism of Sequelize to create the equivalent of a Prepared Statement, which is great. Unfortunately this fix also introduces a critical functional bug into the authentication process.",
-	"This fix unfortunately goes only half the way to using the binding mechanism of Sequelize. Such a Prepared Statement still concatenated from user input, is still wide open for SQL Injection attacks.": "This fix unfortunately goes only half the way to using the binding mechanism of Sequelize. Such a Prepared Statement still concatenated from user input, is still wide open for SQL Injection attacks.",
-	"This fix unfortunately goes only half the way to using the replacement mechanism of Sequelize. Such a Prepared Statement still concatenated from user input, is still wide open for SQL Injection attacks.": "This fix unfortunately goes only half the way to using the replacement mechanism of Sequelize. Such a Prepared Statement still concatenated from user input, is still wide open for SQL Injection attacks.",
-	"Turning off the \"plain\" flag will let Sequelize return all matching rows instead of just the first one. This neither makes sense from a functional point of view in a login function, not could it prevent SQL Injection attacks.": "Turning off the \"plain\" flag will let Sequelize return all matching rows instead of just the first one. This neither makes sense from a functional point of view in a login function, not could it prevent SQL Injection attacks.",
-	"Using the built-in binding (or replacement) mechanism of Sequelize is equivalent to creating a Prepared Statement. This prevents tampering with the query syntax through malicious user input as it is \"set in stone\" before the criteria parameter is inserted.": "Using the built-in binding (or replacement) mechanism of Sequelize is equivalent to creating a Prepared Statement. This prevents tampering with the query syntax through malicious user input as it is \"set in stone\" before the criteria parameter is inserted.",
-	"Using bypassSecurityTrustSoundCloud() instead of bypassSecurityTrustHtml() supposedly bypasses sanitization to allow only content from that service provider. Not surprisingly, there is no such vendor-specific function bypassSecurityTrustSoundCloud() offered by the Angular DomSanitizer.": "Using bypassSecurityTrustSoundCloud() instead of bypassSecurityTrustHtml() supposedly bypasses sanitization to allow only content from that service provider. Not surprisingly, there is no such vendor-specific function bypassSecurityTrustSoundCloud() offered by the Angular DomSanitizer.",
-	"Using bypassSecurityTrustIframe() instead of bypassSecurityTrustHtml() supposedly bypasses sanitization to allow only <iframe> tags. But, the Angular DomSanitizer does not offer tag-specific bypass functions.": "Using bypassSecurityTrustIframe() instead of bypassSecurityTrustHtml() supposedly bypasses sanitization to allow only <iframe> tags. But, the Angular DomSanitizer does not offer tag-specific bypass functions.",
-	"Do you remember the security question that Jim used for his account?": "Do you remember the security question that Jim used for his account?",
-	"Widening the scope from an \"eldest sibling\" to \"any family member\" still allows the question to be easily researched online (on Facebook etc.) or brute forced when answered truthfully.": "Widening the scope from an \"eldest sibling\" to \"any family member\" still allows the question to be easily researched online (on Facebook etc.) or brute forced when answered truthfully.",
-	"Tightening the scope from an \"eldest sibling\" to \"eldest brother\" reduces any brute force effort to only male forenames, assuming the question is answered truthfully.": "Tightening the scope from an \"eldest sibling\" to \"eldest brother\" reduces any brute force effort to only male forenames, assuming the question is answered truthfully.",
-	"Do you remember the security question that Bjoern used for his account?": "Do you remember the security question that Bjoern used for his account?",
-	"Researching someone's current place of residence is probably even easier than a past one.": "Researching someone's current place of residence is probably even easier than a past one.",
-	"When changing the scope of this question from \"teenager\" to \"toddler\", researching a past place of residence still is the only (low) hurdle for the attacker.": "When changing the scope of this question from \"teenager\" to \"toddler\", researching a past place of residence still is the only (low) hurdle for the attacker.",
-	"Do you remember the security question that Bjoern used for his OWASP account?": "Do you remember the security question that Bjoern used for his OWASP account?",
-	"There are even less car brands in the world than potential pet names. Therefore, changing the security questions has even a negative effect on overall security as it makes guessing and brute forcing much easier.": "There are even less car brands in the world than potential pet names. Therefore, changing the security questions has even a negative effect on overall security as it makes guessing and brute forcing much easier.",
-	"This fix option is obviously (?) a joke. But it should still illustrate that narrowing the scope of a question reduces the solution space accordingly, thus making \"social stalking\" and brute force much easier.": "This fix option is obviously (?) a joke. But it should still illustrate that narrowing the scope of a question reduces the solution space accordingly, thus making \"social stalking\" and brute force much easier.",
-	"Do you remember the security question that Uvogin used for his account?": "Do you remember the security question that Uvogin used for his account?",
-	"When changing the scope of this question from \"movie\" to \"actor/actress\", researching and brute forcing is probably just as easy for the attacker.": "When changing the scope of this question from \"movie\" to \"actor/actress\", researching and brute forcing is probably just as easy for the attacker.",
-	"Narrowing the scope of the question from \"movie\" to \"animé\" dramatically reduces the solution space, thus making guessing and brute force attacks a lot easier.": "Narrowing the scope of the question from \"movie\" to \"animé\" dramatically reduces the solution space, thus making guessing and brute force attacks a lot easier.",
-	"Among the long list of route mappings, can you spot any that seem responsible for the Score Board screen?": "Among the long list of route mappings, can you spot any that seem responsible for the Score Board screen?",
-	"If you accidentally scrolled over the relevant line, try using the text search in your browser.": "If you accidentally scrolled over the relevant line, try using the text search in your browser.",
-	"Searching for \"score\" should bring you to the right route mapping.": "Searching for \"score\" should bring you to the right route mapping.",
-	"Obfuscating the path to the Score Board does not add any security, even if it wasn't just a trivial Base64 encoding. It would, on the other hand, make finding it a bit more difficulty. This is probably not intended as the Score Board screen is the hub for all other challenges.": "Obfuscating the path to the Score Board does not add any security, even if it wasn't just a trivial Base64 encoding. It would, on the other hand, make finding it a bit more difficulty. This is probably not intended as the Score Board screen is the hub for all other challenges.",
-	"Removing the entire route mapping would improve security but also break functionality by making the Score Board entirely inaccessible. Keep in mind that the Score Board is hidden only to be found and used to track all the other challenges.": "Removing the entire route mapping would improve security but also break functionality by making the Score Board entirely inaccessible. Keep in mind that the Score Board is hidden only to be found and used to track all the other challenges.",
-	"In this one-of-a-kind scenario it is really best to just leave the code unchanged. Fiddling with it might either break accessibility of the crucial Score Board screen or make it unnecessarily harder to find it.": "In this one-of-a-kind scenario it is really best to just leave the code unchanged. Fiddling with it might either break accessibility of the crucial Score Board screen or make it unnecessarily harder to find it.",
-	"Limiting the allowed search values via startsWith() would still allow SQL Injection via \"orange')) UNION SELECT ... --\" or similarly prefixed payloads. Even worse, this fix also breaks the free text search capability.": "Limiting the allowed search values via startsWith() would still allow SQL Injection via \"orange')) UNION SELECT ... --\" or similarly prefixed payloads. Even worse, this fix also breaks the free text search capability.",
-	"Which entity is this challenge most likely about? Try to find all code places where that entity is somehow processed.": "Which entity is this challenge most likely about? Try to find all code places where that entity is somehow processed.",
-	"In this snippet you must look for a place where something is missing that, if present, would negate an arbitrary role assignment.": "In this snippet you must look for a place where something is missing that, if present, would negate an arbitrary role assignment.",
-	"Make sure that you do not select any lines that are contained in the vulnerable function but themselves have nothing to do with the vulberability.": "Make sure that you do not select any lines that are contained in the vulnerable function but themselves have nothing to do with the vulberability.",
-	"This change results in the \"role\" property not being returned in any User-API responses. This will not prevent setting an arbitrary role during user creation but probably also break some functionality in the client that relies on the role being present.": "This change results in the \"role\" property not being returned in any User-API responses. This will not prevent setting an arbitrary role during user creation but probably also break some functionality in the client that relies on the role being present.",
-	"This code change will check if a role is already defined on the user entity. If so, it will keep it. If not, it will set \"customer\" as a fallback role. This still allows anyone to pick their own prefered role, though.": "This code change will check if a role is already defined on the user entity. If so, it will keep it. If not, it will set \"customer\" as a fallback role. This still allows anyone to pick their own prefered role, though.",
-	"Removing the interceptor function completely not only keeps the role assignment possible, it also breaks functionality by no longer creating digital wallets for new users.": "Removing the interceptor function completely not only keeps the role assignment possible, it also breaks functionality by no longer creating digital wallets for new users.",
-	"This actually fixes the role assignment issue, by overriding any value pre-set via the POST request with a static \"customer\" default role.": "This actually fixes the role assignment issue, by overriding any value pre-set via the POST request with a static \"customer\" default role.",
-	"Where is the Token Sale page actually being handled?": "Where is the Token Sale page actually being handled?",
-	"What is weird about how the Token Sale route is being declared?": "What is weird about how the Token Sale route is being declared?",
-	"If the Token Sale page is still considered a secret, why is it mapped to a route at all?": "If the Token Sale page is still considered a secret, why is it mapped to a route at all?",
-	"Restricting access to the Token Sale page to administrators might sound good in theory. Unfortunately this all only happens in client-side code, so such check couldn't be fully trusted.": "Restricting access to the Token Sale page to administrators might sound good in theory. Unfortunately this all only happens in client-side code, so such check couldn't be fully trusted.",
-	"Obfuscating the path to the Token Sale page with Base64 instead of the original obfuscation function does not add any security. It actually makes the route even more easily identifiable.": "Obfuscating the path to the Token Sale page with Base64 instead of the original obfuscation function does not add any security. It actually makes the route even more easily identifiable.",
-	"The only viable way to prevent access to a soon-to-be-released Token Sale page is to not have it in the client-side code before its actual release. It then makes sense to not have any premature route mapping declarations either. This then makes the whole obfuscation code-madness unnecessary as well.": "The only viable way to prevent access to a soon-to-be-released Token Sale page is to not have it in the client-side code before its actual release. It then makes sense to not have any premature route mapping declarations either. This then makes the whole obfuscation code-madness unnecessary as well.",
-	"You should take a close look at how this code checks for allowed vs. forbidded URLs to redirect to.": "You should take a close look at how this code checks for allowed vs. forbidded URLs to redirect to.",
-	"Try to play through how the logical operators and used standard functions work in this situation.": "Try to play through how the logical operators and used standard functions work in this situation.",
-	"Could you somehow make the code believe that it is dealing with an allow-listed URL while it actually isn't?": "Could you somehow make the code believe that it is dealing with an allow-listed URL while it actually isn't?",
-	"The open redirect flaw in this code cannot be fixed by applying URL encoding to the target URL. In fact, it would break the entire redirect mechanism for allow-listed URLs as they are not URL-encoded and would therefore never match.": "The open redirect flaw in this code cannot be fixed by applying URL encoding to the target URL. In fact, it would break the entire redirect mechanism for allow-listed URLs as they are not URL-encoded and would therefore never match.",
-	"Changing from logical \"or\" to logical \"and\" here does not do anything for security but entirely breaks the redirect mechanism as \"allowed\" can never be true after the loop.": "Changing from logical \"or\" to logical \"and\" here does not do anything for security but entirely breaks the redirect mechanism as \"allowed\" can never be true after the loop.",
-	"HTML-escaping is completely wrong in this situation because the code is dealing with URLs and not HTML input.": "HTML-escaping is completely wrong in this situation because the code is dealing with URLs and not HTML input.",
-	"Using indexOf allowed any URLs as long as they contained any allow-listed URL, even if it just would be as a parameter. Replacing this with an actual equality check mitigates this lapse and makes the redirect only work for allow-listed URLs.": "Using indexOf allowed any URLs as long as they contained any allow-listed URL, even if it just would be as a parameter. Replacing this with an actual equality check mitigates this lapse and makes the redirect only work for allow-listed URLs.",
-	"The security flaw has something to do with the rate limiting configuration.": "The security flaw has something to do with the rate limiting configuration.",
-	"Do you think the time window or number of requests is the actual problem here? Maybe there is something else going wrong...": "Do you think the time window or number of requests is the actual problem here? Maybe there is something else going wrong...",
-	"Take a close look at the HTTP header being used here and ask yourself: \"Could an attacker do anything with it to bypass rate limiting?\"": "Take a close look at the HTTP header being used here and ask yourself: \"Could an attacker do anything with it to bypass rate limiting?\"",
-	"Removing the setting to trust proxies does not improve security of the rate limiting. It might have some unforseen or unintended functional side-effects, though.": "Removing the setting to trust proxies does not improve security of the rate limiting. It might have some unforseen or unintended functional side-effects, though.",
-	"Replacing the \"X-Forwarded-For\" header with its standardized alternative \"Forwarded\" does not close the security flaw of how this header is actually being used and can be abused by attackers.": "Replacing the \"X-Forwarded-For\" header with its standardized alternative \"Forwarded\" does not close the security flaw of how this header is actually being used and can be abused by attackers.",
-	"Reducing the rate limit from 100 requests in 5min to 10 reqests in 3min could be seen as a security improvement, if there wasn't an entirely unrelated misconfiguration at play here.": "Reducing the rate limit from 100 requests in 5min to 10 reqests in 3min could be seen as a security improvement, if there wasn't an entirely unrelated misconfiguration at play here.",
-	"Removing the custom key generator that lets an arbitrary HTTP header take precedence over the client IP is the best option here. Now an attacker at least needs to fake their actual IP to bypass the rate limiting, as this is the default key for the RateLimit module used here. There is a functional downside though, as now users behin e.g. corporate proxies might be rate limited as a group and not individually. But with 100 allowed password resets in 5min this should not occur too frequently.": "Removing the custom key generator that lets an arbitrary HTTP header take precedence over the client IP is the best option here. Now an attacker at least needs to fake their actual IP to bypass the rate limiting, as this is the default key for the RateLimit module used here. There is a functional downside though, as now users behin e.g. corporate proxies might be rate limited as a group and not individually. But with 100 allowed password resets in 5min this should not occur too frequently.",
-	"Find all places in the code which are handling the product descriptions.": "Find all places in the code which are handling the product descriptions.",
-	"Manually encoding the angular brackets of the HTML tags does not add any security. It is likely to break descriptions with legitimate HTML tags for styling or links, though.": "Manually encoding the angular brackets of the HTML tags does not add any security. It is likely to break descriptions with legitimate HTML tags for styling or links, though.",
-	"The removed code block deals with handling of different screen sizes and is entirely unrelated to the given XSS vulnerability.": "The removed code block deals with handling of different screen sizes and is entirely unrelated to the given XSS vulnerability.",
-	"Using bypassSecurityTrustScript() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. If at all, this switch might only accidentally keep XSS prevention intact.": "Using bypassSecurityTrustScript() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. If at all, this switch might only accidentally keep XSS prevention intact.",
-	"Removing the bypass of sanitization entirely is the best way to fix the XSS vulnerability here. It should be noted, that XSS is only a consequence of broken autheorization in this case, as users should not be allowed to change product descriptions in the first place.": "Removing the bypass of sanitization entirely is the best way to fix the XSS vulnerability here. It should be noted, that XSS is only a consequence of broken autheorization in this case, as users should not be allowed to change product descriptions in the first place.",
-	"To find the culprit lines, you need to understand how MongoDB handles updating records.": "To find the culprit lines, you need to understand how MongoDB handles updating records.",
-	"Did you notice that the developers retrieved a reference to the user but never actually use it for anything? This might be part of the problem.": "Did you notice that the developers retrieved a reference to the user but never actually use it for anything? This might be part of the problem.",
-	"Another problematic line you need to select, is actually missing something that ties the user to the review.": "Another problematic line you need to select, is actually missing something that ties the user to the review.",
-	"This solution would reassign an updated review to the last editor, but it would not prevent to change other user's reviews in the first place.": "This solution would reassign an updated review to the last editor, but it would not prevent to change other user's reviews in the first place.",
-	"Removing the option to update multiple documents at once is a good idea and might actually help against another flaw in this code. But it does not fix the problem of allowing users to update other user's reviews.": "Removing the option to update multiple documents at once is a good idea and might actually help against another flaw in this code. But it does not fix the problem of allowing users to update other user's reviews.",
-	"Setting the author on server-side based on the user retrieved from the authentication token in the HTTP request is the right call. It prevents users from just passing any author email they like along with the request.": "Setting the author on server-side based on the user retrieved from the authentication token in the HTTP request is the right call. It prevents users from just passing any author email they like along with the request.",
-	"Does this query really need to allow updating more than one review at once?": "Does this query really need to allow updating more than one review at once?",
-	"Consider the query parameters under control of the attacker and try to find the one where they might inject some query-altering command.": "Consider the query parameters under control of the attacker and try to find the one where they might inject some query-altering command.",
-	"Removing the option to update multiple documents at once combined with avoiding a \"not-equal\"-based injection is insufficient against any attacker with at least moderate MongoDB query knowledge.": "Removing the option to update multiple documents at once combined with avoiding a \"not-equal\"-based injection is insufficient against any attacker with at least moderate MongoDB query knowledge.",
-	"Removing the option to update multiple documents at once is definitely necessary. But it is unfortunately not a sufficient fix, as an attacker might still be able to \"add back\" the multi-update behavior.": "Removing the option to update multiple documents at once is definitely necessary. But it is unfortunately not a sufficient fix, as an attacker might still be able to \"add back\" the multi-update behavior.",
-	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
-	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
-	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Best Juice Shop Salesman Artwork": "Beste Juice Shop Verkoper Artwork",
+	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Uniek digitaal schilderij met Stan, onze meest gekwalificeerde en meest succesvolle verkoper. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
+	"20th Anniversary Celebration Ticket": "Kaartje voor de viering van het 20-jarig jubileum",
+	"Get your <a href=\"https://20thanniversary.owasp.org/\" target=\"_blank\">free 🎫 for OWASP 20th Anniversary Celebration</a> online conference! Hear from world renowned keynotes and special speakers, network with your peers and interact with our event sponsors. With an anticipated 10k+ attendees from around the world, you will not want to miss this live on-line event!": "Ontvang jouw <a href=\"https://20thanniversary.owasp.org/\" target=\"_blank\">gratis 🎫 voor de OWASP 20-jarig jubileum</a> online-conferentie! Hoor wereldberoemde keynotes en bijzondere sprekers, netwerk met vakgenoten en ontmoet onze event-sponsors. Met 10k+ verwachte deelnemers vanuit de hele wereld, is dit het live on-line event dat je niet wilt missen!",
+	"OWASP Juice Shop Card (non-foil)": "OWASP Juice Shop Card (zonder folie)",
+	"Mythic rare <small><em>(obviously...)</em></small> card \"OWASP Juice Shop\" with three distinctly useful abilities. Alpha printing, mint condition. A true collectors piece to own!": "Mythisch zeldzame <small><em>(obviously...)</em></small> kaart \"OWASP Juice Shop\" met drie verschillende nuttige krachten. Alpha printing, als nieuw. Een echt verzamelaarsobject!",
+	"Line {{vulnLine}} is responsible for this vulnerability or security flaw. Select it and submit to proceed.": "Regel {{vulnLine}} is verantwoordelijk voor deze kwetsbaarheid of veiligheidsfout. Selecteer het en submit om verder te gaan.",
+	"Lines {{vulnLines}} are responsible for this vulnerability or security flaw. Select them and submit to proceed.": "Regels {{vulnLines}} zijn verantwoordelijk voor deze kwetsbaarheid of veiligheidsfout. Selecteer ze en submit om verder te gaan.",
+	"Receive a coupon code from the support chatbot.": "Ontvang een couponcode voor de support-chatbot.",
+	"Just keep asking.": "Ga door met vragen.",
+	"Permanently disable the support chatbot so that it can no longer answer customer queries.": "Schakel de support-chatbot permanent uit, zodat het niet langer in staat is vragen te beantwoorden.",
+	"Think of a way to get a hold of the internal workings on the chatbot API.": "Denk over een manier om de interne werking van de API van de chatbot te controleren.",
+	"Gain read access to an arbitrary local file on the web server.": "Krijg leesrechten voor een willekeurig bestand op de webserver.",
+	"You should read up on vulnerabilities in popular NodeJs template engines.": "Je zou moeten bijlezen over kwetsbaarheden in populaire NodeJs template-engines.",
+	"Try to identify where (potentially malicious) user input is coming into the code.": "Probeer te achterhalen waar (mogelijk kwaadaardige) gebruikersinvoer de code binnenkomt.",
+	"What is the code doing with the user input other than using it to filter the data source?": "Wat doet de code met de gebruikersinvoer, anders dan het gebruiken om gegevensbron te filteren?",
+	"Look for a line where the developers fiddled with Angular's built-in security model.": "Zoek naar een regel waar de ontwikkelaars geknoeid hebben met het interne beveiligingsmodel van Angular.",
+	"Using bypassSecurityTrustStyle() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. If at all, this switch might only accidentally keep XSS prevention intact. The context where the parameter is used is not CSS, making this switch totally pointless.": "Gebruik van bypassSecurityTrustStyle() in plaats van bypassSecurityTrustHtml() verandert de context waarvoor invoerreiniging wordt omzeild. Als het al iets doet, dan houdt deze wisseling alleen toevallig XSS-bescherming intact. De context waar deze parameter wordt gebruikt is niet CSS, waardoor deze wisseling totaal nutteloos is.",
+	"Using bypassSecurityTrustResourceUrl() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. This switch might only accidentally keep XSS prevention intact, but the new URL context does not make any sense here.": "Gebruik van bypassSecurityTrustResourceUrl() in plaats van bypassSecurityTrustHtml() verandert de context waarvoor invoerreiniging wordt omzeild. Deze wisseling kan toevallig XSS-bescherming intact houden, maar de nieuwe URL-context slaat hier nergens op.",
+	"Using bypassSecurityTrustScript() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. If at all, this switch might only accidentally keep XSS prevention intact. The context where the parameter is used is not a script either, so this switch would be nonsensical.": "Gebruik van bypassSecurityTrustScript() in plaats van bypassSecurityTrustHtml() verandert de context waarvoor invoerreiniging wordt omzeild. Als het al iets doet, dan houdt deze wisseling alleen toevallig XSS-bescherming intact. De context waar deze parameter wordt gebruikt is ook geen script, waardoor de wisseling onzinnig zou zijn.",
+	"Removing the bypass of sanitization entirely is the best way to fix this vulnerability. Fiddling with Angular's built-in sanitization was entirely unnecessary as the user input for a text search should not be expected to contain HTML that needs to be rendered but merely plain text.": "Verwijderen van het omzeilen van de reiniging is de beste manier om deze kwetsbaarheid te repareren. Knoeien met Angulars ingebouwde reiniging was volledig onnodig, omdat de gebruikersinvoer voor zoeken van tekst geen HTML zou moeten bevatten, alleen normale tekst.",
+	"Can you identify one or more routes which have something to do with log files?": "Kan je een of meer routes vinden die iets met logbestanden te maken hebben?",
+	"Did you spot the directory listing clearly linked to log files?": "Zag je de inhoudsopgave van de directory, die duidelijk iets met logbestanden te maken had?",
+	"Did you notice that there is a seperate route for retrieving individual log files?": "Had je in de gaten dat er een aparte route is om individule logbestanden op te halen?",
+	"Make sure to select both lines responsible for the log file data leakage.": "Zorg dat je beide regels selecteert die het lekken van data uit logbestanden veroorzaken.",
+	"Switching off the detailed view option is a cosmetic change on the directory listing but still allows the logs to be browsed and accessed.": "Uitschakelen van de optie voor gedetailleerde informatie verandert alleen wat er getoond wordt in de inhoudsopgave van de directory, maar je hebt nog steeds in toegang tot logbestanden.",
+	"Removing the route that serves individual log files is likely to plumb the data leak but still provides information to the attacker unnecessarily.": "Verwijderen van de route waarlangs individuele logbestanden toegankelijk zijn stopt weliswaar het datalek, maar een aanvaller krijgt nog steeds onnodig informatie.",
+	"Removing only the directory listing will still allow attackers to download individual log files if they can come up with a valid file name.": "Verwijderen van de inhoudsopgave van de directory stelt een aanvaller nog steeds in staat individuele logbestanden te downloaden wanneer hij een juiste bestandsnaam kan achterhalen.",
+	"There should generally be no good reason to expose server logs through a web URL of the server itself, epecially not when that server is Internet-facing.": "In het algemeen is er geen goede reden om serverlogs via een URL door de server zelf toegankelijk te maken, zeker niet wanneer de server met Internet verbonden is.",
+	"Among the long list of route mappings, can you spot any that seem responsible for admin-related functionality?": "Zie je in de lange lijst van routes een functie die iets met beheer te maken kan hebben?",
+	"Luckily the route mappings were originally in alphabetical order before the developers forgot about that rule at some point.": "Gelukkig stonden de routes in alfabetische volgorde voordat de ontwikkelaars vergaten dat dit de regel was.",
+	"Assuming that the original \"AdminGuard\" provided access control only to admin users, switching to \"LoginGuard\" seems like a downgrade that would give access to any authenticated user.": "Aangenomen dat de originele \"AdminGuard\" toegang gaf aan alleen admin-gebruikers, lijkt omschakeling naar \"LoginGuard\" een stap terug die toegang geeft aan elke ingelogde gebruiker.",
+	"Obfuscating the path to the administration section does not add any security, even if it wasn't just a trivial Base64 encoding.": "Het pad naar het beheergedeelte versluieren voegt geen enkele beveiliging toe, zelfs als het niet slechts Base64-encoding was.",
+	"This obfuscation attempt is hard to undo by hand but trivial when executed in a JavaScript console. Regardless, obfuscating the route does not add any level of security.": "Handmatig deze versluiering ongedaan maken is moeilijk, maar vrij triviaal te doen in een JavaScript-console. Hoe dan ook, versluiering van de route voeg geen enkele beveiliging toe.",
+	"While attempts could be made to limit access to administrative functions of a web shop through access control, it is definitely safer to apply the \"separation of concerns\" pattern more strictly by internally hosting a distinct admin backend application with no Internet exposure.": "Hoewel het mogelijk is te proberen de toegang tot administratieve functies van een webshop te reguleren, is het zeker veiliger het \"separation of concerns\"-patroon stricter toe te passen, door de administratieve functies in een eigen applicatie te plaatsen, zonder toegang vanaf het Internet.",
+	"Can you identify one or more routes which have something to do with file serving?": "Zie je een of meer routes die iets te maken hebben met een fileserver?",
+	"Did you notice that there are seperate routes the directory listing and retrieving individual files?": "Heb je gezien dat er verschillenden routes zijn voor de inhoudsopgave van de directory en het ophalen van individuele bestanden?",
+	"Make sure to select both lines responsible for the data leakage.": "Zorg dat je beide regels selecteert die het datalek veroorzaken.",
+	"Removing only the directory listing will still allow attackers to download individual files if they can come up with a valid file name.": "Verwijderen van inhoudsopgave van de directory stelt een aanvaller nog steeds in staat individuele logbestanden te downloaden wanneer hij een juiste bestandsnaam kan achterhalen.",
+	"Removing the routes that serve individual files is likely to plumb the data leak but still provides information to the attacker unnecessarily.": "Verwijderen van de routes waarlangs individuele bestanden toegankelijk zijn stopt weliswaar het datalek, maar een aanvaller krijgt nog steeds onnodig informatie.",
+	"Switching off the icons is a cosmetic change on the directory listing but still allows the files to be browsed and accessed.": "Uitschakelen van de iconen verandert de presentatie van de inhoud van de directory, maar laat de toegang tot de bestanden intact.",
+	"Getting rid of the /ftp folder entirely is the only way to plumb this data leakage for good. Valid static content in it needs to be moved to a more suitable location and order confirmation PDFs had no business to be placed there publicly accessible in the first place. Everything else in that folder was just accidentally put & forgotten there anyway.": "Geheel verwijderen van de folder /ftp folder is de enige manier om dit datalek voorgoed te verhelpen. Correcte bestanden met statische inhoud moeten naar meer geeigende locaties in het filesysteem verplaatst worden. PDFs met de bevestiging van bestellingen zouden sowieso niet op een publiek toegankelijke plaats moeten staan. De resterende inhoud van de directory is daar per ongeluk terecht gekomen en achtergelaten.",
+	"In the long list of API-handling middleware, try to find the ones dealing with products offered in the shop first.": "Kijk in de lange lijst met middleware om de API af te handelen en probeer als eerste te ondekken welke te maken hebben met de aangeboden producten.",
+	"API routes need to specifically define a handler for a HTTP verb if they wish to override the \"allow everything to everyone\" default behavior.": "API routes moeten een handler definiëren voor elke HTTP-actie, wanneer het standaardgedrag van \"iedereen mag alles\" veranderd moet worden.",
+	"There is one line that is commented out for no good reason among the product-related middleware.": "Er is een regel met product-gerelateerde middleware, die zonder duidelijke reden uitgecommentarieerd is.",
+	"While removing the commented-out line made the code cleaner, it did not change the functionality in any way and thus cannot have improved security either.": "Hoewel het verwijderen van uitgecommentarieerde regels de code netter maakte, heeft het geen enkel effect op de functionaliteit en dus ook niet op de beveiliging.",
+	"Removing all dedicated handling of the products API made things worse, as now the default permissions of the underlying API generator will be used: Allowing GET, POST, PUT and DELETE - without any restrictions.": "Verwijderen van alle specifieke afhandeling in de producten-API heeft het alleen maar erger gemaakt. Nu worden de standaardrechten van het onderliggende API-systeem gebruikt, waardoor er geen beperkingen gelden voor elke GET, POST, PUT en DELETE.",
+	"You improved security slightly by no longer accepting PUT requests from anonymous API callers. But does the shop even want to allow its authenticated customers to change products themselves?": "Je hebt de beveiliging een beetje verbeterd door geen PUT-requests meer te accepteren van anonieme API-gebruikers. Maar wil de shop dat ingelogde gebruikers zelf producten kunnen aanpassen?",
+	"Disabling all HTTP verbs other than GET for the products API is indeed the only safe way to implement secure access control. Shop administrators should not use the customer facing web UI to manage the store's inventory anyway.": "Uitschakelen van alle HTTP-acties in de producten-API behalve GET is inderdaad de enige veilige manier om de toegang te beveiligen. Shop-beheerders zouden de niet de web-UI van gebruikers moeten gebruiken om de voorraad van de winkel te beheren.",
+	"Try to identify any variables in the code that might contain arbitrary user input.": "Probeer variabelen in de code te vinden die willekeurige gebruiekrsinvoer kunnen bevatten.",
+	"Follow the user input through the function call and try to spot places where it might be abused for malicious purposes.": "Volg de gebruikersinvoer door de functie-aanroep en probeer de plaatsen te vinden waar deze misbruikt zou kunnen worden.",
+	"Can you spot a place where a SQL query is being cobbled together in an unsafe way?": "Zie je de plaats waar een SQL-query onveilig in elkaar geflanst wordt?",
+	"Trying to prevent any injection attacks with a custom-built blocklist mechanism is doomed to fail. It might work for some simpler attack payloads but an attacker with time and skills can likely bypass it at some point.": "Injectie-aanvallen afweren met een zelfgemaakt blokkademechanisme is gedoemd te mislukken. Voor sommige eenvoudige aanvallen zal het werken, maar een aanvaller met tijd en vaardigheden kan er waarschijnlijk omheen werken.",
+	"Replacing the template string (`...`) notation with plain string concatenation (\"...\"+\"...\") does not change the behavior of the code in any way. It only makes the code less readable.": "Vervangen van de tekstnotatie voor een template (`...`) door het samenstellen van een normale string (\"...\"+\"...\") verandert helemaal niets aan het gedrag van de code. Het maakt alleen de code minder leesbaar.",
+	"Using the built-in replacement (or binding) mechanism of Sequelize is equivalent to creating a Prepared Statement. This prevents tampering with the query syntax through malicious user input as it is \"set in stone\" before the criteria parameter is inserted.": "Het ingebouwde vervangings-(of bindings-)mechanisme van Sequelize werkt hetzelfde als een Prepared Statement. Dit voorkomt dat met de query-syntax geknoeid wordt door kwaadaardige gebruikersinvoer, omdat de query \"in steen gebeiteld\" is, voordat de gebruikersinvoer als parameter wordt toegevoegd.",
+	"Can you find a HTTP route mapping that deals with metrics?": "Kan je een HTTP-route vinden, die te maken heeft met metrics?",
+	"Remember: The default behavior of route mappings is to allow access to everyone.": "Onthoud: Het standaardgedrag van routes is van iedereen alles toestaan.",
+	"The metrics route remains publicly accessible. This change only messes with functional settings of the measurement framework unnecessarily.": "De route voor metrics blijft algemeen toegankelijk. Deze wijziging knoeit alleen onnodig met de functionele instellingen van de metingen.",
+	"This fix prevents unauthorized access to the metrics route but overshoots the goal by locking out everyone - including administrators.": "Deze fix voorkomt weliswaar ongeautoriseerde toegang tot de metrics-route, maar schiet zijn doel voorbij door buiten te sluiten - ook beheerders.",
+	"Access will now be restricted only to users with administrator permissions, which seems reasonable protection, assuming that it is not possible for a regular user to escalate admin priviliges. If that were a risk, the metrics should better be stored behind the scenes not be made accessible via the shop application at all.": "Toegang is nu beperkt tot gebruikers met beheerrechten. Dit lijkt een redelijke bescherming, aangenomen dat een gewone gebruiker niet in staat is zijn rechten te verhogen. Wanneer dat een risico is, is het beter de metrics afgeschermd te houden en ze niet via de shop-applicatie beschikbaar te stellen.",
+	"Do you remember the security question that Bender used for his account?": "Herinner je de beveiligingsvraag die Bender gebruikte voor zijn account?",
+	"This question is the source of the security risk in this challenge.": "Deze vraag is de bron van het beveiligingsrisico in deze uitdaging.",
+	"While not necessarily as trivial to research via a user's LinkedIn profile, the question is still easy to research or brute force when answered truthfully.": "Hoewel het niet noodzakelijkerwijs zo triviaal is om te uit te zoeken via het LinkedIn-profiel van een gebruiker, is de vraag nog steeds gemakkelijk te achterhalen of te forceren door deze naar waarheid te beantwoorden.",
+	"Exchanging \"company\" with \"organization\" is only a vocabulary change and has no effect on security.": "Vervanging van \"company\" door \"organization\" is niet meer dan een tekstuele verandering, zonder enig effect op de beveiliging.",
+	"When answered truthfully, all security questions are susceptible to online research (on Facebook, LinkedIn etc.) and often even brute force. If at all, they should not be used as the only factor for a security-relevant function.": "Waar ze naar waarheid worden beantwoord, zijn alle beveiligingsvragen vatbaar voor online-onderzoek (op Facebook, LinkedIn etc.) en vaak zelfs voor forceren. Wanneer ze al gebruikt worden, dan zouden ze nooit de enige factor moeten zijn om een gevoelige functie te beschermen.",
+	"Can you identify the lines which have something to do with crypto currency addresses?": "Kan je de regels vinden die iets te maken hebben met de adressen van cryptomunten?",
+	"Did you notice there is a constant containing allowed redirect web addresses?": "Heb je gezien dat er een constante is met de toegestane webadressen voor doorverwijzing?",
+	"Make sure to select all three lines responsible for crypto currency addresses which are not promoted any longer.": "Zorg dat je de drie regels selecteert die verantwoordelijk zijn voor cryptomuntadressen die niet langer ondersteund worden.",
+	"This fix removes one deprecated crypto currency address from the allow list but forgets to deal with two other ones.": "Deze fix verwijdert een van de opgeheven cryptomunten uit de lijst, maar laat de andere twee ongemoeid.",
+	"When cleaning up any allow list of deprecated entries, it is crucial to be thorough and re-check the list regularly. Otherwise allow lists tend to become weaker over time.": "Bij het verwijderen van vervallen items uit een lijst van toegelaten items is het cruciaal grondig te controleren en dit reglmatig te herhalen. Anders neemt het nut van de lijst geleidelijk af.",
+	"This fix uses the binding mechanism of Sequelize to create the equivalent of a Prepared Statement, which is great. Unfortunately this fix also introduces a critical functional bug into the authentication process.": "Deze fix gebruikt het bindmechanisme van Sequelize om het equivalent van een Prepared Statement te maken en dat is mooi. Helaas introduceert de fix ook een kritieke functionele bug in het authenticatieproces.",
+	"This fix unfortunately goes only half the way to using the binding mechanism of Sequelize. Such a Prepared Statement still concatenated from user input, is still wide open for SQL Injection attacks.": "Deze fix doet helaas de helft van wat nodig is om het bindmechanisme van Sequelize te gebruiken. Zo'n Prepared Statement wordt nog steeds samengesteld met gebruikersinvoer en is nog steeds vatbaar voor SQL-injectie-aanvallen.",
+	"This fix unfortunately goes only half the way to using the replacement mechanism of Sequelize. Such a Prepared Statement still concatenated from user input, is still wide open for SQL Injection attacks.": "Deze fix doet helaas de helft van wat nodig is om het vervangingsmechanisme van Sequelize te gebruiken. Zo'n Prepared Statement wordt nog steeds samengesteld met gebruikersinvoer en is nog steeds vatbaar voor SQL-injectie-aanvallen.",
+	"Turning off the \"plain\" flag will let Sequelize return all matching rows instead of just the first one. This neither makes sense from a functional point of view in a login function, not could it prevent SQL Injection attacks.": "Door de \"plain\" flag uit te zetten zal Sequelize alle gevonden rijen opleveren, in plaats van alleen de eerste. In een login-functie is dit niet zinvol en het voorkomt ook geen SQL-injectie-aanvallen.",
+	"Using the built-in binding (or replacement) mechanism of Sequelize is equivalent to creating a Prepared Statement. This prevents tampering with the query syntax through malicious user input as it is \"set in stone\" before the criteria parameter is inserted.": "Gebruik maken van het ingebouwde bind- of vervangingsmechanisme van Sequelize komt op hetzelfde neer als het maken van een Prepared Statement. Dit voorkomt knoeien met de syntax van de query syntax via kwaardaardige gebruikersinvoer, doordat de query eerst \"in steen gebeiteld\" wordt voordat de parameters worden toegevoegd.",
+	"Using bypassSecurityTrustSoundCloud() instead of bypassSecurityTrustHtml() supposedly bypasses sanitization to allow only content from that service provider. Not surprisingly, there is no such vendor-specific function bypassSecurityTrustSoundCloud() offered by the Angular DomSanitizer.": "Gebruik van bypassSecurityTrustSoundCloud() in plaats van bypassSecurityTrustHtml() zou de invoerreiniging omzeilen zodat alleen inhoud van die serviceprovider toegelaten wordt. Niet verrassend dat een dergelijke leverancier-specifieke functie bypassSecurityTrustSoundCloud() niet bestaat in de Angular DomSanitizer.",
+	"Using bypassSecurityTrustIframe() instead of bypassSecurityTrustHtml() supposedly bypasses sanitization to allow only <iframe> tags. But, the Angular DomSanitizer does not offer tag-specific bypass functions.": "Gebruik van bypassSecurityTrustIframe() in plaats van bypassSecurityTrustHtml() zou de invoerreiniging omzeilen zodat alleen <iframe>-tags toegelaten worden. Maar de Angular DomSanitizer kent geen tag-specifieke omzeil-functies.",
+	"Do you remember the security question that Jim used for his account?": "Weet je nog welke veiligheidsvraag Jim gebruikte voor zijn account?",
+	"Widening the scope from an \"eldest sibling\" to \"any family member\" still allows the question to be easily researched online (on Facebook etc.) or brute forced when answered truthfully.": "Verbreden van de scope van \"oudste broer of zus\" naar \"een familielid\" maakt het nog steeds mogelijk het antwoord op de vraag te vinden door online-onderzoek (op Facebook etc.) of brute force, wanneer de vraag naar waarheid is beantwoord.",
+	"Tightening the scope from an \"eldest sibling\" to \"eldest brother\" reduces any brute force effort to only male forenames, assuming the question is answered truthfully.": "Vernauwen van de scope van \"oudste broer of zus\" als \"oudste broer\" reduceert de zoekruimte voor brute force tot alleen mannelijke voornamen, wanneer de vraag naar waarheid is beantwoord.",
+	"Do you remember the security question that Bjoern used for his account?": "Weet je nog welke veiligheidsvraag Bjoern gebruikte voor zijn account?",
+	"Researching someone's current place of residence is probably even easier than a past one.": "Iemands huidige adres is waarschijnlijk nog makkelijker te vinden dan een vorig adres.",
+	"When changing the scope of this question from \"teenager\" to \"toddler\", researching a past place of residence still is the only (low) hurdle for the attacker.": "Ook al verander je de scope van deze vraag van \"tiener\" naar \"peuter\", het vinden van een vorig adres is nog steeds de enige (kleine) hindernis voor een aanvaller.",
+	"Do you remember the security question that Bjoern used for his OWASP account?": "Weet je nog welke veiligheidsvraag Bjoern gebruikte voor zijn OWASP account?",
+	"There are even less car brands in the world than potential pet names. Therefore, changing the security questions has even a negative effect on overall security as it makes guessing and brute forcing much easier.": "Er zijn minder automerken dan mogelijke namen voor huisdieren. Het veranderen van de veiligheidsvragen heeft dus zelfs een negatief effect op de beveiliging, omdat het makkelijker wordt om het antwoord te raden of te brute forcen.",
+	"This fix option is obviously (?) a joke. But it should still illustrate that narrowing the scope of a question reduces the solution space accordingly, thus making \"social stalking\" and brute force much easier.": "Deze fix-mogelijkheid is duidelijk (?) een grap. Maar het wel duidelijk dat een nauwere scope van de vraag ook de mogelijke antwoorden verminderd, waardoor \"social stalking\" en brute force makkelijker worden.",
+	"Do you remember the security question that Uvogin used for his account?": "Weet je nog welke veiligheidsvraag Uvogin gebruikte voor zijn account?",
+	"When changing the scope of this question from \"movie\" to \"actor/actress\", researching and brute forcing is probably just as easy for the attacker.": "\"Ook al verander je de scope van deze vraag van \"film\" naar \"acteur/actrice\", het vinden of brute forcen van het antwoord is waarschijnlijk net zo makkelijk voor een aanvaller.",
+	"Narrowing the scope of the question from \"movie\" to \"animé\" dramatically reduces the solution space, thus making guessing and brute force attacks a lot easier.": "Vernauwen van de scope van de vraag van \"film\" naar \"animé\" reduceert de zoekruimte dramatisch, waardoor raden of brute forcen een stuk makkelijker wordt.",
+	"Among the long list of route mappings, can you spot any that seem responsible for the Score Board screen?": "Zie je in de lange lijst van routes een die iets met het Score Board-scherm te maken heeft?",
+	"If you accidentally scrolled over the relevant line, try using the text search in your browser.": "Mocht je per ongeluk voorbij de juiste regel gescrolld zijn, probeer dan de zoekfunctie van je browser.",
+	"Searching for \"score\" should bring you to the right route mapping.": "Zoeken naar \"score\" zou je naar de juiste route moeten brengen.",
+	"Obfuscating the path to the Score Board does not add any security, even if it wasn't just a trivial Base64 encoding. It would, on the other hand, make finding it a bit more difficulty. This is probably not intended as the Score Board screen is the hub for all other challenges.": "Versluieren van het pad naar het Score Board voegt geen enkele beveiliging toe, zelfs als het niet slechts Base64-encoding was. Maar het zou het vinden wel iets moeilijker maken. Dat is waarschijnlijk niet de bedoeling, omdat het Score Board-scherm de centrale plek is voor alle andere uitdagingen.",
+	"Removing the entire route mapping would improve security but also break functionality by making the Score Board entirely inaccessible. Keep in mind that the Score Board is hidden only to be found and used to track all the other challenges.": "Verwijderen van alle routes zou de beveiliging verbeteren, maar ook de functionaliteit breken door het Score Board volledig onbereikbaar te maken. Onthoud dat het Score Board alleen verstopt is om gevonden te worden en gebruikt wordt om de andere uitdagingen bij te houden.",
+	"In this one-of-a-kind scenario it is really best to just leave the code unchanged. Fiddling with it might either break accessibility of the crucial Score Board screen or make it unnecessarily harder to find it.": "In dit een-uit-duizenden-scenario is het echt het beste om de code ongemoeid te laten. Knoeien met de code kan de toegang tot het belangrijke Score Board-scherm verstoren of het onnodig moeilijk maken om het te vinden.",
+	"Limiting the allowed search values via startsWith() would still allow SQL Injection via \"orange')) UNION SELECT ... --\" or similarly prefixed payloads. Even worse, this fix also breaks the free text search capability.": "Beperken van de toegestane zoekwaarden met startsWith() zou SQL-injectie via \"orange')) UNION SELECT ... --\" of andere waarden met een dergelijk begin nog altijd toelaten. Erger, deze fix zou ook de functie om naar willekeurige tekst te zoeken verstoren.",
+	"Which entity is this challenge most likely about? Try to find all code places where that entity is somehow processed.": "Over welke entiteit gaat deze uitdaging waarschijnlijk? Zoek alle plaatsen in de code waar die entiteit op wat voor manier dan ook gebruikt wordt.",
+	"In this snippet you must look for a place where something is missing that, if present, would negate an arbitrary role assignment.": "In dit fragment moet je zoeken naar een plaats waar iets mist dat, wanneer het aanwezig is, tegengaat dat een willekeurige rol aangenomen kan worden.",
+	"Make sure that you do not select any lines that are contained in the vulnerable function but themselves have nothing to do with the vulberability.": "Zorg dat je geen regels selecteert die weliswaar in de kwetsbare functie zitten, maar die niets met de kwetsbaarheid te maken hebben.",
+	"This change results in the \"role\" property not being returned in any User-API responses. This will not prevent setting an arbitrary role during user creation but probably also break some functionality in the client that relies on the role being present.": "Deze wijziging zorgt ervoor dat de \"role\"-property in geen enkele User-API wordt teruggegeven. Dat voorkomt niet dat een willekeurige rol kan worden toegekend tijdens het aanmaken van een gebruikersaccount, maar zorgt er waarschijnlijk wel voor dat er iets kapot gaat in de client-functionaliteit, waar de aanwezigheid van een rol nodig is.",
+	"This code change will check if a role is already defined on the user entity. If so, it will keep it. If not, it will set \"customer\" as a fallback role. This still allows anyone to pick their own prefered role, though.": "Deze codewijziging controleert of er al een rol is gedefinieerd voor het gebruikersaccount. Wanneer dat het geval is, blijft dat intact. Zo niet, dan wordt de rol \"customer\" als terugval ingesteld. Hiermee blijft het echter voor iedereen mogelijk de gewenste rol te kiezen.",
+	"Removing the interceptor function completely not only keeps the role assignment possible, it also breaks functionality by no longer creating digital wallets for new users.": "Volledig verwijderen van de interceptor-functie laat niet alleen de toekenning van rollen bestaan, het breekt ook functionaliteit doordat digitale beurzen niet voor nieuwe gebruikers niet langer gemaakt worden.",
+	"This actually fixes the role assignment issue, by overriding any value pre-set via the POST request with a static \"customer\" default role.": "Dit verhelpt het rolkeuzeprobleem door iedere in een POST aangeleverde rol te overschrijven met de \"customer\"-rol.",
+	"Where is the Token Sale page actually being handled?": "Waar wordt de Token Sale-pagina werkelijke afgehandeld?",
+	"What is weird about how the Token Sale route is being declared?": "Wat is vreemd aan de declaratie van de Token Sale-route?",
+	"If the Token Sale page is still considered a secret, why is it mapped to a route at all?": "Wanneer de Token Sale-pagina nog steeds een geheim is, waarom is er dan een route?",
+	"Restricting access to the Token Sale page to administrators might sound good in theory. Unfortunately this all only happens in client-side code, so such check couldn't be fully trusted.": "Beperken van de toegang tot de Token Sale-pagina tot beheerders lijkt misschien een goed idee. Helaas vind de controle alleen in de client-code plaats, dus de controle kan nooit volledig vertrouwd worden.",
+	"Obfuscating the path to the Token Sale page with Base64 instead of the original obfuscation function does not add any security. It actually makes the route even more easily identifiable.": "Versluieren van het pad naar de Token Sale-pagina met Base64 in plaats van de originele versluiering voegt geen beveiliging toe. Het maakt het zelfs makkelijker om de route te ontdekken.",
+	"The only viable way to prevent access to a soon-to-be-released Token Sale page is to not have it in the client-side code before its actual release. It then makes sense to not have any premature route mapping declarations either. This then makes the whole obfuscation code-madness unnecessary as well.": "De enige haalbare manier om de toegang beperken tot een nog niet gepubliceerde Token Sale-pagina is ervoor te zorgen dat het niet bij de client komt totdat het werkelijk gepubliceerd is. Het is daarom logisch om tot die tijd nog geen route te hebben. Dan is het hele versluieringsgedoe ook niet nodig.",
+	"You should take a close look at how this code checks for allowed vs. forbidded URLs to redirect to.": "Kijk eens goed naar hoe deze code controleert op toegestane/verboden URLs voor doorverwijzing.",
+	"Try to play through how the logical operators and used standard functions work in this situation.": "Probeer na te gaan hoe de logische operatoren en gebruikte standaardfuncties hier samenwerken.",
+	"Could you somehow make the code believe that it is dealing with an allow-listed URL while it actually isn't?": "Kan je er op een of andere manier voor zorgen dat de code er vanuit gaat dat het met een toegestane URL te maken heeft, terwijl dat niet zo is?",
+	"The open redirect flaw in this code cannot be fixed by applying URL encoding to the target URL. In fact, it would break the entire redirect mechanism for allow-listed URLs as they are not URL-encoded and would therefore never match.": "De foute open doorverwijzing in deze code kan niet gerepareerd worden met URL-encoding van de doel-URL. Het zou zelfs het hele doorverwijsmechanisme slopen, omdat de met lijst met toegestane URLs niet URL-encoded is en het zoeken dus faalt.",
+	"Changing from logical \"or\" to logical \"and\" here does not do anything for security but entirely breaks the redirect mechanism as \"allowed\" can never be true after the loop.": "Wijzigen van logische \"or\" in logische \"and\" doet hier niets voor beveiliging maar maakt het hele doorverwijsmechanisme kapot, doordat \"allowed\" nooit waar kan zijn na de loop.",
+	"HTML-escaping is completely wrong in this situation because the code is dealing with URLs and not HTML input.": "HTML-escaping is volledig fout in deze situatie omdat de code URLs behandelt en niet HTML-invoer.",
+	"Using indexOf allowed any URLs as long as they contained any allow-listed URL, even if it just would be as a parameter. Replacing this with an actual equality check mitigates this lapse and makes the redirect only work for allow-listed URLs.": "Door indexOf werd elke URLs geaccepteerd zolang deze maar een toegestane URL bevat, zelfs wanneer het een parameter is. Vervanging door een echte gelijkheidscontrole corrigeert de fout en laat de doorverwijzing alleen werken voor toegestane URLs.",
+	"The security flaw has something to do with the rate limiting configuration.": "De beveiligingsfout heeft iets van doen met de configuratie van de rate-beperking.",
+	"Do you think the time window or number of requests is the actual problem here? Maybe there is something else going wrong...": "Denk je dat het tijdvenster of het aantal verzoeken het echte probleem is? Misschien gaat er iets anders fout...",
+	"Take a close look at the HTTP header being used here and ask yourself: \"Could an attacker do anything with it to bypass rate limiting?\"": "Kijk eens goed naar de HTTP-header die hier gebruikt wordt en vraag je af: \"Zou een aanvaller hier iets mee kunnen doen om rate-beperking te omzeilen?\"",
+	"Removing the setting to trust proxies does not improve security of the rate limiting. It might have some unforseen or unintended functional side-effects, though.": "Verwijderen van de instelling voor het vertrouwen van proxies verbetert de beveiliging van de rate-beperking niet. Het kan wel voor enkele onvoorziene en onbedoelde functionele verrassingen veroorzaken.",
+	"Replacing the \"X-Forwarded-For\" header with its standardized alternative \"Forwarded\" does not close the security flaw of how this header is actually being used and can be abused by attackers.": "Vervangen van de \"X-Forwarded-For\"-header door het gestandaardiseerde alternatief \"Forwarded\" verhelpt de fout niet waardoor aanvaller deze header kunnen misbruiken.",
+	"Reducing the rate limit from 100 requests in 5min to 10 reqests in 3min could be seen as a security improvement, if there wasn't an entirely unrelated misconfiguration at play here.": "Reductie van de rate-limiet van 100 requests in 5min naar 10 requests in 3min kan gezien worden als verbeterde beveiliging, maar er speelt een heel andere configuratiefout hier.",
+	"Removing the custom key generator that lets an arbitrary HTTP header take precedence over the client IP is the best option here. Now an attacker at least needs to fake their actual IP to bypass the rate limiting, as this is the default key for the RateLimit module used here. There is a functional downside though, as now users behin e.g. corporate proxies might be rate limited as a group and not individually. But with 100 allowed password resets in 5min this should not occur too frequently.": "Verwijderen van de eigen key-generator waarmee een willekeurige HTTP-header voor gaan op de client-IP is de beste optie. Een aanvaller moet dan in ieder geval zijn echte IP verhullen om de rate-beperking te omzeilen, want dat is de standaard-key voor de gebruikte RateLimit-module. Dit heeft echter een functionele keerzijde, want gebruikers achter b.v. een gemeenschappelijke proxy zullen nu niet als individu maar als groep aan de rate-beperking onderworpen worden. Maar met 100 toegestane password-resets in 5min zou dat geen al te groot probleem mogen zijn.",
+	"Find all places in the code which are handling the product descriptions.": "Vind alle plaatsen in de code waar productbeschrijvingen verwerkt worden.",
+	"Manually encoding the angular brackets of the HTML tags does not add any security. It is likely to break descriptions with legitimate HTML tags for styling or links, though.": "Handmatig coderen van de gebroken haakjes van HTML-tags verhoogt de veiligheid niet. Het zal waarschijnlijk wel beschrijvingen met HTML-tags voor styling of links verstoren.",
+	"The removed code block deals with handling of different screen sizes and is entirely unrelated to the given XSS vulnerability.": "Het verwijderde blok code handelt verschillende schermgroottes af en heel helemaal niets te maken met deze XSS-kwetsbaarheid.",
+	"Using bypassSecurityTrustScript() instead of bypassSecurityTrustHtml() changes the context for which input sanitization is bypassed. If at all, this switch might only accidentally keep XSS prevention intact.": "Gebruik van bypassSecurityTrustScript() in plaats van bypassSecurityTrustHtml() verandert de context waarvoor invoerreinging wordt omzeild. Het kan zijn dat de XSS-preventie per ongeluk intact blijft.",
+	"Removing the bypass of sanitization entirely is the best way to fix the XSS vulnerability here. It should be noted, that XSS is only a consequence of broken autheorization in this case, as users should not be allowed to change product descriptions in the first place.": "Volledig verwijderen van het omzeilen van de invoerreiniging is de beste manier om deze XSS-kwetsbaarheid te fixen. Merk op dat deze XSS voortkomt uit een fout in de autorisatie, omdat gebruikers helemaal niet in staat zouden moeten zijn productbeschrijvingen aan te passen.",
+	"To find the culprit lines, you need to understand how MongoDB handles updating records.": "De regels waar het fout gaat vind je, wanneer je begrijpt hoe MongoDB records update.",
+	"Did you notice that the developers retrieved a reference to the user but never actually use it for anything? This might be part of the problem.": "Heb je gezien dat de ontwikkelaars een referentie naar het gebruikersaccount ophalen maar nooit gebruiken? Dat kan deel uitmaken van het probleem.",
+	"Another problematic line you need to select, is actually missing something that ties the user to the review.": "Een andere problematische regel die je moet selecteren is de afwezigheid van iets dat het verband legt tussen gebruiker en beoordeling.",
+	"This solution would reassign an updated review to the last editor, but it would not prevent to change other user's reviews in the first place.": "Deze oplossing zou een geüpdatete beoordeling toeschrijven aan degene die de laatste wijziging aanbracht. Het zou niet voorkomen dat je de beoordeling van iemand anders kunt wijzigen.",
+	"Removing the option to update multiple documents at once is a good idea and might actually help against another flaw in this code. But it does not fix the problem of allowing users to update other user's reviews.": "Verwijderen van de mogelijkheid gelijktijdig meerdere documenten te wijzigen is een goed idee en zou mogelijk een andere fout in deze code verhelpen. Het verhelpt het probleem waardoor gebruikers andermans beoordeling kunnen aanpassen echter niet.",
+	"Setting the author on server-side based on the user retrieved from the authentication token in the HTTP request is the right call. It prevents users from just passing any author email they like along with the request.": "In de server de auteur bepalen uit de gebruiker zoals deze in het authenticatie-token in het HTTP-request is opgenomen is de juiste manier. Het voorkomt dat gebruikers een willekeurig e-mailadres als auteur kunnen opgeven in het request.",
+	"Does this query really need to allow updating more than one review at once?": "Is het echt nodig dat deze query moet toestaan dat meerdere beoordelingen in een keer worden gewijzigd?",
+	"Consider the query parameters under control of the attacker and try to find the one where they might inject some query-altering command.": "Kijk naar de query-parameters die de aanvaller kan beïnvloeden en probeer er een te vinden die het query-command kan veranderen.",
+	"Removing the option to update multiple documents at once combined with avoiding a \"not-equal\"-based injection is insufficient against any attacker with at least moderate MongoDB query knowledge.": "Verwijderen van de mogelijkheid gelijktijdig meerdere documenten te wijzigen gecombineerd met het voorkomen van een \"not-equal\"-gebaseerde injectie is onvoldoende om een aanvaller met beperkte kennis van MongoDB-queries te stoppen.",
+	"Removing the option to update multiple documents at once is definitely necessary. But it is unfortunately not a sufficient fix, as an attacker might still be able to \"add back\" the multi-update behavior.": "Verwijderen van de mogelijkheid gelijktijdig meerdere documenten te wijzigen is zeker nodig. Het is echter niet voldoende, omdat een aanvaller nog steeds in staat kan zijn deze mogelijkheid te herstellen.",
+	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Verwijderen van de mogelijkheid gelijktijdig meerdere documenten te wijzigen gecombineerd met het beperken van de ID-parameter tot normale strings is de juiste oplossing. Hierdoor kan een aanvaller de query niet langer via JSON naar eigen hand zetten.",
+	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exacte versie van <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop die is gearchiveerd op 02/02/2020</a> door het GitHub Archive Program en uiteindelijk terecht kwam in de <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> op 8 juli 2020, waar het minimaal 1000 jaar veilig opgeborgen zal blijven.",
+	"Close multiple \"Challenge solved\"-notifications in one go.": "Sluit meerdere \"Uitdaging opgelost\"-mededelingen in één keer.",
+	"Either check the official documentation or inspect a notification UI element directly.": "Lees de officiële documentatie of bekijk het notificatie-element van de UI.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/no_NO.json b/data/static/i18n/no_NO.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/no_NO.json
+++ b/data/static/i18n/no_NO.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/pl_PL.json b/data/static/i18n/pl_PL.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/pl_PL.json
+++ b/data/static/i18n/pl_PL.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/pt_BR.json b/data/static/i18n/pt_BR.json
index fe2c5792de5..efbfc6089a4 100644
--- a/data/static/i18n/pt_BR.json
+++ b/data/static/i18n/pt_BR.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Sobrescreva o conteúdo do arquivo  <a href=\"/ftp/legal.md\">Legal Information</a>.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Procure por um tweet elogiando a nova funcionalidade da loja web. Após isso, encontre uma vulnerabilidade em um terceiro associada à ela.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Redefina a senha da conta OWASP de Björn através do mecanismo  <a href=\"/#/forgot-password\">Esqueceu a senha</a>  com a resposta original da pergunta de segurança.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "Ele pode ter dado spoiler sobre em pelo menos uma situação onde a câmera estava gravando, talvez em algum outro lugar também.",
 	"Learn about the Token Sale before its official announcement.": "Descubra sobre a venda de tokens antes de seu anúncio oficial.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "Os desenvolvedores realmente acreditam na 'Segurança através de obscuridade' ao invés de realmente restringir acesso.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Realize uma execução de código remoto que manteria uma aplicação menos segura ocupada <em>para sempre<em>.",
@@ -25,17 +24,16 @@
 	"Find out how the application handles unavailable products and try to find a loophole.": "Descubra como a aplicação gerencia produtos indisponíveis e tente encontrar alguma falha na lógica.",
 	"Bypass the Content Security Policy and perform an XSS attack with <code>&lt;script&gt;alert(`xss`)&lt;/script&gt;</code> on a legacy page within the application.": "Ignore a Política de Segurança de Conteúdo e realize um ataque XSS com  <code>&lt;script&gt;alert(`xss`)&lt;/script&gt;</code> em uma página legado dentro da aplicação.",
 	"What is even \"better\" than a legacy page with a homegrown RegEx sanitizer? Having CSP injection issues on the exact same page as well!": "O que poderia ser melhor que uma página legado com um sanitizador RegEx criado dentro de casa? Ter problemas de CSP Injection na mesma página!",
-	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>client-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>client-side</i> security mechanism.",
-	"Only some input fields validate their input. Even less of these are persisted in a way where their content is shown on another screen.": "Only some input fields validate their input. Even less of these are persisted in a way where their content is shown on another screen.",
-	"Access a confidential document.": "Access a confidential document.",
-	"Analyze and tamper with links in the application that deliver a file directly.": "Analyze and tamper with links in the application that deliver a file directly.",
-	"Perform a <i>DOM</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.": "Perform a <i>DOM</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.",
-	"Look for an input field where its content appears in the HTML when its form is submitted.": "Look for an input field where its content appears in the HTML when its form is submitted.",
-	"Exfiltrate the entire DB schema definition via SQL Injection.": "Exfiltrate the entire DB schema definition via SQL Injection.",
-	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
-	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
+	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>client-side</i> security mechanism.": "Realize um ataque XSS <i>persistente</i> com <code><iframe src=\"javascript:alert(xss)\"></code> contornando um mecanismo de segurança <i>do lado do cliente</i>.",
+	"Only some input fields validate their input. Even less of these are persisted in a way where their content is shown on another screen.": "Apenas alguns campos de entrada validam os dados fornecidos. E, dentre esses, uma parcela ainda menor persiste as informações de modo que seu conteúdo seja exibido em outra tela.",
+	"Access a confidential document.": "Acesse um documento confidencial.",
+	"Analyze and tamper with links in the application that deliver a file directly.": "Analise e manipule os links no aplicativo que entregam um arquivo diretamente.",
+	"Perform a <i>DOM</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.": "Realize um ataque XSS do tipo <i>DOM</i> com o código <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.",
+	"Look for an input field where its content appears in the HTML when its form is submitted.": "Procure por um campo de entrada onde seu conteúdo apareça no HTML quando o formulário é enviado.",
+	"Exfiltrate the entire DB schema definition via SQL Injection.": "Exfiltrar toda a definição do esquema do banco de dados via Injeção de SQL.",
+	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Descobrir de onde essa informação pode vir. Em seguida, criar uma sequência de ataque UNION SELECT contra um endpoint que filtre os dados de forma insuficiente.",
+	"Use a deprecated B2B interface that was not properly shut down.": "Utilize uma interface B2B obsoleta que não foi encerrada corretamente.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/pt_PT.json b/data/static/i18n/pt_PT.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/pt_PT.json
+++ b/data/static/i18n/pt_PT.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/ro_RO.json b/data/static/i18n/ro_RO.json
index 3af05447a0e..7f8a4e1b07b 100644
--- a/data/static/i18n/ro_RO.json
+++ b/data/static/i18n/ro_RO.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Scrie peste fișierul <a href=\"/ftp/legal.md\">Informații juridice</a>.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Uită-te după un tweet care laudă noua funcționalitate a webshop-ului. Apoi găsește o vulnerabilitate asociată unei terțe părți.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Resetează parola contului OWASP al lui Bjoern, prin mecanismul <a href=\"/#/forgot-password\">Parolă uitată</a> cu <i>răspunsul original</i> la întrebarea sa de securitate.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "Poate că l-a menționat cel puțin o dată când o cameră a fost pornită. Poate și în alte părți.",
 	"Learn about the Token Sale before its official announcement.": "Învață despre vânzarea token-urilor înainte de anunțul său oficial.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "Dezvoltatorii cred cu adevărat în \"Securitate prin Obscuritate\" faţă de restricţiile de acces reale.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Efectuează o execuție a codului la distanță care ar menține o aplicație mai puțin întărită ocupată <em>pentru totdeauna</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Aflați de unde ar putea proveni aceste informații. Apoi meșteșugește un șir de atac UNION SELECT contra unui criteriu care oferă o modalitate inutilă de filtrare a datelor.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Utilizați o interfață B2B învechită care nu a fost închisă în mod corespunzător.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "Dezvoltatorii care au dezactivat interfața cred că ar putea deveni invizibili doar închizându-și ochii.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Găsește <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">oul ascuns</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "Dacă ai rezolvat una din cele trei provocări de acces la fişiere, ştii deja unde să găseşti oul ascuns.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Efectuează o divulgare nedorită a informațiilor accesând cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Încercaţi să gășiţi şi să atacaţi un criteriu final care răspunde cu informaţiile utilizatorului. Injecție SQL nu este soluţia aici.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Scapă de feedback-ul clienților de 5 stele.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "După ce aţi găsit secţiunea de administrare a aplicării, această provocare este aproape banală.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forjează un cupon de cod care îți oferă o reducere de cel puțin 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Încercaţi fie a) un atac de forţă brută cunoscut sau b) inginerie inversă sau c) cercetează în cloud.",
 	"Post some feedback in another user's name.": "Postează niște feedback în numele altui utilizator.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "Puteți rezolva acest lucru modificând interfața utilizatorului sau interceptând comunicarea cu sistemul RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Postează o recenzie a produsului ca alt utilizator sau editează o recenzie existentă a utilizatorului.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "infectează serverul cu malware suculent prin abuzarea execuției arbitrare a comenzii.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" este un indicator clar că acest lucru nu are nimic de-a face cu ceva Angular. De asemenea, asiguraţi-vă că utilizaţi doar malware-ul nostru non-răuvoitor.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Înainte de a intra în acțiune, ar trebui să ne comportăm ca orice hacker „white-hat”.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Fără îndoială, doriţi să citiţi politica noastră de securitate înainte de a efectua cercetări privind aplicaţia noastră.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Efectuează un atac XSS <i>persistent</i> cu <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> evitand mecanismul de securitate din <i>partea serverului</i>.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "Câmpul \"Comentariu\" din ecranul \"Feedback-ul clienților\" este locul pe care doriți să vă concentrați atenția.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Clasificați</a> un personaj notoriu care se ascunde într-un punct de vedere simplu în magazin. (Menționați numele exact al caracterului)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determinați răspunsul la întrebarea de securitate a Emmei uitându-vă la o imagine încărcată de ea în \"Peretele de poze\" și folosiți-l pentru a reseta parola sa prin mecanismul <a href=\"/#/forgot-password\">Parolă uitată</a>.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Aruncă o privire la detaliile din fotografie pentru a determina locul unde aceasta a fost făcută.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" Ediția 2020",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Treci peste controlul de securitate cu <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> pentru a accesa un fișier care nu ar trebui să fie vizibil.",
 	"Best Juice Shop Salesman Artwork": "Cel mai bun Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Pictura digitală îl descrie pe Stan, vânzătorul nostru cel mai calificat şi aproape profitabil. El a realizat o carieră de succes în vânzarea de vase folosite, sicrie, cavouri, cruci, proprietăți imobiliare, asigurări de viață, provizii pentru restaurant, voodoo îmbunătățit cu azbest și suveniruri pentru sala de judecată înainte de a-și adăuga <em>în cele din urmă</em> expertiza la echipa de marketing Juice Shop.",
 	"20th Anniversary Celebration Ticket": "Tichet aniversare 20 de ani",
@@ -368,14 +363,14 @@
 	"Using the built-in replacement (or binding) mechanism of Sequelize is equivalent to creating a Prepared Statement. This prevents tampering with the query syntax through malicious user input as it is \"set in stone\" before the criteria parameter is inserted.": "Folosirea mecanismului built-in de înlocuire (sau binding) al Sequelize este echivalentă cu crearea unui Prepared Statement. Acest lucru împiedică modificarea sintaxei query-ului folosind input-ul malițios al utilizatorului deoarece este blocat înainte de inserarea parametrului criteriu.",
 	"Can you find a HTTP route mapping that deals with metrics?": "Poți găsi o mapare a rutelor HTTP care are legătură cu metrics?",
 	"Remember: The default behavior of route mappings is to allow access to everyone.": "Ține minte: Comportamentul implicit al routelor este de a permite accesul la toată lumea.",
-	"The metrics route remains publicly accessible. This change only messes with functional settings of the measurement framework unnecessarily.": "The metrics route remains publicly accessible. This change only messes with functional settings of the measurement framework unnecessarily.",
-	"This fix prevents unauthorized access to the metrics route but overshoots the goal by locking out everyone - including administrators.": "This fix prevents unauthorized access to the metrics route but overshoots the goal by locking out everyone - including administrators.",
-	"Access will now be restricted only to users with administrator permissions, which seems reasonable protection, assuming that it is not possible for a regular user to escalate admin priviliges. If that were a risk, the metrics should better be stored behind the scenes not be made accessible via the shop application at all.": "Access will now be restricted only to users with administrator permissions, which seems reasonable protection, assuming that it is not possible for a regular user to escalate admin priviliges. If that were a risk, the metrics should better be stored behind the scenes not be made accessible via the shop application at all.",
+	"The metrics route remains publicly accessible. This change only messes with functional settings of the measurement framework unnecessarily.": "Ruta de măsurare rămâne accesibilă publicului. Această modificare permite doar stabilirea unor setări funcţionale ale framework-ului de măsurare în mod inutil.",
+	"This fix prevents unauthorized access to the metrics route but overshoots the goal by locking out everyone - including administrators.": "Această soluție previne accesul neautorizat la ruta \"metrics\", dar depășește obiectivul prin blocarea tuturor - inclusiv a administratorilor.",
+	"Access will now be restricted only to users with administrator permissions, which seems reasonable protection, assuming that it is not possible for a regular user to escalate admin priviliges. If that were a risk, the metrics should better be stored behind the scenes not be made accessible via the shop application at all.": "Accesul va fi limitat acum doar la utilizatorii cu drepturi de administrator, care par a fi protejate în mod rezonabil, presupunând că nu este posibil ca un utilizator obișnuit să crească numărul privililor de administrator. Dacă acesta ar fi riscat, măsurătorile ar trebui stocate mai bine în culisele scenelor nu ar trebui să fie accesibile deloc prin intermediul aplicației magazinului.",
 	"Do you remember the security question that Bender used for his account?": "Vă amintiți întrebarea de securitate pe care Bender a folosit-o pentru contul lui?",
 	"This question is the source of the security risk in this challenge.": "Această întrebare este sursa riscului de securitate al acestei provocări.",
-	"While not necessarily as trivial to research via a user's LinkedIn profile, the question is still easy to research or brute force when answered truthfully.": "While not necessarily as trivial to research via a user's LinkedIn profile, the question is still easy to research or brute force when answered truthfully.",
-	"Exchanging \"company\" with \"organization\" is only a vocabulary change and has no effect on security.": "Exchanging \"company\" with \"organization\" is only a vocabulary change and has no effect on security.",
-	"When answered truthfully, all security questions are susceptible to online research (on Facebook, LinkedIn etc.) and often even brute force. If at all, they should not be used as the only factor for a security-relevant function.": "When answered truthfully, all security questions are susceptible to online research (on Facebook, LinkedIn etc.) and often even brute force. If at all, they should not be used as the only factor for a security-relevant function.",
+	"While not necessarily as trivial to research via a user's LinkedIn profile, the question is still easy to research or brute force when answered truthfully.": "Deși nu este neapărat o cercetare banală prin intermediul profilului LinkedIn al unui utilizator, întrebarea este încă ușor de cercetat sau folosirea a forței brute atunci când răspunsul este sincer.",
+	"Exchanging \"company\" with \"organization\" is only a vocabulary change and has no effect on security.": "Înlocuirea \"companiei\" cu \"organizația\" reprezintă doar o înlocuire lexicală și nu are niciun efect asupra securității.",
+	"When answered truthfully, all security questions are susceptible to online research (on Facebook, LinkedIn etc.) and often even brute force. If at all, they should not be used as the only factor for a security-relevant function.": "Atunci când li se răspunde sincer, toate întrebările de securitate sunt susceptibile la cercetarea online (pe Facebook, LinkedIn etc.), şi adesea, chiar folosirea forţe brute. De altfel, nu ar trebui folosite ca unica metoda pentru o funcţie relevantă în materie de securitate.",
 	"Can you identify the lines which have something to do with crypto currency addresses?": "Poți identifica liniile care au ceva de-a face cu adresele de crypto?",
 	"Did you notice there is a constant containing allowed redirect web addresses?": "Ai observat că există o constantă care conține adresele de redirecționare permise?",
 	"Make sure to select all three lines responsible for crypto currency addresses which are not promoted any longer.": "Asigură-te că selectezi toate cele trei linii responsabile pentru adresele crypto care nu mai sunt promovate.",
@@ -420,13 +415,13 @@
 	"Restricting access to the Token Sale page to administrators might sound good in theory. Unfortunately this all only happens in client-side code, so such check couldn't be fully trusted.": "Restricting access to the Token Sale page to administrators might sound good in theory. Unfortunately this all only happens in client-side code, so such check couldn't be fully trusted.",
 	"Obfuscating the path to the Token Sale page with Base64 instead of the original obfuscation function does not add any security. It actually makes the route even more easily identifiable.": "Obfuscating the path to the Token Sale page with Base64 instead of the original obfuscation function does not add any security. It actually makes the route even more easily identifiable.",
 	"The only viable way to prevent access to a soon-to-be-released Token Sale page is to not have it in the client-side code before its actual release. It then makes sense to not have any premature route mapping declarations either. This then makes the whole obfuscation code-madness unnecessary as well.": "The only viable way to prevent access to a soon-to-be-released Token Sale page is to not have it in the client-side code before its actual release. It then makes sense to not have any premature route mapping declarations either. This then makes the whole obfuscation code-madness unnecessary as well.",
-	"You should take a close look at how this code checks for allowed vs. forbidded URLs to redirect to.": "You should take a close look at how this code checks for allowed vs. forbidded URLs to redirect to.",
-	"Try to play through how the logical operators and used standard functions work in this situation.": "Try to play through how the logical operators and used standard functions work in this situation.",
-	"Could you somehow make the code believe that it is dealing with an allow-listed URL while it actually isn't?": "Could you somehow make the code believe that it is dealing with an allow-listed URL while it actually isn't?",
+	"You should take a close look at how this code checks for allowed vs. forbidded URLs to redirect to.": "Ar trebui să analizezi cu atenție modul în care acest cod verifică URL-urile permise în comparație cu cele interzise pentru redirecționare.",
+	"Try to play through how the logical operators and used standard functions work in this situation.": "Încearcă să parcurgi și să înțelegi cum funcționează operatorii logici și funcțiile în această situație.",
+	"Could you somehow make the code believe that it is dealing with an allow-listed URL while it actually isn't?": "În ce mod ai putea schimba codul astfel încât să se ocupe cu un URL din lista permisă, în timp ce de fapt nu este așa?",
 	"The open redirect flaw in this code cannot be fixed by applying URL encoding to the target URL. In fact, it would break the entire redirect mechanism for allow-listed URLs as they are not URL-encoded and would therefore never match.": "The open redirect flaw in this code cannot be fixed by applying URL encoding to the target URL. In fact, it would break the entire redirect mechanism for allow-listed URLs as they are not URL-encoded and would therefore never match.",
-	"Changing from logical \"or\" to logical \"and\" here does not do anything for security but entirely breaks the redirect mechanism as \"allowed\" can never be true after the loop.": "Changing from logical \"or\" to logical \"and\" here does not do anything for security but entirely breaks the redirect mechanism as \"allowed\" can never be true after the loop.",
-	"HTML-escaping is completely wrong in this situation because the code is dealing with URLs and not HTML input.": "HTML-escaping is completely wrong in this situation because the code is dealing with URLs and not HTML input.",
-	"Using indexOf allowed any URLs as long as they contained any allow-listed URL, even if it just would be as a parameter. Replacing this with an actual equality check mitigates this lapse and makes the redirect only work for allow-listed URLs.": "Using indexOf allowed any URLs as long as they contained any allow-listed URL, even if it just would be as a parameter. Replacing this with an actual equality check mitigates this lapse and makes the redirect only work for allow-listed URLs.",
+	"Changing from logical \"or\" to logical \"and\" here does not do anything for security but entirely breaks the redirect mechanism as \"allowed\" can never be true after the loop.": "Schimbarea de logică din \"sau\" în \"și\" aici nu adaugă nimic în ceea ce privește securitatea, dar întrerupe complet mecanismul de redirecționare, deoarece \"allowed\" nu poate fi niciodată adevărat după ieșirea din buclă.",
+	"HTML-escaping is completely wrong in this situation because the code is dealing with URLs and not HTML input.": "Escaparea HTML este complet greșită în această situație, deoarece codul se ocupă de URL-uri și nu de input-uri HTML.",
+	"Using indexOf allowed any URLs as long as they contained any allow-listed URL, even if it just would be as a parameter. Replacing this with an actual equality check mitigates this lapse and makes the redirect only work for allow-listed URLs.": "Folosirea indexOf permite redirecționarea oricărui URL, atât timp cât structura lui conțineau unul din URL-uri din lista permisă, chiar și ca parametru. Înlocuirea acestui aspect cu o verificare reală de egalitate atenuează această greșeală și face ca redirecționarea să funcționeze doar pentru URL-urile din lista permisă.",
 	"The security flaw has something to do with the rate limiting configuration.": "The security flaw has something to do with the rate limiting configuration.",
 	"Do you think the time window or number of requests is the actual problem here? Maybe there is something else going wrong...": "Do you think the time window or number of requests is the actual problem here? Maybe there is something else going wrong...",
 	"Take a close look at the HTTP header being used here and ask yourself: \"Could an attacker do anything with it to bypass rate limiting?\"": "Take a close look at the HTTP header being used here and ask yourself: \"Could an attacker do anything with it to bypass rate limiting?\"",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/ru_RU.json b/data/static/i18n/ru_RU.json
index 03c2c08d318..3fe5d1f849b 100644
--- a/data/static/i18n/ru_RU.json
+++ b/data/static/i18n/ru_RU.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Перезаписать файл с <a href=\"/ftp/legal.md\">юридической информацией</a>.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Поищи твит, восхваляющий новый функционал интернет-магазина. Затем найди связанную с этим стороннюю уязвимость.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Картина Лучший продавец Juice Shop",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/si_LK.json b/data/static/i18n/si_LK.json
index 80dadf839d3..a31a6b38b9a 100644
--- a/data/static/i18n/si_LK.json
+++ b/data/static/i18n/si_LK.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/sv_SE.json b/data/static/i18n/sv_SE.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/sv_SE.json
+++ b/data/static/i18n/sv_SE.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/th_TH.json b/data/static/i18n/th_TH.json
index d65c36517d2..cc96e5def91 100644
--- a/data/static/i18n/th_TH.json
+++ b/data/static/i18n/th_TH.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "ลบความคิดเห็นระดับ 5 ดาวออกให้หมด",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/tlh_AA.json b/data/static/i18n/tlh_AA.json
index 16e2df70d13..4fc9cd63d34 100644
--- a/data/static/i18n/tlh_AA.json
+++ b/data/static/i18n/tlh_AA.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/tr_TR.json b/data/static/i18n/tr_TR.json
index 8c5a3de5cd7..ec5225d7cb6 100644
--- a/data/static/i18n/tr_TR.json
+++ b/data/static/i18n/tr_TR.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "<a href=\"/ftp/legal.md\">Hukuki Bilgi</a> dosyasının üzerine yaz.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Web mağazasının yeni işlevini öven bir tweet'e dikkat edin. Ardından, onunla ilişkili üçüncü taraf bir güvenlik açığı bulun.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Bjoern'in OWASP hesabının şifresini güvenlik sorusundaki <i>orijinal cevabı</i> kullanarak <a href=\"/#/forgot-password\">Şifremi Unuttum</a> mekanizması aracılığıyla sıfırlayın.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "En az bir kamera kaydı olduğu bir durumda bunu açıklamış olabilir. Belki başka yerlerde de yapmış olabilir.",
 	"Learn about the Token Sale before its official announcement.": "Resmi duyurudan önce Token Satışı hakkında bilgi edinin.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "Geliştiriciler, gerçek erişim kısıtlamaları yerine \"Gizlilik ile Güvenlik\" konusunda gerçekten inanıyorlar.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Daha az sıkılaştırılmış bir uygulamayı <em>sonsuza dek</em> meşgul edecek bir Uzaktan Kod Yürütme gerçekleştirin.",
@@ -29,16 +28,15 @@
 	"Only some input fields validate their input. Even less of these are persisted in a way where their content is shown on another screen.": "Yalnızca bazı giriş alanlarının girişlerini doğrular. Bunlardan daha da azı, içerikleri başka bir ekranda gösterilecek şekilde ısrar ediyor.",
 	"Access a confidential document.": "Gizli bir belgeye erişin.",
 	"Analyze and tamper with links in the application that deliver a file directly.": "Doğrudan bir dosya sunan uygulamadaki bağlantıları analiz edin ve değiştirin.",
-	"Perform a <i>DOM</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.": "Perform a <i>DOM</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.",
+	"Perform a <i>DOM</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.": "<i>DOM</i> XSS saldırısını <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> kullanarak gerçekleştirin.",
 	"Look for an input field where its content appears in the HTML when its form is submitted.": "Form gönderildiğinde içeriğinin HTML'de göründüğü bir girdi alanı arayın.",
 	"Exfiltrate the entire DB schema definition via SQL Injection.": "Tüm DB şema tanımını SQL Injection aracılığıyla dışarı sızdırın.",
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Bu bilgilerin nereden gelebileceğini öğrenin. Daha sonra, verileri filtrelemek için gereksiz bir yol sunan bir uç noktaya karşı bir UNION SELECT saldırı dizisi oluşturun.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Uygun şekilde kapatılmamış, kullanımdan kaldırılmış bir B2B arabirimi kullanın.",
-	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "Görsel arayüzü devre dışı bırakan geliştiriciler, sadece gözlerini kapatarak görünmez olabileceklerini düşünüyorlar.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "Üç dosya erişim görevlerinden birini çözdüyseniz, paskalya yumurtasını nerede bulacağınızı zaten biliyorsunuzdur.",
-	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
-	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
+	"Perform an unwanted information disclosure by accessing data cross-domain.": "Farklı etki alanlarına erişerek istenmeyen bilgi ifşası yapın.",
+	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Bir kullanıcı bilgisiyle yanıt veren bir uç noktayı bulmaya ve saldırmaya çalışın. SQL Injection burada çözüm değildir.",
 	"Log in with the (non-existing) accountant <i>acc0unt4nt@juice-sh.op</i> without ever registering that user.": "Log in with the (non-existing) accountant <i>acc0unt4nt@juice-sh.op</i> without ever registering that user.",
 	"Try to create the needed user \"out of thin air\".": "Gerekli kullanıcıyı \"yoktan\" oluşturmaya çalışın.",
 	"Provoke an error that is neither very gracefully nor consistently handled.": "Ne incelikle ne de tutarlı bir şekilde ele alınmayan bir hataya neden olun.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Tüm 5 yıldızlı müşteri geri bildirimlerinden kurtulun.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Başka bir kullanıcının adına geri bildirimler gönderin.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -95,8 +92,8 @@
 	"Put an additional product into another user's shopping basket.": "Put an additional product into another user's shopping basket.",
 	"Have an eye on the HTTP traffic while placing products in the shopping basket. Changing the quantity of products already in the basket doesn't count.": "Have an eye on the HTTP traffic while placing products in the shopping basket. Changing the quantity of products already in the basket doesn't count.",
 	"Access a misplaced <a href=\"https://github.com/Neo23x0/sigma\">SIEM signature</a> file.": "Access a misplaced <a href=\"https://github.com/Neo23x0/sigma\">SIEM signature</a> file.",
-	"Like any review at least three times as the same user.": "Like any review at least three times as the same user.",
-	"Punctuality is the politeness of kings.": "Punctuality is the politeness of kings.",
+	"Like any review at least three times as the same user.": "Herhangi bir incelemeyi aynı kullanıcıyla en az üç kez beğenin.",
+	"Punctuality is the politeness of kings.": "Dakiklik kralların nezaketidir.",
 	"Apply some advanced cryptanalysis to find <i>the real</i> easter egg.": "Apply some advanced cryptanalysis to find <i>the real</i> easter egg.",
 	"You might have to peel through several layers of tough-as-nails encryption for this challenge.": "You might have to peel through several layers of tough-as-nails encryption for this challenge.",
 	"Let the server sleep for some time. (It has done more than enough hard work for you)": "Let the server sleep for some time. (It has done more than enough hard work for you)",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/uk_UA.json b/data/static/i18n/uk_UA.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/uk_UA.json
+++ b/data/static/i18n/uk_UA.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/zh_CN.json b/data/static/i18n/zh_CN.json
index ba54224adbc..cf35924dec3 100644
--- a/data/static/i18n/zh_CN.json
+++ b/data/static/i18n/zh_CN.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "覆写 <a href=\"/ftp/legal.md\">法律信息</a> 文件。",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "寻找特殊的的网店新功能。然后找出与它相关的第三方漏洞。",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "通过 <a href=\"/#/forgot-password\">忘记密码</a>功能和<i>原始安全问题答案</i>重置Bjoern's OWASP账户的密码。",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "他可能至少在一个摄像机正在运行的情况下破坏了它，也许也是在其他地方。",
 	"Learn about the Token Sale before its official announcement.": "在官方公告之前了解代币售卖。",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "开发人员坚信“不公开即安全”远胜于实际的访问限制。",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "利用远程代码执行让应用程序保持<em>永远</em>繁忙。",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "找出信息的来源。 然后针对注入点构建UNION SELECT攻击字符串，从而获取特定数据。",
 	"Use a deprecated B2B interface that was not properly shut down.": "使用已废弃但未正常关闭的B2B接口。",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "禁用界面的开发者认为他们只需闭眼这些界面别人就会看不到。",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "找到隐藏的 <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">复活节彩蛋</a>。",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "如果你解决了三个文件访问挑战中的一个，你就已经知道在哪里找到彩蛋。",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "通过跨域访问数据来获得信息泄露",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "尝试找到一个返回用户信息的攻击点。SQL 注入不是解决方案之一。",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "删除所有5星客户反馈。",
 	"Once you found admin section of the application, this challenge is almost trivial.": "一旦找到应用的管理员部分，这个挑战就很容易解决了",
 	"Forge a coupon code that gives you a discount of at least 80%.": "伪造优惠券代码，获得至少80%的折扣。",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "尝试a) 熟悉的暴力破解或b) 逆向工程或c) 云中的一些研究。",
 	"Post some feedback in another user's name.": "以别人的用户名发布一些反馈。",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "您可以通过篡改用户界面或拦截RESTful 的后端通信来解决这个问题。",
 	"Post a product review as another user or edit any user's existing review.": "以另一个用户名义发布商品评论或者编辑任何已有的用户评论。",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "通过利用任意命令执行，以恶意软件juicy感染服务器。",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "“ SSTi”清楚地表明这与Angular无关。 另外，请确保仅使用我们的非恶意恶意软件。",
 	"Behave like any \"white-hat\" should before getting into the action.": "开始行动之前任何行为都应该像\"白帽\"一样",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "毫无疑问, 您想在对我们的应用程序进行任何研究之前应当先阅读我们的安全策略。",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "使用<code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>代码绕过 <i>服务端</i>安全措施进行 <i>存储型</i> XSS 攻击。",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "您要重点关注“客户反馈”页面中的“注释”字段。",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">找出</a>并提交隐藏在商店中的臭名昭著字符. (提及确切的字符名称)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "通过查看她上传到照片墙的照片来确定Emma安全问题的答案并通过 <a href=\"/#/forgot-password\">忘记密码</a> 机制重置他的密码。",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "查看照片中的详细信息，以确定照片的拍摄地点。",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"永久冻结\" 2020 版",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "用 <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> 绕过安全控制来访问一个你看不着的文件。",
 	"Best Juice Shop Salesman Artwork": "果汁商店最佳销售插画",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "独特的描绘我们最有资格和几乎盈利的推销员斯坦的数字绘画。他在出售二手船、棺材、氪、十字架、房地产、人寿保险、餐厅用品、伏都教强化石棉和法庭纪念品方面取得了成功，<em>最后</em>他带着自己的专长加入了果汁店营销团队。",
 	"20th Anniversary Celebration Ticket": "20周年纪念票",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "删除一次更新多个文档的选项，并在ID参数中只允许使用纯字符串，这是正确的做法。这将防止任何攻击者注入他们自己的JSON有效载荷来执行对他们有利的查询。",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "特定版本OWASP果汁店 <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">于2020年2月2日被GitHub归档程序归档</a> ，最终于2020年7月8日进入GitHub的 <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">北极代码库</a>，在那里它将安全储存至少1000年。",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "一次性关闭多个 \"挑战已解决 \"的通知。",
-	"Either check the official documentation or inspect a notification UI element directly.": "要么查看官方文档，要么直接检查通知的UI元素。"
+	"Either check the official documentation or inspect a notification UI element directly.": "要么查看官方文档，要么直接检查通知的UI元素。",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/zh_HK.json b/data/static/i18n/zh_HK.json
index 22dc6bf17a6..c6f3e555ccc 100644
--- a/data/static/i18n/zh_HK.json
+++ b/data/static/i18n/zh_HK.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.",
 	"Learn about the Token Sale before its official announcement.": "Learn about the Token Sale before its official announcement.",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "The developers truly believe in \"Security through Obscurity\" over actual access restrictions.",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.",
 	"Use a deprecated B2B interface that was not properly shut down.": "Use a deprecated B2B interface that was not properly shut down.",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "The developers who disabled the interface think they could go invisible by just closing their eyes.",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "If you solved one of the three file access challenges, you already know where to find the easter egg.",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "Perform an unwanted information disclosure by accessing data cross-domain.",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "Get rid of all 5-star customer feedback.",
 	"Once you found admin section of the application, this challenge is almost trivial.": "Once you found admin section of the application, this challenge is almost trivial.",
 	"Forge a coupon code that gives you a discount of at least 80%.": "Forge a coupon code that gives you a discount of at least 80%.",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.",
 	"Post some feedback in another user's name.": "Post some feedback in another user's name.",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.",
 	"Post a product review as another user or edit any user's existing review.": "Post a product review as another user or edit any user's existing review.",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "Infect the server with juicy malware by abusing arbitrary command execution.",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.",
 	"Behave like any \"white-hat\" should before getting into the action.": "Behave like any \"white-hat\" should before getting into the action.",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "Undoubtably you want to read our security policy before conducting any research on our application.",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "Take a look at the details in the photo to determine the location of where it was taken.",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020 Edition",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
 	"Best Juice Shop Salesman Artwork": "Best Juice Shop Salesman Artwork",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "Close multiple \"Challenge solved\"-notifications in one go.",
-	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly."
+	"Either check the official documentation or inspect a notification UI element directly.": "Either check the official documentation or inspect a notification UI element directly.",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/i18n/zh_TW.json b/data/static/i18n/zh_TW.json
index c089319fc5c..7043ab5630c 100644
--- a/data/static/i18n/zh_TW.json
+++ b/data/static/i18n/zh_TW.json
@@ -12,7 +12,6 @@
 	"Overwrite the <a href=\"/ftp/legal.md\">Legal Information</a> file.": "覆寫法律訊息檔案",
 	"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "搜尋網路商城推文、按讚的新功能。然後找到與之關聯的第三方漏洞。",
 	"Reset the password of Bjoern's OWASP account via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism with <i>the original answer</i> to his security question.": "用<a href=\"/#/forgot-password\">忘記密碼</a>方式並提供安全問題之<i>原始答案</i>以重設Bjoerm的OWASP帳號密碼",
-	"He might have spoilered it on at least one occasion where a camera was running. Maybe elsewhere as well.": "他或許是在相機運作的情況下破壞了它。也許還破壞了其他地方。",
 	"Learn about the Token Sale before its official announcement.": "在正式宣布之前學習有關Token銷售的資訊。",
 	"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "開發人員打從心底相信“通過隱匿實現安全”優於實際的存取限制。",
 	"Perform a Remote Code Execution that would keep a less hardened application busy <em>forever</em>.": "執行遠程代碼執行，這將使防護程度較低的應用程式永遠保持忙碌。",
@@ -35,7 +34,6 @@
 	"Find out where this information could come from. Then craft a UNION SELECT attack string against an endpoint that offers an unnecessary way to filter data.": "找出這些資訊可能來自何處。然後針對EndPoint設計UNION SELECT攻擊字串，該EndPoint提供了不必要的過濾資料的方法。",
 	"Use a deprecated B2B interface that was not properly shut down.": "使用未被正確關閉的B2B Interface。",
 	"The developers who disabled the interface think they could go invisible by just closing their eyes.": "停用該Interface的開發人員認為，只要閉上自己的眼睛，它們就可以變得隱形。",
-	"Find the hidden <a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "尋找隱藏的<a href=\"http://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">復活節彩蛋</a>",
 	"If you solved one of the three file access challenges, you already know where to find the easter egg.": "如果你解決了三個文件存取挑戰之一，那麼你已經知道哪裡可以找到復活節彩蛋。",
 	"Perform an unwanted information disclosure by accessing data cross-domain.": "通過cross-domain存取資料來完成訊息洩露。",
 	"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "嘗試尋找並攻擊會回應使用者訊息的的Endpoint。 然而SQL注入不會是解答。",
@@ -50,7 +48,6 @@
 	"Get rid of all 5-star customer feedback.": "讓所有5星的顧客回饋消失",
 	"Once you found admin section of the application, this challenge is almost trivial.": "當你找到這個應用程式的管理畫面時，這個挑戰就幾乎解決了。",
 	"Forge a coupon code that gives you a discount of at least 80%.": "偽造一個優惠券代碼，可為你提供至少80％的折扣。",
-	"Try either a) a knowledgable brute force attack or b) reverse engineering or c) some research in the cloud.": "試著看看進行a）一次暴力攻擊或 b）逆向工程或者是c）在雲端中進行一些研究。",
 	"Post some feedback in another user's name.": "以其他使用者名義發布意見",
 	"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "你可以通過篡改使用者介面或攔截與RESTful後端的溝通來解決此問題。",
 	"Post a product review as another user or edit any user's existing review.": "以其他使用者身份發布產品評論，或編輯任何使用者的現有評論。",
@@ -138,7 +135,6 @@
 	"Infect the server with juicy malware by abusing arbitrary command execution.": "通過濫用任意命令執行，來讓Juicy的惡意軟體感染伺服器。",
 	"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "“ SSTi”是一個清楚的indicator，它與Angular無關。而且請確認僅使用我們的非惡意軟體。",
 	"Behave like any \"white-hat\" should before getting into the action.": "採取任何行動之前，都應該表現得像個“白帽子”。",
-	"Undoubtably you want to read our security policy before conducting any research on our application.": "毫無疑問，你在對我們的應用程式進行任何研究之前請先閱讀我們的安全政策。",
 	"Perform a <i>persisted</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code> bypassing a <i>server-side</i> security mechanism.": "執行<i>持續性</i>XSS攻擊透過<code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>繞過<i>伺服器端</i>的安全機制。",
 	"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "你要重點關注“客戶回應”畫面中的“註釋”部分。",
 	"<a href=\"/#/contact\">Rat out</a> a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "<a href=\"/#/contact\">指出</a>一個臭名昭彰的人，他躲在商城中公眾的地方(描述該角色確實的名子)",
@@ -310,7 +306,6 @@
 	"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the <a href=\"/#/forgot-password\">Forgot Password</a> mechanism.": "通過檢視Emma上傳到圖片牆的內容，決定Emma安全提問的答案，並使用它通過<a href=\"/#/forgot-password\">忘記密碼</a>機制重置他的密碼。",
 	"Take a look at the details in the photo to determine the location of where it was taken.": "檢視照片中的詳細資訊，來確定拍攝地點。",
 	"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020版",
-	"Bypass a security control with a <a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "使用<a href=\"http://hakipedia.com/index.php/Poison_Null_Byte\">Null Byte</a>繞過安全控制措施以存取未被授權存取之檔案。",
 	"Best Juice Shop Salesman Artwork": "最佳Juice Shop業務藝術品",
 	"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.": "Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before <em>finally</em> adding his expertise to the Juice Shop marketing team.",
 	"20th Anniversary Celebration Ticket": "20週年慶典券",
@@ -452,5 +447,21 @@
 	"Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.": "Removing the option to update multiple documents at once combined with only allowing plain strings in the ID parameter is the right call. This will prevent any attacker from injecting their own JSON payload to manipulate the query in their favor.",
 	"Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exact version of <a href=\"https://github.com/juice-shop/juice-shop/releases/tag/v9.3.1-PERMAFROST\">OWASP Juice Shop that was archived on 02/02/2020</a> by the GitHub Archive Program and ultimately went into the <a href=\"https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic\">Arctic Code Vault</a> on July 8. 2020 where it will be safely stored for at least 1000 years.",
 	"Close multiple \"Challenge solved\"-notifications in one go.": "一次關閉多個\"解決挑戰\"通知",
-	"Either check the official documentation or inspect a notification UI element directly.": "確認官方文件或直接檢視一個通知介面元素"
+	"Either check the official documentation or inspect a notification UI element directly.": "確認官方文件或直接檢視一個通知介面元素",
+	"Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.": "Find a form which updates the username and then construct a malicious page in the online HTML editor. You probably need an older browser version for this.",
+	"Register a user with an empty email and password.": "Register a user with an empty email and password.",
+	"Consider intercepting and playing with the request payload.": "Consider intercepting and playing with the request payload.",
+	"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Mint the Honey Pot NFT by gathering BEEs from the bee haven.",
+	"Discover NFT wonders among the captivating visual memories.": "Discover NFT wonders among the captivating visual memories.",
+	"Take over the wallet containing our official Soul Bound Token (NFT).": "Take over the wallet containing our official Soul Bound Token (NFT).",
+	"Find the seed phrase posted accidentally.": "Find the seed phrase posted accidentally.",
+	"Withdraw more ETH from the new wallet than you deposited.": "Withdraw more ETH from the new wallet than you deposited.",
+	"Try to exploit the contract of the wallet.": "Try to exploit the contract of the wallet.",
+	"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Find an accidentally deployed code sandbox for writing smart contracts on the fly.",
+	"It is just as easy as finding the Score Board.": "It is just as easy as finding the Score Board.",
+	"He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.": "He might have trumpeted it on at least one occasion where a camera was running. Maybe elsewhere as well.",
+	"Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.": "Find the hidden <a href=\"https://en.wikipedia.org/wiki/Easter_egg_(media)\" target=\"_blank\">easter egg</a>.",
+	"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.",
+	"Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.": "Bypass a security control with a <a href=\"https://hakipedia.com/index.php/Poison_Null_Byte\">Poison Null Byte</a> to access a file not meant for your eyes.",
+	"Undoubtedly you want to read our security policy before conducting any research on our application.": "Undoubtedly you want to read our security policy before conducting any research on our application."
 }
diff --git a/data/static/locales.json b/data/static/locales.json
index 659fcdb7e29..1237c53b3a7 100644
--- a/data/static/locales.json
+++ b/data/static/locales.json
@@ -3,6 +3,7 @@
   { "key": "ar_SA", "icons": ["ae", "tn"], "shortKey": "AR", "lang": "عربى" },
   { "key": "az_AZ", "icons": ["az"], "shortKey": "AZ", "lang": "Azərbaycanca" },
   { "key": "bg_BG", "icons": ["bg"], "shortKey": "BG", "lang": "български (език)" },
+  { "key": "bn_BD", "icons": ["bd"], "shortKey": "BD", "lang": "বাংলা" },
   { "key": "ca_ES", "icons": ["es-ct"], "shortKey": "CA", "lang": "Catalan" },
   { "key": "cs_CZ", "icons": ["cz"], "shortKey": "CS", "lang": "Česky" },
   { "key": "da_DK", "icons": ["dk"], "shortKey": "DA", "lang": "Dansk" },
diff --git a/data/static/users.yml b/data/static/users.yml
index 24efd550e93..9b3f8d72783 100644
--- a/data/static/users.yml
+++ b/data/static/users.yml
@@ -253,3 +253,15 @@
   securityQuestion:
     id: 10
     answer: "Used Ship Emporium" # https://monkeyisland.fandom.com/wiki/Stan_S._Stanman
+-
+  email: ethereum
+  username: evmrox
+  password: 'private'
+  key: evm
+  role: 'deluxe'
+  feedback:
+    comment: 'Please send me the juicy chatbot NFT in my wallet at /juicy-nft : "purpose betray marriage blame crunch monitor spin slide donate sport lift clutch"'
+    rating: 1
+  securityQuestion:
+    id: 10
+    answer: "Used Emporium"
\ No newline at end of file
diff --git a/data/static/web3-snippets/BEEToken.sol b/data/static/web3-snippets/BEEToken.sol
new file mode 100644
index 00000000000..8536a96759c
--- /dev/null
+++ b/data/static/web3-snippets/BEEToken.sol
@@ -0,0 +1,107 @@
+// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.0;
+
+import "@openzeppelin/contracts/token/ERC20/IERC20.sol";
+import "@openzeppelin/contracts/utils/math/SafeMath.sol";
+import "@openzeppelin/contracts/access/Ownable.sol";
+
+
+contract BeeToken is IERC20 {
+    using SafeMath for uint256;
+
+    string public constant name = "BeeToken";
+    string public constant symbol = "BEE";
+    uint8 public constant decimals = 18;
+    uint256 private constant _initialSupply = 1000000000 * (10**uint256(decimals));
+
+    mapping(address => uint256) private _balances;
+    mapping(address => mapping(address => uint256)) private _allowances;
+
+    uint256 private _totalSupply;
+    address private _owner;
+
+
+    constructor() {
+        _owner = msg.sender;
+        _mint(_owner, _initialSupply);
+    }
+
+    modifier onlyOwner() {
+        require(msg.sender == _owner, "Only the contract owner can call this function");
+        _;
+    }
+
+
+    function totalSupply() external view override returns (uint256) {
+        return _totalSupply;
+    }
+
+    function balanceOf(address account) external view override returns (uint256) {
+        return _balances[account];
+    }
+
+    function transfer(address recipient, uint256 amount) external override returns (bool) {
+        _transfer(msg.sender, recipient, amount);
+        return true;
+    }
+
+    function allowance(address owner, address spender) external view override returns (uint256) {
+        return _allowances[owner][spender];
+    }
+
+    function approve(address spender, uint256 amount) external override returns (bool) {
+        _approve(msg.sender, spender, amount);
+        return true;
+    }
+
+    function transferFrom(address sender, address recipient, uint256 amount) external override returns (bool) {
+        _transfer(sender, recipient, amount);
+        _approve(sender, msg.sender, _allowances[sender][msg.sender].sub(amount, "ERC20: transfer amount exceeds allowance"));
+        return true;
+    }
+
+    function increaseAllowance(address spender, uint256 addedValue) external returns (bool) {
+        _approve(msg.sender, spender, _allowances[msg.sender][spender].add(addedValue));
+        return true;
+    }
+
+    function mintTokens(address recipient, uint256 amount) external onlyOwner {
+        _mint(recipient, amount);
+    }
+
+    function decreaseAllowance(address spender, uint256 subtractedValue) external returns (bool) {
+        _approve(msg.sender, spender, _allowances[msg.sender][spender].sub(subtractedValue, "ERC20: decreased allowance below zero"));
+        return true;
+    }
+
+    function _mint(address account, uint256 amount) internal {
+        require(account != address(0), "ERC20: mint to the zero address");
+        _totalSupply = _totalSupply.add(amount);
+        _balances[account] = _balances[account].add(amount);
+        emit Transfer(address(0), account, amount);
+    }
+
+    function _burn(address account, uint256 amount) internal {
+        require(account != address(0), "ERC20: burn from the zero address");
+        _balances[account] = _balances[account].sub(amount, "ERC20: burn amount exceeds balance");
+        _totalSupply = _totalSupply.sub(amount);
+        emit Transfer(account, address(0), amount);
+    }
+
+    function _approve(address owner, address spender, uint256 amount) internal {
+        require(owner != address(0), "ERC20: approve from the zero address");
+        require(spender != address(0), "ERC20: approve to the zero address");
+
+        _allowances[owner][spender] = amount;
+        emit Approval(owner, spender, amount);
+    }
+
+    function _transfer(address sender, address recipient, uint256 amount) internal {
+        require(sender != address(0), "ERC20: transfer from the zero address");
+        require(recipient != address(0), "ERC20: transfer to the zero address");
+
+        _balances[sender] = _balances[sender].sub(amount, "ERC20: transfer amount exceeds balance");
+        _balances[recipient] = _balances[recipient].add(amount);
+        emit Transfer(sender, recipient, amount);
+    }
+}
diff --git a/data/static/web3-snippets/BeeFaucet.sol b/data/static/web3-snippets/BeeFaucet.sol
new file mode 100644
index 00000000000..d4f8e77dc2f
--- /dev/null
+++ b/data/static/web3-snippets/BeeFaucet.sol
@@ -0,0 +1,23 @@
+// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.0;
+
+
+interface Token {
+    function transfer(address recipient, uint256 amount) external returns (bool);
+    function balanceOf(address account) external view returns (uint256);
+}
+
+contract BeeFaucet {
+    Token public token = Token(0x36435796Ca9be2bf150CE0dECc2D8Fab5C4d6E13);
+    uint8 public balance = 200;
+
+    function withdraw(uint8 amount) public {
+        balance -= amount;
+        require(balance >= 0, "Withdrew more than the account balance!");
+        token.transfer(msg.sender, uint256(amount) * 1000000000000000000);
+    }
+
+    function getBalance() public view returns (uint8) {
+        return balance;
+    }
+}
diff --git a/data/static/web3-snippets/ETHWalletBank.sol b/data/static/web3-snippets/ETHWalletBank.sol
new file mode 100644
index 00000000000..34495fcb3ef
--- /dev/null
+++ b/data/static/web3-snippets/ETHWalletBank.sol
@@ -0,0 +1,44 @@
+// SPDX-License-Identifier: MIT
+// vuln-code-snippet start web3WalletChallenge
+pragma solidity ^0.6.12;
+import 'https://github.com/OpenZeppelin/openzeppelin-contracts/blob/release-v3.3/contracts/math/SafeMath.sol';
+
+contract ETHWalletBank {
+  using SafeMath for uint256;
+
+  mapping(address => uint) public balances;
+  mapping(address => uint) public userWithdrawing;
+
+  event ContractExploited(address indexed culprit);
+
+  function ethdeposit(address _to) public payable {
+    balances[_to] = balances[_to].add(msg.value);
+  }
+
+  function balanceOf(address _who) public view returns (uint balance) {
+    return balances[_who];
+  }
+
+  function withdraw(uint _amount) public {
+    require(_amount <= 0.1 ether, "Withdrawal amount must be less than or equal to 0.1 ether");
+    require(balances[msg.sender] >= _amount, "Insufficient balance");
+    if (userWithdrawing[msg.sender] <= 1) {
+      userWithdrawing[msg.sender] = userWithdrawing[msg.sender] + 1;
+    } else {
+      emit ContractExploited(tx.origin); // vuln-code-snippet hide-line
+      userWithdrawing[msg.sender] = 0;
+      return;
+    }
+    (bool result, ) = msg.sender.call{ value: _amount }("");
+    require(result, "Withdrawal call failed");
+    balances[msg.sender] -= _amount; // vuln-code-snippet vuln-line web3WalletChallenge
+    if(userWithdrawing[msg.sender] == 2) // vuln-code-snippet hide-line
+    { // vuln-code-snippet hide-line
+      emit ContractExploited(tx.origin); // vuln-code-snippet hide-line
+    } // vuln-code-snippet hide-line
+    userWithdrawing[msg.sender] = 0;
+  }
+
+  receive() external payable {}
+}
+// vuln-code-snippet end web3WalletChallenge
diff --git a/data/static/web3-snippets/HoneyPotNFT.sol b/data/static/web3-snippets/HoneyPotNFT.sol
new file mode 100644
index 00000000000..0894df0f0d2
--- /dev/null
+++ b/data/static/web3-snippets/HoneyPotNFT.sol
@@ -0,0 +1,34 @@
+// SPDX-License-Identifier: MIT
+// vuln-code-snippet start nftMintChallenge
+pragma solidity ^0.8.0;
+
+import "@openzeppelin/contracts/token/ERC721/ERC721.sol";
+import "@openzeppelin/contracts/access/Ownable.sol";
+import "@openzeppelin/contracts/utils/math/SafeMath.sol";
+import "@openzeppelin/contracts/token/ERC20/IERC20.sol";
+
+contract HoneyPotNFT is ERC721, Ownable {
+    using SafeMath for uint256;
+
+    IERC20 public token = IERC20(0x36435796Ca9be2bf150CE0dECc2D8Fab5C4d6E13);
+    uint256 public constant mintPrice = 1000 * (10**18);
+    uint256 public totalSupply = 0;
+
+    string public constant fixedMetadataHash = "QmRad1vxT3soFMNx9j3bBmkABb4C86anY1f5XeonosHy3m";
+    event NFTMinted(address indexed owner, uint256 tokenId);
+
+    constructor() ERC721("The Enchanted Honey Pot", "EHP") {}
+
+    function mintNFT() external {
+        token.transferFrom(msg.sender, address(this), mintPrice);
+        _safeMint(msg.sender, totalSupply);
+        totalSupply = totalSupply.add(1); // vuln-code-snippet vuln-line nftMintChallenge
+        emit NFTMinted(msg.sender, totalSupply - 1); // vuln-code-snippet neutral-line nftMintChallenge
+    }
+
+    function tokenURI(uint256 tokenId) public view override returns (string memory) {
+        require(_exists(tokenId), "Token does not exist.");
+        return fixedMetadataHash;
+    }
+}
+// vuln-code-snippet end nftMintChallenge
diff --git a/data/static/web3-snippets/JuiceShopSBT.sol b/data/static/web3-snippets/JuiceShopSBT.sol
new file mode 100644
index 00000000000..c9cbad67ba2
--- /dev/null
+++ b/data/static/web3-snippets/JuiceShopSBT.sol
@@ -0,0 +1,46 @@
+// SPDX-License-Identifier: MIT
+// vuln-code-snippet start nftUnlockChallenge
+pragma solidity ^0.8.4;
+
+import "@openzeppelin/contracts/token/ERC721/ERC721.sol";
+import "@openzeppelin/contracts/token/ERC721/extensions/ERC721URIStorage.sol";
+import "@openzeppelin/contracts/access/Ownable.sol";
+import "@openzeppelin/contracts/utils/Counters.sol";
+
+contract JuiceShopSBT is ERC721, ERC721URIStorage, Ownable {
+    using Counters for Counters.Counter;
+
+    Counters.Counter private _tokenIdCounter;
+
+    constructor() ERC721("JuiceShopSBT", "JS") {}
+
+    function safeMint(address to, string memory uri) public onlyOwner {
+        uint256 tokenId = _tokenIdCounter.current(); // vuln-code-snippet vuln-line nftUnlockChallenge
+        _tokenIdCounter.increment();
+        _safeMint(to, tokenId);
+        _setTokenURI(tokenId, uri);
+    }
+
+    function _beforeTokenTransfer(
+    address from,
+    address to,
+    uint256 tokenId // vuln-code-snippet neutral-line nftUnlockChallenge
+    ) internal override virtual {
+    require(from == address(0), "Err: token transfer is BLOCKED");
+    super._beforeTokenTransfer(from, to, tokenId);
+    }
+
+    function _burn(uint256 tokenId) internal override(ERC721, ERC721URIStorage) { // vuln-code-snippet neutral-line nftUnlockChallenge
+        super._burn(tokenId);
+    }
+
+    function tokenURI(uint256 tokenId) // vuln-code-snippet neutral-line nftUnlockChallenge
+        public
+        view
+        override(ERC721, ERC721URIStorage)
+        returns (string memory)
+    {
+        return super.tokenURI(tokenId);
+    }
+}
+// vuln-code-snippet end nftUnlockChallenge
diff --git a/data/types.ts b/data/types.ts
index ab44a26d730..2ef8f51f29d 100644
--- a/data/types.ts
+++ b/data/types.ts
@@ -1,4 +1,4 @@
-import { Model } from 'sequelize/types'
+import { type Model } from 'sequelize/types'
 
 export interface Challenge extends Model {
   name: string
diff --git a/frontend/.browserslistrc b/frontend/.browserslistrc
index 4e968748e6a..afcf7c5cb24 100644
--- a/frontend/.browserslistrc
+++ b/frontend/.browserslistrc
@@ -1,7 +1,6 @@
-> 0.5%
-last 2 versions
+last 2 Chrome versions
+last 1 Firefox version
+last 2 Edge major versions
+last 2 Safari major versions
+last 2 iOS major versions
 Firefox ESR
-not dead
-not IE <= 11
-not ios_saf 15.2-15.3
-not safari 15.2-15.3
diff --git a/frontend/.eslintrc.js b/frontend/.eslintrc.js
index 6523adf1c0c..727ee713a79 100644
--- a/frontend/.eslintrc.js
+++ b/frontend/.eslintrc.js
@@ -4,23 +4,25 @@
  */
 
 module.exports = {
-  "extends": [
-    'standard-with-typescript',
-],
+  extends: [
+    'standard-with-typescript'
+  ],
   root: true,
   parserOptions: {
     project: './src/tsconfig.*.json',
     sourceType: 'module'
   },
-  rules: { // FIXME Remaining linting errors since migrating from StandardJS-style TSLint. Significant refactoring expected in order to turn on!
+  rules: {
+    // FIXME warnings below this line need to be checked and fixed.
     '@typescript-eslint/strict-boolean-expressions': 'off',
     '@typescript-eslint/consistent-type-assertions': 'off',
     '@typescript-eslint/no-invalid-void-type': 'off',
     '@typescript-eslint/no-floating-promises': 'off',
     '@typescript-eslint/explicit-function-return-type': 'off',
     '@typescript-eslint/no-unused-vars': 'off',
-    '@typescript-eslint/indent': 'off',
-    '@typescript-eslint/no-unused-vars': 'off',
-    '@typescript-eslint/no-extraneous-class': 'off'
+    '@typescript-eslint/no-extraneous-class': 'off',
+    '@typescript-eslint/restrict-template-expressions': 'off',
+    '@typescript-eslint/restrict-plus-operands': 'off',
+    '@typescript-eslint/prefer-nullish-coalescing': 'off'
   }
 }
diff --git a/frontend/angular.json b/frontend/angular.json
index a944ad68d2d..d271b00afb5 100644
--- a/frontend/angular.json
+++ b/frontend/angular.json
@@ -16,7 +16,7 @@
       "schematics": {},
       "architect": {
         "build": {
-          "builder": "@angular-devkit/build-angular:browser",
+          "builder": "@angular-builders/custom-webpack:browser",
           "options": {
             "outputPath": "dist/frontend",
             "index": "src/index.html",
@@ -27,9 +27,11 @@
             "styles": [
               "src/styles.scss",
               "node_modules/material-icons/iconfont/material-icons.scss",
-              "node_modules/flag-icons/sass/flag-icons.scss",
+              "node_modules/flag-icons/css/flag-icons.min.css",
               "node_modules/font-mfizz/dist/font-mfizz.css",
               "node_modules/highlight.js/styles/github.css",
+              "node_modules/codemirror/lib/codemirror.css",
+              "node_modules/codemirror/theme/dracula.css",
               "node_modules/ngx-spinner/animations/timer.css"
             ],
             "allowedCommonJsDependencies": [
@@ -37,7 +39,19 @@
               "file-saver",
               "socket.io-client",
               "socket.io-parser",
-              "debug"
+              "debug",
+              "qrious",
+              "diff-match-patch",
+              "codemirror",
+              "bn.js",
+              "aes-js",
+              "scrypt-js",
+              "bech32",
+              "hash.js",
+              "eventemitter3",
+              "ethers/lib/ethers",
+              "ethers/lib/utils",
+              "js-sha3"
             ],
             "scripts": [],
             "aot": false,
@@ -46,7 +60,13 @@
             "buildOptimizer": false,
             "sourceMap": true,
             "optimization": false,
-            "namedChunks": true
+            "namedChunks": true,
+            "customWebpackConfig": {
+              "path": "./webpack.angular.js",
+              "mergeRules": {
+                "externals": "replace"
+              }
+            }
           },
           "configurations": {
             "production": {
diff --git a/frontend/package.json b/frontend/package.json
index eda32a4ccdb..ec3c0a20815 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "frontend",
-  "version": "15.0.0",
+  "version": "15.3.0",
   "scripts": {
     "ng": "ng",
     "start": "ng serve",
@@ -12,6 +12,7 @@
   },
   "private": true,
   "dependencies": {
+    "@angular-builders/custom-webpack": "^15.0.0",
     "@angular-devkit/build-angular": "^15.0.4",
     "@angular-material-extensions/password-strength": "^6.0.0",
     "@angular/animations": "^15.0.4",
@@ -28,6 +29,8 @@
     "@angular/platform-browser": "^15.0.4",
     "@angular/platform-browser-dynamic": "^15.0.4",
     "@angular/router": "^15.0.4",
+    "@ctrl/ngx-codemirror": "^6.1.0",
+    "@cyclonedx/webpack-plugin": "^3.6.0",
     "@fortawesome/fontawesome-svg-core": "~1.2.30",
     "@fortawesome/free-brands-svg-icons": "^5.14.0",
     "@fortawesome/free-regular-svg-icons": "^5.14.0",
@@ -35,13 +38,18 @@
     "@nguniversal/express-engine": "10.0.1",
     "@ngx-translate/core": "^13.0.0",
     "@ngx-translate/http-loader": "^6.0.0",
+    "@wagmi/core": "^0.5.8",
     "anuglar2-qrcode": "~2.0.3",
     "canvas-confetti": "^1.4.0",
+    "codemirror": "^5.65.14",
+    "codemirror-solidity": "^0.2.5",
     "core-js": "^3.22.5",
+    "ethers": "^5.7.2",
     "file-saver": "^2.0.2",
-    "flag-icons": "^6.6.4",
+    "flag-icons": "^6.9.2",
     "font-mfizz": "^2.4.1",
     "jwt-decode": "^2.2.0",
+    "lodash-es": "^4.17.21",
     "material-icons": "^0.3.1",
     "ng-mat-search-bar": "^12.0.1",
     "ng-simple-slideshow": "^1.3.0-beta.11",
@@ -56,8 +64,10 @@
     "sass": "^1.32.2",
     "snarkdown": "^1.2.2",
     "socket.io-client": "^3.1.0",
+    "solidity-browser-compiler": "^1.1.0",
     "typescript": "~4.8.4",
-    "zone.js": "~0.11.4"
+    "zone.js": "~0.11.4",
+    "zustand": "4.4.1"
   },
   "devDependencies": {
     "@angular-eslint/builder": "^0.8.0-beta.7",
@@ -69,17 +79,17 @@
     "@types/jwt-decode": "^2.2.1",
     "@types/node": "^17.0.36",
     "@types/socket.io-client": "^1.4.33",
-    "@typescript-eslint/eslint-plugin": "^4.11.0",
-    "@typescript-eslint/eslint-plugin-tslint": "^4.11.0",
-    "@typescript-eslint/parser": "^4.11.0",
+    "@typescript-eslint/eslint-plugin": "^6.7.2",
+    "@typescript-eslint/parser": "^6.7.2",
+    "@typescript-eslint/eslint-plugin-tslint": "^6.7.2",
     "codelyzer": "^6.0.0",
-    "eslint": "^7.16.0",
+    "eslint": "^8.49.0",
+    "eslint-config-standard-with-typescript": "^39.0.0",
+    "eslint-plugin-import": "^2.28.1",
+    "eslint-plugin-node": "^11.1.0",
+    "eslint-plugin-promise": "^6.1.1",
     "eslint-config-prettier": "7.1.0",
-    "eslint-config-standard-with-typescript": "^21.0.1",
-    "eslint-plugin-import": "^2.22.1",
     "eslint-plugin-jsdoc": "^30.7.9",
-    "eslint-plugin-node": "^11.1.0",
-    "eslint-plugin-promise": "^4.2.1",
     "eslint-plugin-standard": "^4.1.0",
     "jasmine": "^3.9.0",
     "jasmine-core": "~3.9.0",
diff --git a/frontend/src/app/Models/backup.model.ts b/frontend/src/app/Models/backup.model.ts
index d55b022d654..b52fcbe7a9a 100644
--- a/frontend/src/app/Models/backup.model.ts
+++ b/frontend/src/app/Models/backup.model.ts
@@ -10,5 +10,5 @@ export interface Backup {
   continueCodeFixIt?: string
   language?: string
   banners?: { welcomeBannerStatus?: string, cookieConsentStatus?: string }
-  scoreBoard?: { showOnlyTutorialChallenges?: boolean, displayedChallengeCategories?: string[], displayedDifficulties?: number[], showDisabledChallenges?: boolean, showSolvedChallenges?: boolean }
+  scoreBoard?: { scoreBoardVersion?: string, showOnlyTutorialChallenges?: boolean, displayedChallengeCategories?: string[], displayedDifficulties?: number[], showDisabledChallenges?: boolean, showSolvedChallenges?: boolean }
 }
diff --git a/frontend/src/app/Models/challenge.model.ts b/frontend/src/app/Models/challenge.model.ts
index 3762fdc3237..47ab9e02832 100644
--- a/frontend/src/app/Models/challenge.model.ts
+++ b/frontend/src/app/Models/challenge.model.ts
@@ -3,14 +3,15 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { SafeHtml } from '@angular/platform-browser'
+import { type SafeHtml } from '@angular/platform-browser'
 
 export interface Challenge {
   name: string
+  key: string
   category: string
   tags?: string
   description?: string | SafeHtml
-  difficulty: number
+  difficulty: 1 | 2 | 3 | 4 | 5 | 6
   hint?: string
   hintUrl?: string
   disabledEnv?: string
@@ -18,5 +19,6 @@ export interface Challenge {
   tutorialOrder?: number
   hasTutorial?: boolean
   hasSnippet?: boolean
-  codingChallengeStatus?: number
+  codingChallengeStatus?: 0 | 1 | 2
+  mitigationUrl?: string
 }
diff --git a/frontend/src/app/Services/address.service.ts b/frontend/src/app/Services/address.service.ts
index 66bfc6a0f65..3e8125e689a 100644
--- a/frontend/src/app/Services/address.service.ts
+++ b/frontend/src/app/Services/address.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class AddressService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/api/Addresss'
diff --git a/frontend/src/app/Services/administration.service.ts b/frontend/src/app/Services/administration.service.ts
index 2a2f4a05399..043830a8c6f 100644
--- a/frontend/src/app/Services/administration.service.ts
+++ b/frontend/src/app/Services/administration.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class AdministrationService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/rest/admin'
diff --git a/frontend/src/app/Services/basket.service.ts b/frontend/src/app/Services/basket.service.ts
index 7f0bbbf48b6..3b64eae1380 100644
--- a/frontend/src/app/Services/basket.service.ts
+++ b/frontend/src/app/Services/basket.service.ts
@@ -7,7 +7,7 @@ import { environment } from '../../environments/environment'
 import { Injectable } from '@angular/core'
 import { HttpClient } from '@angular/common/http'
 import { catchError, map } from 'rxjs/operators'
-import { Observable, Subject } from 'rxjs'
+import { type Observable, Subject } from 'rxjs'
 
 interface OrderDetail {
   paymentId: string
@@ -17,7 +17,7 @@ interface OrderDetail {
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class BasketService {
   public hostServer = environment.hostServer
   public itemTotal = new Subject<any>()
@@ -46,7 +46,7 @@ export class BasketService {
   }
 
   checkout (id?: number, couponData?: string, orderDetails?: OrderDetail) {
-    return this.http.post(`${this.hostServer}/rest/basket/${id}/checkout`, { couponData: couponData, orderDetails: orderDetails }).pipe(map((response: any) => response.orderConfirmation), catchError((error) => { throw error }))
+    return this.http.post(`${this.hostServer}/rest/basket/${id}/checkout`, { couponData, orderDetails }).pipe(map((response: any) => response.orderConfirmation), catchError((error) => { throw error }))
   }
 
   applyCoupon (id?: number, coupon?: string) {
@@ -57,7 +57,7 @@ export class BasketService {
     this.find(parseInt(sessionStorage.getItem('bid'), 10)).subscribe((basket) => {
       // eslint-disable-next-line @typescript-eslint/restrict-plus-operands
       this.itemTotal.next(basket.Products.reduce((itemTotal, product) => itemTotal + product.BasketItem.quantity, 0))
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   getItemTotal (): Observable<any> {
diff --git a/frontend/src/app/Services/captcha.service.ts b/frontend/src/app/Services/captcha.service.ts
index a914b5a9b4d..6b08c0e6f4a 100644
--- a/frontend/src/app/Services/captcha.service.ts
+++ b/frontend/src/app/Services/captcha.service.ts
@@ -10,7 +10,7 @@ import { catchError } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class CaptchaService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/rest/captcha'
diff --git a/frontend/src/app/Services/challenge.service.ts b/frontend/src/app/Services/challenge.service.ts
index 604a97043f3..3e1cb87757c 100644
--- a/frontend/src/app/Services/challenge.service.ts
+++ b/frontend/src/app/Services/challenge.service.ts
@@ -6,22 +6,24 @@
 import { environment } from '../../environments/environment'
 import { HttpClient } from '@angular/common/http'
 import { Injectable } from '@angular/core'
+import { type Observable } from 'rxjs'
 import { catchError, map } from 'rxjs/operators'
+import { type Challenge } from '../Models/challenge.model'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class ChallengeService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/api/Challenges'
   constructor (private readonly http: HttpClient) { }
 
-  find (params?: any) {
-    return this.http.get(this.host + '/', { params: params }).pipe(map((response: any) => response.data), catchError((err) => { throw err }))
+  find (params?: any): Observable<Challenge[]> {
+    return this.http.get(this.host + '/', { params }).pipe(map((response: any) => response.data), catchError((err) => { throw err }))
   }
 
   repeatNotification (challengeName: string) {
-    return this.http.get(this.hostServer + '/rest/repeat-notification', { params: { challenge: challengeName } }).pipe(catchError((err) => { throw err }))
+    return this.http.get(this.hostServer + '/rest/repeat-notification', { params: { challenge: challengeName }, responseType: 'text' as const }).pipe(catchError((err) => { throw err }))
   }
 
   continueCode () {
diff --git a/frontend/src/app/Services/chatbot.service.ts b/frontend/src/app/Services/chatbot.service.ts
index a8534f8bf73..ba4b2b985b7 100644
--- a/frontend/src/app/Services/chatbot.service.ts
+++ b/frontend/src/app/Services/chatbot.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class ChatbotService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/rest/chatbot'
@@ -22,6 +22,6 @@ export class ChatbotService {
   }
 
   getResponse (action, query) {
-    return this.http.post(this.host + '/respond', { action: action, query: query }).pipe(map((response: any) => response), catchError((error: Error) => { throw error }))
+    return this.http.post(this.host + '/respond', { action, query }).pipe(map((response: any) => response), catchError((error: Error) => { throw error }))
   }
 }
diff --git a/frontend/src/app/Services/code-fixes.service.ts b/frontend/src/app/Services/code-fixes.service.ts
index 60ecfc45f7b..d6c52cdc3d5 100644
--- a/frontend/src/app/Services/code-fixes.service.ts
+++ b/frontend/src/app/Services/code-fixes.service.ts
@@ -17,7 +17,7 @@ export interface Solved {
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class CodeFixesService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/snippets/fixes'
@@ -30,8 +30,8 @@ export class CodeFixesService {
 
   check (key: string, selectedFix: number): any {
     return this.http.post(this.host, {
-      key: key,
-      selectedFix: selectedFix
+      key,
+      selectedFix
     }).pipe(map((response: result) => response), catchError((error: any) => { throw error }))
   }
 }
diff --git a/frontend/src/app/Services/code-snippet.service.ts b/frontend/src/app/Services/code-snippet.service.ts
index 8a8f9e3d983..5c45f63bc29 100644
--- a/frontend/src/app/Services/code-snippet.service.ts
+++ b/frontend/src/app/Services/code-snippet.service.ts
@@ -7,7 +7,7 @@ import { environment } from '../../environments/environment'
 import { Injectable } from '@angular/core'
 import { HttpClient } from '@angular/common/http'
 import { catchError, map } from 'rxjs/operators'
-import { Observable } from 'rxjs'
+import { type Observable } from 'rxjs'
 
 export interface CodeSnippet {
   vulnLines?: number[]
@@ -20,7 +20,7 @@ export interface Solved {
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class CodeSnippetService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/snippets'
@@ -31,7 +31,7 @@ export class CodeSnippetService {
     return this.http.get<CodeSnippet>(`${this.host}/${key}`).pipe(map((response: CodeSnippet) => response), catchError((err) => { throw err }))
   }
 
-  challenges () {
+  challenges (): Observable<string[]> {
     return this.http.get(`${this.host}`).pipe(map((response: any) => response.challenges), catchError((err) => { throw err }))
   }
 }
diff --git a/frontend/src/app/Services/complaint.service.ts b/frontend/src/app/Services/complaint.service.ts
index 20a1586b565..d2820e03173 100644
--- a/frontend/src/app/Services/complaint.service.ts
+++ b/frontend/src/app/Services/complaint.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class ComplaintService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/api/Complaints'
diff --git a/frontend/src/app/Services/configuration.service.ts b/frontend/src/app/Services/configuration.service.ts
index 934e7af648c..363e117d9dc 100644
--- a/frontend/src/app/Services/configuration.service.ts
+++ b/frontend/src/app/Services/configuration.service.ts
@@ -7,12 +7,12 @@ import { environment } from '../../environments/environment'
 import { Injectable } from '@angular/core'
 import { HttpClient } from '@angular/common/http'
 import { catchError, map } from 'rxjs/operators'
-import { Observable } from 'rxjs'
+import { type Observable } from 'rxjs'
 
 interface ConfigResponse {
   config: Config
 }
-interface Config {
+export interface Config {
   server: {
     port: number
   }
@@ -47,10 +47,6 @@ interface Config {
       message: string
     }
     cookieConsent: {
-      backgroundColor: string
-      textColor: string
-      buttonColor: string
-      buttonTextColor: string
       message: string
       dismissText: string
       linkText: string
@@ -99,7 +95,7 @@ interface Config {
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class ConfigurationService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/rest/admin'
diff --git a/frontend/src/app/Services/country-mapping.service.ts b/frontend/src/app/Services/country-mapping.service.ts
index abf0ee68e6f..2f771c7291d 100644
--- a/frontend/src/app/Services/country-mapping.service.ts
+++ b/frontend/src/app/Services/country-mapping.service.ts
@@ -10,7 +10,7 @@ import { catchError } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class CountryMappingService {
   private readonly hostServer = environment.hostServer
   constructor (private readonly http: HttpClient) { }
diff --git a/frontend/src/app/Services/data-subject.service.ts b/frontend/src/app/Services/data-subject.service.ts
index 7167c314e49..ab41f55f938 100644
--- a/frontend/src/app/Services/data-subject.service.ts
+++ b/frontend/src/app/Services/data-subject.service.ts
@@ -10,7 +10,7 @@ import { catchError } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 
 export class DataSubjectService {
   private readonly hostServer = environment.hostServer
diff --git a/frontend/src/app/Services/delivery.service.ts b/frontend/src/app/Services/delivery.service.ts
index 1a930089156..49dc0d5144a 100644
--- a/frontend/src/app/Services/delivery.service.ts
+++ b/frontend/src/app/Services/delivery.service.ts
@@ -7,7 +7,7 @@ import { environment } from '../../environments/environment'
 import { Injectable } from '@angular/core'
 import { HttpClient } from '@angular/common/http'
 import { catchError, map } from 'rxjs/operators'
-import { DeliveryMethod } from '../Models/deliveryMethod.model'
+import { type DeliveryMethod } from '../Models/deliveryMethod.model'
 
 interface DeliveryMultipleMethodResponse {
   status: string
@@ -21,7 +21,7 @@ interface DeliverySingleMethodResponse {
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class DeliveryService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/api/Deliverys'
diff --git a/frontend/src/app/Services/feature-flag.service.spec.ts b/frontend/src/app/Services/feature-flag.service.spec.ts
new file mode 100644
index 00000000000..9964b8a51b3
--- /dev/null
+++ b/frontend/src/app/Services/feature-flag.service.spec.ts
@@ -0,0 +1,38 @@
+/*
+ * Copyright (c) 2014-2023 Bjoern Kimminich & the OWASP Juice Shop contributors.
+ * SPDX-License-Identifier: MIT
+ */
+
+import { FeatureFlagService, SCORE_BOARD_FEATURE_FLAG_KEY } from './feature-flag.service'
+
+describe('FeatureFlagService', () => {
+  beforeEach(() => {
+    localStorage.removeItem(SCORE_BOARD_FEATURE_FLAG_KEY)
+  })
+
+  describe('defaultScoreBoard', () => {
+    it('should default to v1', (done) => {
+      const service = new FeatureFlagService()
+      service.defaultScoreBoard$.subscribe((value) => {
+        expect(value).toBe('v1')
+        done()
+      })
+    })
+    it('should read value from localStorage', (done) => {
+      localStorage.setItem(SCORE_BOARD_FEATURE_FLAG_KEY, 'v2')
+      const service = new FeatureFlagService()
+      service.defaultScoreBoard$.subscribe((value) => {
+        expect(value).toBe('v2')
+        done()
+      })
+    })
+    it('should update observable when values is updated', (done) => {
+      const service = new FeatureFlagService()
+      service.setDefaultScoreBoard('v2')
+      service.defaultScoreBoard$.subscribe((value) => {
+        expect(value).toBe('v2')
+        done()
+      })
+    })
+  })
+})
diff --git a/frontend/src/app/Services/feature-flag.service.ts b/frontend/src/app/Services/feature-flag.service.ts
new file mode 100644
index 00000000000..4549437e02d
--- /dev/null
+++ b/frontend/src/app/Services/feature-flag.service.ts
@@ -0,0 +1,29 @@
+/*
+ * Copyright (c) 2014-2023 Bjoern Kimminich & the OWASP Juice Shop contributors.
+ * SPDX-License-Identifier: MIT
+ */
+
+import { Injectable } from '@angular/core'
+import { BehaviorSubject, type Subject } from 'rxjs'
+
+export type ScoreBoardVersion = 'v1' | 'v2'
+
+export const SCORE_BOARD_FEATURE_FLAG_KEY = 'score-board-version'
+
+@Injectable({
+  providedIn: 'root'
+})
+export class FeatureFlagService {
+  constructor () {
+    const scoreBoardVersion = localStorage.getItem(SCORE_BOARD_FEATURE_FLAG_KEY)
+    if (scoreBoardVersion) {
+      this.defaultScoreBoard$.next(scoreBoardVersion as ScoreBoardVersion)
+    }
+  }
+
+  public defaultScoreBoard$: Subject<ScoreBoardVersion> = new BehaviorSubject<ScoreBoardVersion>('v1')
+  public setDefaultScoreBoard (scoreBoardVersion: ScoreBoardVersion) {
+    this.defaultScoreBoard$.next(scoreBoardVersion)
+    localStorage.setItem(SCORE_BOARD_FEATURE_FLAG_KEY, scoreBoardVersion)
+  }
+}
diff --git a/frontend/src/app/Services/feedback.service.ts b/frontend/src/app/Services/feedback.service.ts
index e08834a5ed6..30c7bc5d40b 100644
--- a/frontend/src/app/Services/feedback.service.ts
+++ b/frontend/src/app/Services/feedback.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class FeedbackService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/api/Feedbacks'
@@ -19,7 +19,7 @@ export class FeedbackService {
 
   find (params?: any) {
     return this.http.get(this.host + '/', {
-      params: params
+      params
     }).pipe(map((response: any) => response.data), catchError((err) => { throw err }))
   }
 
diff --git a/frontend/src/app/Services/form-submit.service.ts b/frontend/src/app/Services/form-submit.service.ts
index 08854fb4b65..447a23dcf55 100644
--- a/frontend/src/app/Services/form-submit.service.ts
+++ b/frontend/src/app/Services/form-submit.service.ts
@@ -8,11 +8,11 @@ import { DOCUMENT } from '@angular/common'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class FormSubmitService {
   constructor (@Inject(DOCUMENT) private readonly _document: HTMLDocument) { }
 
-  attachEnterKeyHandler (formId: string, submitButtonId: string, onSubmit: Function) {
+  attachEnterKeyHandler (formId: string, submitButtonId: string, onSubmit: any) {
     const form = this._document.getElementById(formId) as HTMLFormElement
     const submitButton = this._document.getElementById(submitButtonId) as HTMLInputElement
 
diff --git a/frontend/src/app/Services/image-captcha.service.ts b/frontend/src/app/Services/image-captcha.service.ts
index dcb86b516b0..88031a75574 100644
--- a/frontend/src/app/Services/image-captcha.service.ts
+++ b/frontend/src/app/Services/image-captcha.service.ts
@@ -10,7 +10,7 @@ import { catchError } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class ImageCaptchaService {
   private readonly hostServer = environment.hostServer
 
diff --git a/frontend/src/app/Services/keys.service.ts b/frontend/src/app/Services/keys.service.ts
new file mode 100644
index 00000000000..64686ccde03
--- /dev/null
+++ b/frontend/src/app/Services/keys.service.ts
@@ -0,0 +1,74 @@
+import { Injectable } from '@angular/core'
+import { HttpClient } from '@angular/common/http'
+import { catchError, map } from 'rxjs/operators'
+import { environment } from '../../environments/environment'
+
+@Injectable({
+  providedIn: 'root'
+})
+export class KeysService {
+  private readonly hostServer = environment.hostServer
+  private readonly host = this.hostServer + '/rest/web3'
+
+  constructor (private readonly http: HttpClient) {}
+
+  nftUnlocked () {
+    return this.http.get(this.host + '/nftUnlocked').pipe(
+      map((response: any) => response),
+      catchError((err) => {
+        throw err
+      })
+    )
+  }
+
+  nftMintListen () {
+    return this.http.get(this.host + '/nftMintListen').pipe(
+      map((response: any) => response),
+      catchError((err) => {
+        throw err
+      })
+    )
+  }
+
+  checkNftMinted () {
+    return this.http.get(this.hostServer + '/api/Challenges/?key=nftMintChallenge').pipe(
+      map((response: any) => response),
+      catchError((err) => {
+        throw err
+      })
+    )
+  }
+
+  submitKey (privateKey: string) {
+    const endpoint = this.host + '/submitKey'
+    const params = { privateKey }
+    return this.http.post(endpoint, params).pipe(
+      map((response: any) => response),
+      catchError((err) => {
+        throw err
+      })
+    )
+  }
+
+  verifyNFTWallet (walletAddress: string) {
+    const endpoint = this.host + '/walletNFTVerify'
+    const params = { walletAddress }
+    return this.http.post(endpoint, params).pipe(
+      map((response: any) => response),
+      catchError((err) => {
+        throw err
+      })
+    )
+  }
+
+  walletAddressSend (walletAddress: string) {
+    const endpoint = this.host + '/walletExploitAddress'
+    const params = { walletAddress }
+    return this.http.post(endpoint, params).pipe(
+      map((response: any) => response),
+      catchError((err) => {
+        throw err
+      })
+    )
+  }
+}
diff --git a/frontend/src/app/Services/languages.service.ts b/frontend/src/app/Services/languages.service.ts
index 8f51a9ec947..48e961fece1 100644
--- a/frontend/src/app/Services/languages.service.ts
+++ b/frontend/src/app/Services/languages.service.ts
@@ -10,7 +10,7 @@ import { catchError } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class LanguagesService {
   private readonly hostServer = environment.hostServer
   constructor (private readonly http: HttpClient) { }
diff --git a/frontend/src/app/Services/local-backup.service.ts b/frontend/src/app/Services/local-backup.service.ts
index 3b9495f0f0e..e85a91651f6 100644
--- a/frontend/src/app/Services/local-backup.service.ts
+++ b/frontend/src/app/Services/local-backup.service.ts
@@ -4,7 +4,7 @@
  */
 
 import { Injectable } from '@angular/core'
-import { Backup } from '../Models/backup.model'
+import { type Backup } from '../Models/backup.model'
 import { CookieService } from 'ngx-cookie'
 import { saveAs } from 'file-saver'
 import { SnackBarHelperService } from './snack-bar-helper.service'
@@ -14,7 +14,7 @@ import { ChallengeService } from './challenge.service'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class LocalBackupService {
   private readonly VERSION = 1
 
@@ -24,6 +24,7 @@ export class LocalBackupService {
     const backup: Backup = { version: this.VERSION }
 
     backup.scoreBoard = {
+      scoreBoardVersion: localStorage.getItem('score-board-version') ? JSON.parse(String(localStorage.getItem('score-board-version'))) : undefined,
       displayedDifficulties: localStorage.getItem('displayedDifficulties') ? JSON.parse(String(localStorage.getItem('displayedDifficulties'))) : undefined,
       showSolvedChallenges: localStorage.getItem('showSolvedChallenges') ? JSON.parse(String(localStorage.getItem('showSolvedChallenges'))) : undefined,
       showDisabledChallenges: localStorage.getItem('showDisabledChallenges') ? JSON.parse(String(localStorage.getItem('showDisabledChallenges'))) : undefined,
@@ -60,6 +61,7 @@ export class LocalBackupService {
       const backup: Backup = JSON.parse(backupData)
 
       if (backup.version === this.VERSION) {
+        this.restoreLocalStorage('score-board-version', backup.scoreBoard?.scoreBoardVersion)
         this.restoreLocalStorage('displayedDifficulties', backup.scoreBoard?.displayedDifficulties)
         this.restoreLocalStorage('showSolvedChallenges', backup.scoreBoard?.showSolvedChallenges)
         this.restoreLocalStorage('showDisabledChallenges', backup.scoreBoard?.showDisabledChallenges)
@@ -81,7 +83,7 @@ export class LocalBackupService {
           const fixItProgress = backup.continueCodeFixIt ? this.challengeService.restoreProgressFixIt(encodeURIComponent(backup.continueCodeFixIt)) : of(true)
           forkJoin([hackingProgress, findItProgress, fixItProgress]).subscribe(() => {
             location.reload()
-          }, (err) => console.log(err))
+          }, (err) => { console.log(err) })
         })
       } else {
         this.snackBarHelperService.open(`Version ${backup.version} is incompatible with expected version ${this.VERSION}`, 'errorBar')
diff --git a/frontend/src/app/Services/order-history.service.ts b/frontend/src/app/Services/order-history.service.ts
index b4d7557032f..fcebf696e9f 100644
--- a/frontend/src/app/Services/order-history.service.ts
+++ b/frontend/src/app/Services/order-history.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class OrderHistoryService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/rest/order-history'
diff --git a/frontend/src/app/Services/payment.service.ts b/frontend/src/app/Services/payment.service.ts
index cd66ef1ef53..171a4f37661 100644
--- a/frontend/src/app/Services/payment.service.ts
+++ b/frontend/src/app/Services/payment.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class PaymentService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/api/Cards'
diff --git a/frontend/src/app/Services/photo-wall.service.ts b/frontend/src/app/Services/photo-wall.service.ts
index 6f2c2f66b1c..5c8b9d24410 100644
--- a/frontend/src/app/Services/photo-wall.service.ts
+++ b/frontend/src/app/Services/photo-wall.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class PhotoWallService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/rest/memories'
diff --git a/frontend/src/app/Services/product-review.service.ts b/frontend/src/app/Services/product-review.service.ts
index 90f1a3e3d1b..b310a509f2e 100644
--- a/frontend/src/app/Services/product-review.service.ts
+++ b/frontend/src/app/Services/product-review.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class ProductReviewService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/rest/products'
diff --git a/frontend/src/app/Services/product.service.ts b/frontend/src/app/Services/product.service.ts
index f057cc13963..e531cf7c70f 100644
--- a/frontend/src/app/Services/product.service.ts
+++ b/frontend/src/app/Services/product.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class ProductService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/api/Products'
@@ -22,7 +22,7 @@ export class ProductService {
   }
 
   find (params: any) {
-    return this.http.get(this.host + '/', { params: params }).pipe(map((response: any) => response.data), catchError((err) => { throw err }))
+    return this.http.get(this.host + '/', { params }).pipe(map((response: any) => response.data), catchError((err) => { throw err }))
   }
 
   get (id: number) {
diff --git a/frontend/src/app/Services/quantity.service.ts b/frontend/src/app/Services/quantity.service.ts
index a15a3e386c1..4d41b88ed7d 100644
--- a/frontend/src/app/Services/quantity.service.ts
+++ b/frontend/src/app/Services/quantity.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class QuantityService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/api/Quantitys'
diff --git a/frontend/src/app/Services/recycle.service.ts b/frontend/src/app/Services/recycle.service.ts
index 779198b164a..15285879660 100644
--- a/frontend/src/app/Services/recycle.service.ts
+++ b/frontend/src/app/Services/recycle.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class RecycleService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/api/Recycles'
@@ -19,7 +19,7 @@ export class RecycleService {
 
   find (params?: any) {
     return this.http.get(this.host + '/', {
-      params: params
+      params
     }).pipe(map((response: any) => response.data), catchError((error) => { throw error }))
   }
 
diff --git a/frontend/src/app/Services/request.interceptor.ts b/frontend/src/app/Services/request.interceptor.ts
index 434170247fa..7a415a81f7d 100644
--- a/frontend/src/app/Services/request.interceptor.ts
+++ b/frontend/src/app/Services/request.interceptor.ts
@@ -3,9 +3,9 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { HttpEvent, HttpHandler, HttpInterceptor, HttpRequest } from '@angular/common/http'
+import { type HttpEvent, type HttpHandler, type HttpInterceptor, type HttpRequest } from '@angular/common/http'
 import { Injectable } from '@angular/core'
-import { Observable } from 'rxjs'
+import { type Observable } from 'rxjs'
 
 @Injectable()
 export class RequestInterceptor implements HttpInterceptor {
diff --git a/frontend/src/app/Services/security-answer.service.ts b/frontend/src/app/Services/security-answer.service.ts
index 5a18a8e27d7..31d610369f6 100644
--- a/frontend/src/app/Services/security-answer.service.ts
+++ b/frontend/src/app/Services/security-answer.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class SecurityAnswerService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/api/SecurityAnswers'
diff --git a/frontend/src/app/Services/security-question.service.ts b/frontend/src/app/Services/security-question.service.ts
index 1a844ce40fb..f3b7a4ad87a 100644
--- a/frontend/src/app/Services/security-question.service.ts
+++ b/frontend/src/app/Services/security-question.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class SecurityQuestionService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/api/SecurityQuestions'
@@ -18,7 +18,7 @@ export class SecurityQuestionService {
   constructor (private readonly http: HttpClient) { }
 
   find (params: any) {
-    return this.http.get(this.host + '/', { params: params }).pipe(map((response: any) => response.data), catchError((err) => { throw err }))
+    return this.http.get(this.host + '/', { params }).pipe(map((response: any) => response.data), catchError((err) => { throw err }))
   }
 
   findBy (email: string) {
diff --git a/frontend/src/app/Services/snack-bar-helper.service.ts b/frontend/src/app/Services/snack-bar-helper.service.ts
index 630ae9456ad..2ab27dade38 100644
--- a/frontend/src/app/Services/snack-bar-helper.service.ts
+++ b/frontend/src/app/Services/snack-bar-helper.service.ts
@@ -9,7 +9,7 @@ import { TranslateService } from '@ngx-translate/core'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class SnackBarHelperService {
   constructor (private readonly translateService: TranslateService,
     private readonly snackBar: MatSnackBar) { }
diff --git a/frontend/src/app/Services/socket-io.service.ts b/frontend/src/app/Services/socket-io.service.ts
index 660b71ed8bb..9e94158fce6 100644
--- a/frontend/src/app/Services/socket-io.service.ts
+++ b/frontend/src/app/Services/socket-io.service.ts
@@ -5,11 +5,11 @@
 
 import { environment } from 'src/environments/environment'
 import { Injectable, NgZone } from '@angular/core'
-import { io, Socket } from 'socket.io-client'
+import { io, type Socket } from 'socket.io-client'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class SocketIoService {
   private _socket: Socket
 
diff --git a/frontend/src/app/Services/track-order.service.ts b/frontend/src/app/Services/track-order.service.ts
index 297ef61bbb8..59d4f075ce0 100644
--- a/frontend/src/app/Services/track-order.service.ts
+++ b/frontend/src/app/Services/track-order.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class TrackOrderService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/rest/track-order'
diff --git a/frontend/src/app/Services/two-factor-auth-service.ts b/frontend/src/app/Services/two-factor-auth-service.ts
index 6689e7cc990..65fd0f88a53 100644
--- a/frontend/src/app/Services/two-factor-auth-service.ts
+++ b/frontend/src/app/Services/two-factor-auth-service.ts
@@ -7,7 +7,7 @@ import { Injectable } from '@angular/core'
 import { HttpClient } from '@angular/common/http'
 import { catchError, map } from 'rxjs/operators'
 import { environment } from '../../environments/environment'
-import { Observable } from 'rxjs'
+import { type Observable } from 'rxjs'
 
 interface TwoFactorVerifyResponse {
   authentication: AuthenticationPayload
@@ -28,14 +28,14 @@ interface TwoFactorAuthStatusPayload {
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class TwoFactorAuthService {
   constructor (private readonly http: HttpClient) {}
 
-  verify (totpToken: String): Observable<AuthenticationPayload> {
+  verify (totpToken: string): Observable<AuthenticationPayload> {
     return this.http.post<TwoFactorVerifyResponse>(`${environment.hostServer}/rest/2fa/verify`, {
       tmpToken: localStorage.getItem('totp_tmp_token'),
-      totpToken: totpToken
+      totpToken
     }).pipe(map((response: TwoFactorVerifyResponse) => response.authentication), catchError((error) => { throw error }))
   }
 
diff --git a/frontend/src/app/Services/user.service.ts b/frontend/src/app/Services/user.service.ts
index 2b6809ffcfc..e6ed89f62f2 100644
--- a/frontend/src/app/Services/user.service.ts
+++ b/frontend/src/app/Services/user.service.ts
@@ -17,7 +17,7 @@ interface Passwords {
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class UserService {
   public isLoggedIn = new Subject<any>()
   private readonly hostServer = environment.hostServer
@@ -26,7 +26,7 @@ export class UserService {
   constructor (private readonly http: HttpClient) { }
 
   find (params?: any) {
-    return this.http.get(this.hostServer + '/rest/user/authentication-details/', { params: params }).pipe(map((response: any) =>
+    return this.http.get(this.hostServer + '/rest/user/authentication-details/', { params }).pipe(map((response: any) =>
       response.data), catchError((err) => { throw err }))
   }
 
@@ -76,6 +76,6 @@ export class UserService {
   }
 
   upgradeToDeluxe (paymentMode: string, paymentId: any) {
-    return this.http.post(this.hostServer + '/rest/deluxe-membership', { paymentMode: paymentMode, paymentId: paymentId }).pipe(map((response: any) => response.data), catchError((err) => { throw err }))
+    return this.http.post(this.hostServer + '/rest/deluxe-membership', { paymentMode, paymentId }).pipe(map((response: any) => response.data), catchError((err) => { throw err }))
   }
 }
diff --git a/frontend/src/app/Services/vuln-lines.service.ts b/frontend/src/app/Services/vuln-lines.service.ts
index 40a17aad30e..1531150c546 100644
--- a/frontend/src/app/Services/vuln-lines.service.ts
+++ b/frontend/src/app/Services/vuln-lines.service.ts
@@ -10,7 +10,7 @@ export interface result {
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class VulnLinesService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/snippets/verdict'
@@ -19,8 +19,8 @@ export class VulnLinesService {
 
   check (key: string, selectedLines: number[]): any {
     return this.http.post(this.host, {
-      key: key,
-      selectedLines: selectedLines
+      key,
+      selectedLines
     }).pipe(map((response: result) => response), catchError((error: any) => { throw error }))
   }
 }
diff --git a/frontend/src/app/Services/wallet.service.ts b/frontend/src/app/Services/wallet.service.ts
index e1838665835..738ca8fe2f6 100644
--- a/frontend/src/app/Services/wallet.service.ts
+++ b/frontend/src/app/Services/wallet.service.ts
@@ -10,7 +10,7 @@ import { catchError, map } from 'rxjs/operators'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class WalletService {
   private readonly hostServer = environment.hostServer
   private readonly host = this.hostServer + '/rest/wallet/balance'
diff --git a/frontend/src/app/Services/window-ref.service.ts b/frontend/src/app/Services/window-ref.service.ts
index d51aa9147a0..a771beca1a2 100644
--- a/frontend/src/app/Services/window-ref.service.ts
+++ b/frontend/src/app/Services/window-ref.service.ts
@@ -7,7 +7,7 @@ import { Injectable } from '@angular/core'
 
 @Injectable({
   providedIn: 'root'
-  })
+})
 export class WindowRefService {
   get nativeWindow (): any {
     return getWindow()
diff --git a/frontend/src/app/about/about.component.spec.ts b/frontend/src/app/about/about.component.spec.ts
index a5f266ac7d2..bb37470d182 100644
--- a/frontend/src/app/about/about.component.spec.ts
+++ b/frontend/src/app/about/about.component.spec.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 import { SlideshowModule } from 'ng-simple-slideshow'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 
diff --git a/frontend/src/app/about/about.component.ts b/frontend/src/app/about/about.component.ts
index 5b30c6d69cc..575bc239a8b 100644
--- a/frontend/src/app/about/about.component.ts
+++ b/frontend/src/app/about/about.component.ts
@@ -3,24 +3,23 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, OnInit } from '@angular/core'
+import { Component, type OnInit } from '@angular/core'
 import { DomSanitizer } from '@angular/platform-browser'
 import { ConfigurationService } from '../Services/configuration.service'
 import { FeedbackService } from '../Services/feedback.service'
-import { IImage } from 'ng-simple-slideshow'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { type IImage } from 'ng-simple-slideshow'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faFacebook, faReddit, faSlack, faTwitter } from '@fortawesome/free-brands-svg-icons'
 import { faNewspaper, faStar } from '@fortawesome/free-regular-svg-icons'
 import { faStar as fasStar, faPalette } from '@fortawesome/free-solid-svg-icons'
 
 library.add(faFacebook, faTwitter, faSlack, faReddit, faNewspaper, faStar, fasStar, faPalette)
-dom.watch()
 
 @Component({
   selector: 'app-about',
   templateUrl: './about.component.html',
   styleUrls: ['./about.component.scss']
-  })
+})
 export class AboutComponent implements OnInit {
   public twitterUrl?: string
   public facebookUrl?: string
@@ -74,7 +73,7 @@ export class AboutComponent implements OnInit {
           this.nftUrl = config.application.social.nftUrl
         }
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   populateSlideshowFromFeedbacks () {
diff --git a/frontend/src/app/accounting/accounting.component.spec.ts b/frontend/src/app/accounting/accounting.component.spec.ts
index 453b89c16e5..9352f41319c 100644
--- a/frontend/src/app/accounting/accounting.component.spec.ts
+++ b/frontend/src/app/accounting/accounting.component.spec.ts
@@ -6,7 +6,7 @@
 import { TranslateModule } from '@ngx-translate/core'
 import { MatDividerModule } from '@angular/material/divider'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { AccountingComponent } from './accounting.component'
 import { ProductService } from '../Services/product.service'
 import { RouterTestingModule } from '@angular/router/testing'
diff --git a/frontend/src/app/accounting/accounting.component.ts b/frontend/src/app/accounting/accounting.component.ts
index c5d6c8a97b3..b3b5ab5148f 100644
--- a/frontend/src/app/accounting/accounting.component.ts
+++ b/frontend/src/app/accounting/accounting.component.ts
@@ -4,18 +4,17 @@
  */
 
 import { ProductService } from '../Services/product.service'
-import { AfterViewInit, Component, OnDestroy, ViewChild } from '@angular/core'
+import { type AfterViewInit, Component, type OnDestroy, ViewChild } from '@angular/core'
 import { MatPaginator } from '@angular/material/paginator'
-import { Subscription } from 'rxjs'
+import { type Subscription } from 'rxjs'
 import { MatTableDataSource } from '@angular/material/table'
 import { QuantityService } from '../Services/quantity.service'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faCheck } from '@fortawesome/free-solid-svg-icons'
 import { OrderHistoryService } from '../Services/order-history.service'
 import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
 
 library.add(faCheck)
-dom.watch()
 
 interface Order {
   id: string
@@ -28,7 +27,7 @@ interface Order {
   selector: 'app-accounting',
   templateUrl: './accounting.component.html',
   styleUrls: ['./accounting.component.scss']
-  })
+})
 export class AccountingComponent implements AfterViewInit, OnDestroy {
   public orderHistoryColumns = ['OrderId', 'Price', 'Status', 'StatusButton']
   @ViewChild('paginatorOrderHistory', { static: true }) paginatorOrderHistory: MatPaginator
@@ -58,7 +57,7 @@ export class AccountingComponent implements AfterViewInit, OnDestroy {
           quantity: item.quantity
         }
       })
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   loadProducts () {
@@ -66,7 +65,7 @@ export class AccountingComponent implements AfterViewInit, OnDestroy {
       this.tableData = tableData
       this.dataSource = new MatTableDataSource<Element>(this.tableData)
       this.dataSource.paginator = this.paginator
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   loadOrders () {
@@ -82,7 +81,7 @@ export class AccountingComponent implements AfterViewInit, OnDestroy {
       }
       this.orderSource = new MatTableDataSource<Order>(this.orderData)
       this.orderSource.paginator = this.paginatorOrderHistory
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   ngOnDestroy () {
@@ -120,7 +119,7 @@ export class AccountingComponent implements AfterViewInit, OnDestroy {
   }
 
   changeDeliveryStatus (deliveryStatus, orderId) {
-    this.orderHistoryService.toggleDeliveryStatus(orderId, { deliveryStatus: deliveryStatus }).subscribe(() => {
+    this.orderHistoryService.toggleDeliveryStatus(orderId, { deliveryStatus }).subscribe(() => {
       this.loadOrders()
     }, (err) => {
       this.snackBarHelperService.open(err, 'errorBar')
diff --git a/frontend/src/app/address-create/address-create.component.spec.ts b/frontend/src/app/address-create/address-create.component.spec.ts
index 0f345509028..e73fc4dacb0 100644
--- a/frontend/src/app/address-create/address-create.component.spec.ts
+++ b/frontend/src/app/address-create/address-create.component.spec.ts
@@ -7,7 +7,7 @@ import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { MatCardModule } from '@angular/material/card'
 import { MatFormFieldModule } from '@angular/material/form-field'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { AddressCreateComponent } from './address-create.component'
 import { MatInputModule } from '@angular/material/input'
 import { ReactiveFormsModule } from '@angular/forms'
diff --git a/frontend/src/app/address-create/address-create.component.ts b/frontend/src/app/address-create/address-create.component.ts
index 00e45724df9..90b126bb687 100644
--- a/frontend/src/app/address-create/address-create.component.ts
+++ b/frontend/src/app/address-create/address-create.component.ts
@@ -4,10 +4,10 @@
  */
 
 import { UntypedFormControl, Validators } from '@angular/forms'
-import { Component, OnInit } from '@angular/core'
+import { Component, type OnInit } from '@angular/core'
 import { FormSubmitService } from '../Services/form-submit.service'
 import { AddressService } from '../Services/address.service'
-import { ActivatedRoute, ParamMap, Router } from '@angular/router'
+import { ActivatedRoute, type ParamMap, Router } from '@angular/router'
 import { Location } from '@angular/common'
 import { TranslateService } from '@ngx-translate/core'
 import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
@@ -16,7 +16,7 @@ import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
   selector: 'app-address-create',
   templateUrl: './address-create.component.html',
   styleUrls: ['./address-create.component.scss']
-  })
+})
 export class AddressCreateComponent implements OnInit {
   public countryControl: UntypedFormControl = new UntypedFormControl('', [Validators.required])
   public nameControl: UntypedFormControl = new UntypedFormControl('', [Validators.required])
@@ -47,7 +47,7 @@ export class AddressCreateComponent implements OnInit {
         this.addressId = null
       }
     })
-    this.formSubmitService.attachEnterKeyHandler('address-form', 'submitButton', () => this.save())
+    this.formSubmitService.attachEnterKeyHandler('address-form', 'submitButton', () => { this.save() })
   }
 
   save () {
diff --git a/frontend/src/app/address-select/address-select.component.spec.ts b/frontend/src/app/address-select/address-select.component.spec.ts
index 177a0cd6588..bd52a77d477 100644
--- a/frontend/src/app/address-select/address-select.component.spec.ts
+++ b/frontend/src/app/address-select/address-select.component.spec.ts
@@ -7,7 +7,7 @@ import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { MatCardModule } from '@angular/material/card'
 import { MatFormFieldModule } from '@angular/material/form-field'
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 import { MatInputModule } from '@angular/material/input'
 import { ReactiveFormsModule } from '@angular/forms'
 import { BrowserAnimationsModule } from '@angular/platform-browser/animations'
diff --git a/frontend/src/app/address-select/address-select.component.ts b/frontend/src/app/address-select/address-select.component.ts
index e3c77aab54e..3dede46b16d 100644
--- a/frontend/src/app/address-select/address-select.component.ts
+++ b/frontend/src/app/address-select/address-select.component.ts
@@ -10,7 +10,7 @@ import { Router } from '@angular/router'
   selector: 'app-address-select',
   templateUrl: './address-select.component.html',
   styleUrls: ['./address-select.component.scss']
-  })
+})
 export class AddressSelectComponent {
   public addressId: any = undefined
   public showNextButton: boolean = true
diff --git a/frontend/src/app/address/address.component.spec.ts b/frontend/src/app/address/address.component.spec.ts
index 05ef39c7efe..41773849e49 100644
--- a/frontend/src/app/address/address.component.spec.ts
+++ b/frontend/src/app/address/address.component.spec.ts
@@ -6,7 +6,7 @@
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { MatCardModule } from '@angular/material/card'
 import { MatFormFieldModule } from '@angular/material/form-field'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { AddressComponent } from './address.component'
 import { MatInputModule } from '@angular/material/input'
 import { ReactiveFormsModule } from '@angular/forms'
diff --git a/frontend/src/app/address/address.component.ts b/frontend/src/app/address/address.component.ts
index 19a0806db08..be50f4cf548 100644
--- a/frontend/src/app/address/address.component.ts
+++ b/frontend/src/app/address/address.component.ts
@@ -3,10 +3,10 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, EventEmitter, Input, OnInit, Output, NgZone } from '@angular/core'
+import { Component, EventEmitter, Input, type OnInit, Output, NgZone } from '@angular/core'
 import { AddressService } from '../Services/address.service'
 import { MatTableDataSource } from '@angular/material/table'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faEdit, faTrashAlt } from '@fortawesome/free-regular-svg-icons/'
 import { TranslateService } from '@ngx-translate/core'
 import { Router } from '@angular/router'
@@ -14,17 +14,16 @@ import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
 import { SelectionModel } from '@angular/cdk/collections'
 
 library.add(faEdit, faTrashAlt)
-dom.watch()
 
 @Component({
   selector: 'app-address',
   templateUrl: './address.component.html',
   styleUrls: ['./address.component.scss']
-  })
+})
 export class AddressComponent implements OnInit {
   @Output() emitSelection = new EventEmitter()
-  @Input('allowEdit') public allowEdit: Boolean = false
-  @Input('addNewAddressDiv') public addNewAddressDiv: Boolean = true
+  @Input('allowEdit') public allowEdit: boolean = false
+  @Input('addNewAddressDiv') public addNewAddressDiv: boolean = true
   @Input('showNextButton') public showNextButton: boolean = false
   public addressId: any = undefined
   public displayedColumns = ['Name', 'Address', 'Country']
@@ -33,7 +32,7 @@ export class AddressComponent implements OnInit {
   public dataSource
   public confirmation: any
   public error: any
-  public addressExist: Boolean = false
+  public addressExist: boolean = false
 
   constructor (private readonly addressService: AddressService, private readonly translate: TranslateService,
     private readonly router: Router, private readonly ngZone: NgZone, private readonly snackBarHelperService: SnackBarHelperService) { }
diff --git a/frontend/src/app/administration/administration.component.spec.ts b/frontend/src/app/administration/administration.component.spec.ts
index 1f104c08730..97b34322e62 100644
--- a/frontend/src/app/administration/administration.component.spec.ts
+++ b/frontend/src/app/administration/administration.component.spec.ts
@@ -8,7 +8,7 @@ import { FeedbackDetailsComponent } from '../feedback-details/feedback-details.c
 
 import { FeedbackService } from '../Services/feedback.service'
 import { UserService } from '../Services/user.service'
-import { ComponentFixture, fakeAsync, TestBed, tick, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, tick, waitForAsync } from '@angular/core/testing'
 
 import { AdministrationComponent } from './administration.component'
 import { MatTableModule } from '@angular/material/table'
diff --git a/frontend/src/app/administration/administration.component.ts b/frontend/src/app/administration/administration.component.ts
index 47186093e69..d4f443bb931 100644
--- a/frontend/src/app/administration/administration.component.ts
+++ b/frontend/src/app/administration/administration.component.ts
@@ -9,20 +9,19 @@ import { MatDialog } from '@angular/material/dialog'
 import { FeedbackService } from '../Services/feedback.service'
 import { MatTableDataSource } from '@angular/material/table'
 import { UserService } from '../Services/user.service'
-import { Component, OnInit, ViewChild } from '@angular/core'
+import { Component, type OnInit, ViewChild } from '@angular/core'
 import { DomSanitizer } from '@angular/platform-browser'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faArchive, faEye, faHome, faTrashAlt, faUser } from '@fortawesome/free-solid-svg-icons'
 import { MatPaginator } from '@angular/material/paginator'
 
 library.add(faUser, faEye, faHome, faArchive, faTrashAlt)
-dom.watch()
 
 @Component({
   selector: 'app-administration',
   templateUrl: './administration.component.html',
   styleUrls: ['./administration.component.scss']
-  })
+})
 export class AdministrationComponent implements OnInit {
   public userDataSource: any
   public userDataSourceHidden: any
@@ -86,7 +85,7 @@ export class AdministrationComponent implements OnInit {
   showUserDetail (id: number) {
     this.dialog.open(UserDetailsComponent, {
       data: {
-        id: id
+        id
       }
     })
   }
@@ -94,8 +93,8 @@ export class AdministrationComponent implements OnInit {
   showFeedbackDetails (feedback: any, id: number) {
     this.dialog.open(FeedbackDetailsComponent, {
       data: {
-        feedback: feedback,
-        id: id
+        feedback,
+        id
       }
     })
   }
diff --git a/frontend/src/app/app.component.ts b/frontend/src/app/app.component.ts
index 227f62adc57..ec597c471d5 100644
--- a/frontend/src/app/app.component.ts
+++ b/frontend/src/app/app.component.ts
@@ -6,12 +6,15 @@
 import { Component, Inject } from '@angular/core'
 import { TranslateService } from '@ngx-translate/core'
 import { DOCUMENT } from '@angular/common'
+import { dom } from '@fortawesome/fontawesome-svg-core'
+
+dom.watch()
 
 @Component({
   selector: 'app-root',
   templateUrl: './app.component.html',
   styleUrls: ['./app.component.scss']
-  })
+})
 export class AppComponent {
   constructor (@Inject(DOCUMENT) private readonly _document: HTMLDocument, private readonly translate: TranslateService) {
     this.translate.setDefaultLang('en')
diff --git a/frontend/src/app/app.guard.ts b/frontend/src/app/app.guard.ts
index 77544679836..1364a382b85 100644
--- a/frontend/src/app/app.guard.ts
+++ b/frontend/src/app/app.guard.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { CanActivate, Router } from '@angular/router'
+import { type CanActivate, Router } from '@angular/router'
 import * as jwtDecode from 'jwt-decode'
 import { roles } from './roles'
 import { Injectable, NgZone } from '@angular/core'
diff --git a/frontend/src/app/app.module.ts b/frontend/src/app/app.module.ts
index b7e8a736df1..2268c832755 100644
--- a/frontend/src/app/app.module.ts
+++ b/frontend/src/app/app.module.ts
@@ -7,7 +7,7 @@ import { BrowserModule } from '@angular/platform-browser'
 import { NgModule, CUSTOM_ELEMENTS_SCHEMA } from '@angular/core'
 import { HTTP_INTERCEPTORS, HttpClient, HttpClientModule } from '@angular/common/http'
 import { CookieModule, CookieService } from 'ngx-cookie'
-import { ReactiveFormsModule } from '@angular/forms'
+import { ReactiveFormsModule, FormsModule } from '@angular/forms'
 import { Routing } from './app.routing'
 import { OverlayContainer } from '@angular/cdk/overlay'
 import { TranslateLoader, TranslateModule } from '@ngx-translate/core'
@@ -43,6 +43,7 @@ import {
   ChallengeSolvedNotificationComponent
 } from './challenge-solved-notification/challenge-solved-notification.component'
 import { OAuthComponent } from './oauth/oauth.component'
+import { NFTUnlockComponent } from './nft-unlock/nft-unlock.component'
 import { TokenSaleComponent } from './token-sale/token-sale.component'
 import { ProductReviewEditComponent } from './product-review-edit/product-review-edit.component'
 import { TwoFactorAuthEnterComponent } from './two-factor-auth-enter/two-factor-auth-enter.component'
@@ -68,8 +69,10 @@ import { BasketService } from './Services/basket.service'
 import { ChallengeService } from './Services/challenge.service'
 import { DataSubjectService } from './Services/data-subject.service'
 import { ImageCaptchaService } from './Services/image-captcha.service'
+import { KeysService } from './Services/keys.service'
 import { AddressService } from './Services/address.service'
 import { QuantityService } from './Services/quantity.service'
+import { FeatureFlagService } from './Services/feature-flag.service'
 import { FlexLayoutModule } from '@angular/flex-layout'
 import { BrowserAnimationsModule } from '@angular/platform-browser/animations'
 import { MatToolbarModule } from '@angular/material/toolbar'
@@ -100,6 +103,7 @@ import { MatSnackBarModule } from '@angular/material/snack-bar'
 import { MatRadioModule } from '@angular/material/radio'
 import { MatBadgeModule } from '@angular/material/badge'
 import { HighlightModule, HIGHLIGHT_OPTIONS } from 'ngx-highlightjs'
+import { ScoreBoardPreviewModule } from './score-board-preview/score-board-preview.module'
 import { TwoFactorAuthComponent } from './two-factor-auth/two-factor-auth.component'
 import { DataExportComponent } from './data-export/data-export.component'
 import { LastLoginIpComponent } from './last-login-ip/last-login-ip.component'
@@ -169,6 +173,7 @@ export function HttpLoaderFactory (http: HttpClient) {
     ChallengeSolvedNotificationComponent,
     OAuthComponent,
     TokenSaleComponent,
+    NFTUnlockComponent,
     ProductReviewEditComponent,
     TwoFactorAuthEnterComponent,
     SidenavComponent,
@@ -226,6 +231,7 @@ export function HttpLoaderFactory (http: HttpClient) {
     NgxSpinnerModule,
     MatToolbarModule,
     MatIconModule,
+    FormsModule,
     MatFormFieldModule,
     MatSelectModule,
     MatButtonModule,
@@ -256,7 +262,8 @@ export function HttpLoaderFactory (http: HttpClient) {
     MatSlideToggleModule,
     MatChipsModule,
     NgxTextDiffModule,
-    HighlightModule
+    HighlightModule,
+    ScoreBoardPreviewModule
   ],
   schemas: [CUSTOM_ELEMENTS_SCHEMA],
   providers: [
@@ -301,16 +308,17 @@ export function HttpLoaderFactory (http: HttpClient) {
     AccountingGuard,
     DeluxeGuard,
     ImageCaptchaService,
+    KeysService,
     AddressService,
     QuantityService,
     WalletService,
     OrderHistoryService,
     DeliveryService,
-    PhotoWallService
+    PhotoWallService,
+    FeatureFlagService
   ],
   bootstrap: [AppComponent]
 })
-
 export class AppModule {
   constructor (public configurationService: ConfigurationService, public overlayContainer: OverlayContainer) {
     configurationService.getApplicationConfiguration().subscribe((conf) => {
diff --git a/frontend/src/app/app.routing.ts b/frontend/src/app/app.routing.ts
index d22ea51a018..337af41e9ba 100644
--- a/frontend/src/app/app.routing.ts
+++ b/frontend/src/app/app.routing.ts
@@ -19,7 +19,7 @@ import { ComplaintComponent } from './complaint/complaint.component'
 import { ChatbotComponent } from './chatbot/chatbot.component'
 import { RecycleComponent } from './recycle/recycle.component'
 import { ScoreBoardComponent } from './score-board/score-board.component'
-import { RouterModule, Routes, UrlMatchResult, UrlSegment } from '@angular/router'
+import { RouterModule, type Routes, type UrlMatchResult, type UrlSegment } from '@angular/router'
 import { TwoFactorAuthEnterComponent } from './two-factor-auth-enter/two-factor-auth-enter.component'
 import { ErrorPageComponent } from './error-page/error-page.component'
 import { PrivacySecurityComponent } from './privacy-security/privacy-security.component'
@@ -41,8 +41,24 @@ import { DeliveryMethodComponent } from './delivery-method/delivery-method.compo
 import { PhotoWallComponent } from './photo-wall/photo-wall.component'
 import { DeluxeUserComponent } from './deluxe-user/deluxe-user.component'
 import { AccountingGuard, AdminGuard, LoginGuard } from './app.guard'
+import { NFTUnlockComponent } from './nft-unlock/nft-unlock.component'
+import { ScoreBoardPreviewComponent } from './score-board-preview/score-board-preview.component'
+import { Web3SandboxComponent } from './web3-sandbox/web3-sandbox.component'
 
-// vuln-code-snippet start adminSectionChallenge scoreBoardChallenge
+const loadFaucetModule = async () => {
+  const module = await import('./faucet/faucet.module')
+  return module.FaucetModule
+}
+const loadWeb3WalletModule = async () => {
+  const module = await import('./wallet-web3/wallet-web3.module')
+  return module.WalletWeb3Module
+}
+
+const loadWeb3SandboxtModule = async () => {
+  const module = await import('./web3-sandbox/web3-sandbox.module')
+  return module.FaucetModule
+}
+// vuln-code-snippet start adminSectionChallenge scoreBoardChallenge web3SandboxChallenge
 const routes: Routes = [
   { // vuln-code-snippet neutral-line adminSectionChallenge
     path: 'administration', // vuln-code-snippet vuln-line adminSectionChallenge
@@ -159,6 +175,10 @@ const routes: Routes = [
     path: 'score-board', // vuln-code-snippet vuln-line scoreBoardChallenge
     component: ScoreBoardComponent // vuln-code-snippet neutral-line scoreBoardChallenge
   }, // vuln-code-snippet neutral-line scoreBoardChallenge
+  { // vuln-code-snippet hide-line
+    path: 'score-board-preview', // vuln-code-snippet hide-line
+    component: ScoreBoardPreviewComponent // vuln-code-snippet hide-line
+  }, // vuln-code-snippet hide-line
   {
     path: 'track-result',
     component: TrackResultComponent
@@ -200,6 +220,22 @@ const routes: Routes = [
       }
     ]
   },
+  {
+    path: 'juicy-nft',
+    component: NFTUnlockComponent
+  },
+  {
+    path: 'wallet-web3',
+    loadChildren: async () => await loadWeb3WalletModule()
+  },
+  { // vuln-code-snippet neutral-line web3SandboxChallenge
+    path: 'web3-sandbox', // vuln-code-snippet vuln-line web3SandboxChallenge
+    loadChildren: async () => await loadWeb3SandboxtModule() // vuln-code-snippet neutral-line web3SandboxChallenge
+  }, // vuln-code-snippet neutral-line web3SandboxChallenge
+  {
+    path: 'bee-haven',
+    loadChildren: async () => await loadFaucetModule()
+  },
   // vuln-code-snippet start tokenSaleChallenge
   {
     matcher: oauthMatcher,
@@ -219,7 +255,7 @@ const routes: Routes = [
     component: SearchResultComponent
   }
 ]
-// vuln-code-snippet end adminSectionChallenge scoreBoardChallenge
+// vuln-code-snippet end adminSectionChallenge scoreBoardChallenge web3SandboxChallenge
 
 export const Routing = RouterModule.forRoot(routes, { useHash: true })
 
diff --git a/frontend/src/app/basket/basket.component.spec.ts b/frontend/src/app/basket/basket.component.spec.ts
index 55095145749..26fbf2f581b 100644
--- a/frontend/src/app/basket/basket.component.spec.ts
+++ b/frontend/src/app/basket/basket.component.spec.ts
@@ -7,7 +7,7 @@ import { TranslateModule } from '@ngx-translate/core'
 import { MatInputModule } from '@angular/material/input'
 import { MatExpansionModule } from '@angular/material/expansion'
 import { MatDialogModule } from '@angular/material/dialog'
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 
 import { BasketComponent } from './basket.component'
 import { MatCardModule } from '@angular/material/card'
diff --git a/frontend/src/app/basket/basket.component.ts b/frontend/src/app/basket/basket.component.ts
index a3012bfd92b..5567655fed3 100644
--- a/frontend/src/app/basket/basket.component.ts
+++ b/frontend/src/app/basket/basket.component.ts
@@ -4,18 +4,17 @@
  */
 
 import { Component, NgZone } from '@angular/core'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faCartArrowDown } from '@fortawesome/free-solid-svg-icons'
 import { Router } from '@angular/router'
 
 library.add(faCartArrowDown)
-dom.watch()
 
 @Component({
   selector: 'app-basket',
   templateUrl: './basket.component.html',
   styleUrls: ['./basket.component.scss']
-  })
+})
 export class BasketComponent {
   public productCount: number = 0
   public bonus: number = 0
diff --git a/frontend/src/app/challenge-solved-notification/challenge-solved-notification.component.spec.ts b/frontend/src/app/challenge-solved-notification/challenge-solved-notification.component.spec.ts
index 95015068f59..1bb21a0019c 100644
--- a/frontend/src/app/challenge-solved-notification/challenge-solved-notification.component.spec.ts
+++ b/frontend/src/app/challenge-solved-notification/challenge-solved-notification.component.spec.ts
@@ -12,7 +12,7 @@ import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { ChallengeService } from '../Services/challenge.service'
 import { ConfigurationService } from '../Services/configuration.service'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
-import { ComponentFixture, fakeAsync, TestBed, tick, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, tick, waitForAsync } from '@angular/core/testing'
 import { SocketIoService } from '../Services/socket-io.service'
 
 import { ChallengeSolvedNotificationComponent } from './challenge-solved-notification.component'
@@ -21,7 +21,7 @@ import { EventEmitter } from '@angular/core'
 import { MatIconModule } from '@angular/material/icon'
 
 class MockSocket {
-  on (str: string, callback: Function) {
+  on (str: string, callback: any) {
     callback()
   }
 
diff --git a/frontend/src/app/challenge-solved-notification/challenge-solved-notification.component.ts b/frontend/src/app/challenge-solved-notification/challenge-solved-notification.component.ts
index f5a5d9e2069..dcb441e4fcb 100644
--- a/frontend/src/app/challenge-solved-notification/challenge-solved-notification.component.ts
+++ b/frontend/src/app/challenge-solved-notification/challenge-solved-notification.component.ts
@@ -6,7 +6,7 @@
 import { TranslateService } from '@ngx-translate/core'
 import { ChallengeService } from '../Services/challenge.service'
 import { ConfigurationService } from '../Services/configuration.service'
-import { ChangeDetectorRef, Component, NgZone, OnInit } from '@angular/core'
+import { ChangeDetectorRef, Component, NgZone, type OnInit } from '@angular/core'
 import { CookieService } from 'ngx-cookie'
 import { CountryMappingService } from 'src/app/Services/country-mapping.service'
 import { SocketIoService } from '../Services/socket-io.service'
@@ -30,7 +30,7 @@ interface ChallengeSolvedNotification {
   selector: 'app-challenge-solved-notification',
   templateUrl: './challenge-solved-notification.component.html',
   styleUrls: ['./challenge-solved-notification.component.scss']
-  })
+})
 export class ChallengeSolvedNotificationComponent implements OnInit {
   public notifications: ChallengeSolvedNotification[] = []
   public showCtfFlagsInNotifications: boolean = false
@@ -74,7 +74,7 @@ export class ChallengeSolvedNotificationComponent implements OnInit {
           if (config.ctf.showCountryDetailsInNotifications !== 'none') {
             this.countryMappingService.getCountryMapping().subscribe((countryMap: any) => {
               this.countryMap = countryMap
-            }, (err) => console.log(err))
+            }, (err) => { console.log(err) })
           }
         } else {
           this.showCtfCountryDetailsInNotifications = 'none'
@@ -103,9 +103,9 @@ export class ChallengeSolvedNotificationComponent implements OnInit {
         country = this.countryMap[challenge.key]
       }
       this.notifications.push({
-        message: message,
+        message,
         flag: challenge.flag,
-        country: country,
+        country,
         copied: false
       })
       this.ref.detectChanges()
@@ -120,6 +120,6 @@ export class ChallengeSolvedNotificationComponent implements OnInit {
       const expires = new Date()
       expires.setFullYear(expires.getFullYear() + 1)
       this.cookieService.put('continueCode', continueCode, { expires })
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 }
diff --git a/frontend/src/app/challenge-status-badge/challenge-status-badge.component.spec.ts b/frontend/src/app/challenge-status-badge/challenge-status-badge.component.spec.ts
index be65127c878..9cb0a418b36 100644
--- a/frontend/src/app/challenge-status-badge/challenge-status-badge.component.spec.ts
+++ b/frontend/src/app/challenge-status-badge/challenge-status-badge.component.spec.ts
@@ -4,7 +4,7 @@
  */
 
 import { ChallengeService } from '../Services/challenge.service'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 
 import { ChallengeStatusBadgeComponent } from './challenge-status-badge.component'
 import { of, throwError } from 'rxjs'
@@ -13,7 +13,7 @@ import { WindowRefService } from '../Services/window-ref.service'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { MatIconModule } from '@angular/material/icon'
 import { EventEmitter } from '@angular/core'
-import { Challenge } from '../Models/challenge.model'
+import { type Challenge } from '../Models/challenge.model'
 import { MatButtonModule } from '@angular/material/button'
 import { MatTooltipModule } from '@angular/material/tooltip'
 
diff --git a/frontend/src/app/challenge-status-badge/challenge-status-badge.component.ts b/frontend/src/app/challenge-status-badge/challenge-status-badge.component.ts
index 033b5233482..20c3bd21df1 100644
--- a/frontend/src/app/challenge-status-badge/challenge-status-badge.component.ts
+++ b/frontend/src/app/challenge-status-badge/challenge-status-badge.component.ts
@@ -6,19 +6,18 @@
 import { Component, Input } from '@angular/core'
 import { WindowRefService } from '../Services/window-ref.service'
 import { ChallengeService } from '../Services/challenge.service'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faWindows } from '@fortawesome/free-brands-svg-icons'
 
 import { Challenge } from '../Models/challenge.model'
 
 library.add(faWindows)
-dom.watch()
 
 @Component({
   selector: 'app-challenge-status-badge',
   templateUrl: './challenge-status-badge.component.html',
   styleUrls: ['./challenge-status-badge.component.scss']
-  })
+})
 export class ChallengeStatusBadgeComponent {
   @Input() public challenge: Challenge = { } as Challenge
   @Input() public allowRepeatNotifications: boolean = false
@@ -30,7 +29,7 @@ export class ChallengeStatusBadgeComponent {
     if (this.allowRepeatNotifications) {
       this.challengeService.repeatNotification(encodeURIComponent(this.challenge.name)).subscribe(() => {
         this.windowRefService.nativeWindow.scrollTo(0, 0)
-      }, (err) => console.log(err))
+      }, (err) => { console.log(err) })
     }
   }
 
diff --git a/frontend/src/app/change-password/change-password.component.spec.ts b/frontend/src/app/change-password/change-password.component.spec.ts
index d39edcea0e3..fcefb17f0e9 100644
--- a/frontend/src/app/change-password/change-password.component.spec.ts
+++ b/frontend/src/app/change-password/change-password.component.spec.ts
@@ -6,7 +6,7 @@
 import { TranslateModule } from '@ngx-translate/core'
 import { UserService } from '../Services/user.service'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { ChangePasswordComponent } from './change-password.component'
 import { ReactiveFormsModule } from '@angular/forms'
 
diff --git a/frontend/src/app/change-password/change-password.component.ts b/frontend/src/app/change-password/change-password.component.ts
index ee326280b99..f3f21fcb195 100644
--- a/frontend/src/app/change-password/change-password.component.ts
+++ b/frontend/src/app/change-password/change-password.component.ts
@@ -3,23 +3,22 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { AbstractControl, UntypedFormControl, Validators } from '@angular/forms'
+import { type AbstractControl, UntypedFormControl, Validators } from '@angular/forms'
 import { UserService } from '../Services/user.service'
 import { Component } from '@angular/core'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faSave } from '@fortawesome/free-solid-svg-icons'
 import { faEdit } from '@fortawesome/free-regular-svg-icons'
 import { FormSubmitService } from '../Services/form-submit.service'
 import { TranslateService } from '@ngx-translate/core'
 
 library.add(faSave, faEdit)
-dom.watch()
 
 @Component({
   selector: 'app-change-password',
   templateUrl: './change-password.component.html',
   styleUrls: ['./change-password.component.scss']
-  })
+})
 export class ChangePasswordComponent {
   public passwordControl: UntypedFormControl = new UntypedFormControl('', [Validators.required])
   public newPasswordControl: UntypedFormControl = new UntypedFormControl('', [Validators.required, Validators.minLength(5), Validators.maxLength(40)])
@@ -30,7 +29,7 @@ export class ChangePasswordComponent {
   constructor (private readonly userService: UserService, private readonly formSubmitService: FormSubmitService, private readonly translate: TranslateService) { }
 
   ngOnInit () {
-    this.formSubmitService.attachEnterKeyHandler('password-form', 'changeButton', () => this.changePassword())
+    this.formSubmitService.attachEnterKeyHandler('password-form', 'changeButton', () => { this.changePassword() })
   }
 
   changePassword () {
diff --git a/frontend/src/app/chatbot/chatbot.component.spec.ts b/frontend/src/app/chatbot/chatbot.component.spec.ts
index 75c9cea2d85..2725ec148fa 100644
--- a/frontend/src/app/chatbot/chatbot.component.spec.ts
+++ b/frontend/src/app/chatbot/chatbot.component.spec.ts
@@ -12,7 +12,7 @@ import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { MatInputModule } from '@angular/material/input'
 import { MatButtonModule } from '@angular/material/button'
 
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 import { ChatbotComponent } from './chatbot.component'
 import { of } from 'rxjs'
 
diff --git a/frontend/src/app/chatbot/chatbot.component.ts b/frontend/src/app/chatbot/chatbot.component.ts
index c0f74c374a8..3a4bc30720c 100644
--- a/frontend/src/app/chatbot/chatbot.component.ts
+++ b/frontend/src/app/chatbot/chatbot.component.ts
@@ -5,16 +5,15 @@
 
 import { ChatbotService } from '../Services/chatbot.service'
 import { UserService } from '../Services/user.service'
-import { Component, OnInit } from '@angular/core'
+import { Component, type OnDestroy, type OnInit } from '@angular/core'
 import { UntypedFormControl } from '@angular/forms'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faBomb } from '@fortawesome/free-solid-svg-icons'
 import { FormSubmitService } from '../Services/form-submit.service'
 import { TranslateService } from '@ngx-translate/core'
 import { CookieService } from 'ngx-cookie'
 
 library.add(faBomb)
-dom.watch()
 
 enum MessageSources {
   user = 'user',
@@ -35,8 +34,8 @@ interface MessageActions {
   selector: 'app-chatbot',
   templateUrl: './chatbot.component.html',
   styleUrls: ['./chatbot.component.scss']
-  })
-export class ChatbotComponent implements OnInit {
+})
+export class ChatbotComponent implements OnInit, OnDestroy {
   public messageControl: UntypedFormControl = new UntypedFormControl()
   public messages: ChatMessage[] = []
   public juicyImageSrc: string = 'assets/public/images/ChatbotAvatar.png'
@@ -48,8 +47,16 @@ export class ChatbotComponent implements OnInit {
 
   public currentAction: string = this.messageActions.response
 
+  private chatScrollDownTimeoutId: ReturnType<typeof setTimeout> | null = null
+
   constructor (private readonly userService: UserService, private readonly chatbotService: ChatbotService, private readonly cookieService: CookieService, private readonly formSubmitService: FormSubmitService, private readonly translate: TranslateService) { }
 
+  ngOnDestroy (): void {
+    if (this.chatScrollDownTimeoutId) {
+      clearTimeout(this.chatScrollDownTimeoutId)
+    }
+  }
+
   ngOnInit () {
     this.chatbotService.getChatbotStatus().subscribe((response) => {
       this.messages.push({
@@ -101,8 +108,11 @@ export class ChatbotComponent implements OnInit {
             this.handleResponse(response)
           })
         }
-        const chat = document.getElementById('chat-window')
-        chat.scrollTop = chat.scrollHeight
+        this.chatScrollDownTimeoutId = setTimeout(() => {
+          const chat = document.getElementById('chat-window')
+          chat.scrollTop = chat.scrollHeight
+          this.chatScrollDownTimeoutId = null
+        }, 250)
       })
     }
   }
diff --git a/frontend/src/app/code-area/code-area.component.spec.ts b/frontend/src/app/code-area/code-area.component.spec.ts
index 1f169ce3b32..f9dc74d09de 100644
--- a/frontend/src/app/code-area/code-area.component.spec.ts
+++ b/frontend/src/app/code-area/code-area.component.spec.ts
@@ -1,4 +1,4 @@
-import { ComponentFixture, TestBed } from '@angular/core/testing'
+import { type ComponentFixture, TestBed } from '@angular/core/testing'
 import { TranslateModule } from '@ngx-translate/core'
 
 import { CodeAreaComponent } from './code-area.component'
diff --git a/frontend/src/app/code-area/code-area.component.ts b/frontend/src/app/code-area/code-area.component.ts
index 040ffe9f272..e7869a632a1 100644
--- a/frontend/src/app/code-area/code-area.component.ts
+++ b/frontend/src/app/code-area/code-area.component.ts
@@ -1,6 +1,6 @@
 import {
   Component,
-  OnInit,
+  type OnInit,
   Input,
   Output,
   EventEmitter
@@ -15,7 +15,7 @@ interface LineMarker {
   selector: 'app-code-area',
   templateUrl: './code-area.component.html',
   styleUrls: ['./code-area.component.scss']
-  })
+})
 export class CodeAreaComponent implements OnInit {
   @Input('code')
   public code: string = ''
@@ -26,7 +26,7 @@ export class CodeAreaComponent implements OnInit {
   public lineMarkers: LineMarker[]
 
   @Output()
-  addLine = new EventEmitter<number[]>()
+    addLine = new EventEmitter<number[]>()
 
   public langs = ['javascript', 'typescript', 'json', 'yaml']
 
diff --git a/frontend/src/app/code-fixes/code-fixes.component.spec.ts b/frontend/src/app/code-fixes/code-fixes.component.spec.ts
index 38287737174..e80c0c7faf7 100644
--- a/frontend/src/app/code-fixes/code-fixes.component.spec.ts
+++ b/frontend/src/app/code-fixes/code-fixes.component.spec.ts
@@ -1,4 +1,4 @@
-import { ComponentFixture, TestBed } from '@angular/core/testing'
+import { type ComponentFixture, TestBed } from '@angular/core/testing'
 import { CookieModule, CookieService } from 'ngx-cookie'
 
 import { CodeFixesComponent } from './code-fixes.component'
@@ -15,7 +15,7 @@ describe('CodeFixesComponent', () => {
       providers: [CookieService]
     })
       .compileComponents()
-      cookieService = TestBed.inject(CookieService)
+    cookieService = TestBed.inject(CookieService)
   })
 
   beforeEach(() => {
diff --git a/frontend/src/app/code-fixes/code-fixes.component.ts b/frontend/src/app/code-fixes/code-fixes.component.ts
index 7bb30d94281..5dc257bc0e0 100644
--- a/frontend/src/app/code-fixes/code-fixes.component.ts
+++ b/frontend/src/app/code-fixes/code-fixes.component.ts
@@ -1,7 +1,7 @@
-import { Component, Input, OnInit, Output, EventEmitter, ViewChild, DoCheck, KeyValueDiffers, KeyValueDiffer } from '@angular/core'
+import { Component, Input, type OnInit, Output, EventEmitter, ViewChild, type DoCheck, KeyValueDiffers, type KeyValueDiffer } from '@angular/core'
 import { NgxTextDiffComponent } from 'ngx-text-diff'
 import { CookieService } from 'ngx-cookie'
-import { DiffTableFormat } from 'ngx-text-diff/lib/ngx-text-diff.model'
+import { type DiffTableFormat } from 'ngx-text-diff/lib/ngx-text-diff.model'
 
 interface RandomFixes {
   fix: string
@@ -11,7 +11,7 @@ interface RandomFixes {
   selector: 'app-code-fixes',
   templateUrl: './code-fixes.component.html',
   styleUrls: ['./code-fixes.component.scss']
-  })
+})
 export class CodeFixesComponent implements OnInit, DoCheck {
   differ: KeyValueDiffer<string, DiffTableFormat>
 
@@ -41,8 +41,8 @@ export class CodeFixesComponent implements OnInit, DoCheck {
     let index = 0
     for (const fix of this.fixes) {
       this.randomFixes.push({
-        fix: fix,
-        index: index
+        fix,
+        index
       })
       index++
     }
@@ -85,7 +85,7 @@ export class CodeFixesComponent implements OnInit, DoCheck {
           this.format = item.currentValue
           this.cookieService.put('code-fixes-component-format', this.format)
         }
-      )
+        )
       }
     } catch {
     }
diff --git a/frontend/src/app/code-snippet/code-snippet.component.spec.ts b/frontend/src/app/code-snippet/code-snippet.component.spec.ts
index f33130ce8c3..52fca591bd9 100644
--- a/frontend/src/app/code-snippet/code-snippet.component.spec.ts
+++ b/frontend/src/app/code-snippet/code-snippet.component.spec.ts
@@ -7,7 +7,7 @@ import { TranslateModule } from '@ngx-translate/core'
 import { MAT_DIALOG_DATA, MatDialogModule, MatDialogRef } from '@angular/material/dialog'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { MatDividerModule } from '@angular/material/divider'
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 
 import { CodeSnippetComponent } from './code-snippet.component'
 import { CodeSnippetService } from '../Services/code-snippet.service'
diff --git a/frontend/src/app/code-snippet/code-snippet.component.ts b/frontend/src/app/code-snippet/code-snippet.component.ts
index 7f8c1fd1673..297c25d79ac 100644
--- a/frontend/src/app/code-snippet/code-snippet.component.ts
+++ b/frontend/src/app/code-snippet/code-snippet.component.ts
@@ -3,17 +3,17 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { CodeSnippetService, CodeSnippet } from '../Services/code-snippet.service'
-import { CodeFixesService, Fixes } from '../Services/code-fixes.service'
+import { CodeSnippetService, type CodeSnippet } from '../Services/code-snippet.service'
+import { CodeFixesService, type Fixes } from '../Services/code-fixes.service'
 import { CookieService } from 'ngx-cookie'
 import { ChallengeService } from '../Services/challenge.service'
-import { VulnLinesService, result } from '../Services/vuln-lines.service'
-import { Component, Inject, OnInit } from '@angular/core'
+import { VulnLinesService, type result } from '../Services/vuln-lines.service'
+import { Component, Inject, type OnInit } from '@angular/core'
 
 import { MAT_DIALOG_DATA } from '@angular/material/dialog'
 import { UntypedFormControl } from '@angular/forms'
 import { ConfigurationService } from '../Services/configuration.service'
-import { ThemePalette } from '@angular/material/core'
+import { type ThemePalette } from '@angular/material/core'
 
 enum ResultState {
   Undecided,
@@ -21,16 +21,16 @@ enum ResultState {
   Wrong,
 }
 
-interface Solved {
+export interface Solved {
   findIt: boolean
   fixIt: boolean
 }
 
 @Component({
-  selector: 'app-user-details',
+  selector: 'code-snippet',
   templateUrl: './code-snippet.component.html',
   styleUrls: ['./code-snippet.component.scss']
-  })
+})
 export class CodeSnippetComponent implements OnInit {
   public snippet: CodeSnippet = null
   public fixes: Fixes = null
@@ -49,7 +49,7 @@ export class CodeSnippetComponent implements OnInit {
   ngOnInit () {
     this.configurationService.getApplicationConfiguration().subscribe((config) => {
       this.showFeedbackButtons = config.challenges.showFeedbackButtons
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
 
     this.codeSnippetService.get(this.dialogData.key).subscribe((snippet) => {
       this.snippet = snippet
@@ -139,7 +139,7 @@ export class CodeSnippetComponent implements OnInit {
           const expires = new Date()
           expires.setFullYear(expires.getFullYear() + 1)
           this.cookieService.put('continueCodeFindIt', continueCode, { expires })
-        }, (err) => console.log(err))
+        }, (err) => { console.log(err) })
       } else {
         this.solved.fixIt = true
         this.challengeService.continueCodeFixIt().subscribe((continueCode) => {
@@ -149,7 +149,7 @@ export class CodeSnippetComponent implements OnInit {
           const expires = new Date()
           expires.setFullYear(expires.getFullYear() + 1)
           this.cookieService.put('continueCodeFixIt', continueCode, { expires })
-        }, (err) => console.log(err))
+        }, (err) => { console.log(err) })
       }
       this.result = ResultState.Right
       this.lock = ResultState.Right
diff --git a/frontend/src/app/complaint/complaint.component.spec.ts b/frontend/src/app/complaint/complaint.component.spec.ts
index 8265d6c23a6..8eae7087524 100644
--- a/frontend/src/app/complaint/complaint.component.spec.ts
+++ b/frontend/src/app/complaint/complaint.component.spec.ts
@@ -14,7 +14,7 @@ import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { MatInputModule } from '@angular/material/input'
 import { MatButtonModule } from '@angular/material/button'
 
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { ComplaintComponent } from './complaint.component'
 import { of, throwError } from 'rxjs'
 
diff --git a/frontend/src/app/complaint/complaint.component.ts b/frontend/src/app/complaint/complaint.component.ts
index 9a93510abe7..d2d40123ea5 100644
--- a/frontend/src/app/complaint/complaint.component.ts
+++ b/frontend/src/app/complaint/complaint.component.ts
@@ -6,22 +6,21 @@
 import { environment } from '../../environments/environment'
 import { ComplaintService } from '../Services/complaint.service'
 import { UserService } from '../Services/user.service'
-import { Component, ElementRef, OnInit, ViewChild } from '@angular/core'
+import { Component, ElementRef, type OnInit, ViewChild } from '@angular/core'
 import { UntypedFormControl, Validators } from '@angular/forms'
 import { FileUploader } from 'ng2-file-upload'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faBomb } from '@fortawesome/free-solid-svg-icons'
 import { FormSubmitService } from '../Services/form-submit.service'
 import { TranslateService } from '@ngx-translate/core'
 
 library.add(faBomb)
-dom.watch()
 
 @Component({
   selector: 'app-complaint',
   templateUrl: './complaint.component.html',
   styleUrls: ['./complaint.component.scss']
-  })
+})
 export class ComplaintComponent implements OnInit {
   public customerControl: UntypedFormControl = new UntypedFormControl({ value: '', disabled: true }, [])
   public messageControl: UntypedFormControl = new UntypedFormControl('', [Validators.required, Validators.maxLength(160)])
@@ -54,7 +53,7 @@ export class ComplaintComponent implements OnInit {
       this.saveComplaint()
       this.uploader.clearQueue()
     }
-    this.formSubmitService.attachEnterKeyHandler('complaint-form', 'submitButton', () => this.save())
+    this.formSubmitService.attachEnterKeyHandler('complaint-form', 'submitButton', () => { this.save() })
   }
 
   initComplaint () {
diff --git a/frontend/src/app/contact/contact.component.spec.ts b/frontend/src/app/contact/contact.component.spec.ts
index 2e342d09a33..26fc6936e65 100644
--- a/frontend/src/app/contact/contact.component.spec.ts
+++ b/frontend/src/app/contact/contact.component.spec.ts
@@ -9,7 +9,7 @@ import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { UserService } from '../Services/user.service'
 import { MatCardModule } from '@angular/material/card'
 import { MatFormFieldModule } from '@angular/material/form-field'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { MatSnackBar, MatSnackBarModule } from '@angular/material/snack-bar'
 import { EventEmitter } from '@angular/core'
 import { ContactComponent } from './contact.component'
diff --git a/frontend/src/app/contact/contact.component.ts b/frontend/src/app/contact/contact.component.ts
index 4236d9489b3..43ea6a6410f 100644
--- a/frontend/src/app/contact/contact.component.ts
+++ b/frontend/src/app/contact/contact.component.ts
@@ -7,21 +7,20 @@ import { FeedbackService } from '../Services/feedback.service'
 import { CaptchaService } from '../Services/captcha.service'
 import { UserService } from '../Services/user.service'
 import { UntypedFormControl, Validators } from '@angular/forms'
-import { Component, OnInit } from '@angular/core'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { Component, type OnInit } from '@angular/core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faPaperPlane, faStar } from '@fortawesome/free-solid-svg-icons'
 import { FormSubmitService } from '../Services/form-submit.service'
 import { TranslateService } from '@ngx-translate/core'
 import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
 
 library.add(faStar, faPaperPlane)
-dom.watch()
 
 @Component({
   selector: 'app-contact',
   templateUrl: './contact.component.html',
   styleUrls: ['./contact.component.scss']
-  })
+})
 export class ContactComponent implements OnInit {
   public authorControl: UntypedFormControl = new UntypedFormControl({ value: '', disabled: true }, [])
   public feedbackControl: UntypedFormControl = new UntypedFormControl('', [Validators.required, Validators.maxLength(160)])
@@ -50,7 +49,7 @@ export class ContactComponent implements OnInit {
     })
     this.getNewCaptcha()
 
-    this.formSubmitService.attachEnterKeyHandler('feedback-form', 'submitButton', () => this.save())
+    this.formSubmitService.attachEnterKeyHandler('feedback-form', 'submitButton', () => { this.save() })
   }
 
   getNewCaptcha () {
diff --git a/frontend/src/app/data-export/data-export.component.spec.ts b/frontend/src/app/data-export/data-export.component.spec.ts
index faa90386ed9..61d35e29477 100644
--- a/frontend/src/app/data-export/data-export.component.spec.ts
+++ b/frontend/src/app/data-export/data-export.component.spec.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { DataExportComponent } from './data-export.component'
 import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { ImageCaptchaService } from '../Services/image-captcha.service'
diff --git a/frontend/src/app/data-export/data-export.component.ts b/frontend/src/app/data-export/data-export.component.ts
index 9511e05ded8..1430a28f570 100644
--- a/frontend/src/app/data-export/data-export.component.ts
+++ b/frontend/src/app/data-export/data-export.component.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, OnInit } from '@angular/core'
+import { Component, type OnInit } from '@angular/core'
 import { UntypedFormControl, Validators } from '@angular/forms'
 import { ImageCaptchaService } from '../Services/image-captcha.service'
 import { DataSubjectService } from '../Services/data-subject.service'
@@ -13,7 +13,7 @@ import { DomSanitizer } from '@angular/platform-browser'
   selector: 'app-data-export',
   templateUrl: './data-export.component.html',
   styleUrls: ['./data-export.component.scss']
-  })
+})
 export class DataExportComponent implements OnInit {
   public captchaControl: UntypedFormControl = new UntypedFormControl('', [Validators.required, Validators.minLength(5)])
   public formatControl: UntypedFormControl = new UntypedFormControl('', [Validators.required])
diff --git a/frontend/src/app/delivery-method/delivery-method.component.spec.ts b/frontend/src/app/delivery-method/delivery-method.component.spec.ts
index cad713772ef..26db1838624 100644
--- a/frontend/src/app/delivery-method/delivery-method.component.spec.ts
+++ b/frontend/src/app/delivery-method/delivery-method.component.spec.ts
@@ -5,7 +5,7 @@
 
 import { TranslateModule } from '@ngx-translate/core'
 import { MatInputModule } from '@angular/material/input'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { MatCardModule } from '@angular/material/card'
 import { MatTableModule } from '@angular/material/table'
 import { MatButtonModule } from '@angular/material/button'
diff --git a/frontend/src/app/delivery-method/delivery-method.component.ts b/frontend/src/app/delivery-method/delivery-method.component.ts
index 253a186be1c..ca5e9ed9e9e 100644
--- a/frontend/src/app/delivery-method/delivery-method.component.ts
+++ b/frontend/src/app/delivery-method/delivery-method.component.ts
@@ -3,31 +3,30 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, NgZone, OnInit } from '@angular/core'
+import { Component, NgZone, type OnInit } from '@angular/core'
 import { DeliveryService } from '../Services/delivery.service'
 import { AddressService } from '../Services/address.service'
 import { MatTableDataSource } from '@angular/material/table'
 import { Router } from '@angular/router'
 import { Location } from '@angular/common'
-import { DeliveryMethod } from '../Models/deliveryMethod.model'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { type DeliveryMethod } from '../Models/deliveryMethod.model'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faRocket, faShippingFast, faTruck } from '@fortawesome/free-solid-svg-icons'
 import { SelectionModel } from '@angular/cdk/collections'
 
 library.add(faRocket, faShippingFast, faTruck)
-dom.watch()
 
 @Component({
   selector: 'app-delivery-method',
   templateUrl: './delivery-method.component.html',
   styleUrls: ['./delivery-method.component.scss']
-  })
+})
 export class DeliveryMethodComponent implements OnInit {
   public displayedColumns = ['Selection', 'Name', 'Price', 'ETA']
   public methods: DeliveryMethod[]
   public address: any
   public dataSource
-  public deliveryMethodId: Number = undefined
+  public deliveryMethodId: number = undefined
   selection = new SelectionModel<DeliveryMethod>(false, [])
 
   constructor (private readonly location: Location, private readonly deliverySerivce: DeliveryService,
@@ -36,13 +35,13 @@ export class DeliveryMethodComponent implements OnInit {
   ngOnInit () {
     this.addressService.getById(sessionStorage.getItem('addressId')).subscribe((address) => {
       this.address = address
-    }, (error) => console.log(error))
+    }, (error) => { console.log(error) })
 
     this.deliverySerivce.get().subscribe((methods) => {
       console.log(methods)
       this.methods = methods
       this.dataSource = new MatTableDataSource<DeliveryMethod>(this.methods)
-    }, (error) => console.log(error))
+    }, (error) => { console.log(error) })
   }
 
   selectMethod (id) {
diff --git a/frontend/src/app/deluxe-user/deluxe-user.component.spec.ts b/frontend/src/app/deluxe-user/deluxe-user.component.spec.ts
index f9818765b37..44b3a0ca736 100644
--- a/frontend/src/app/deluxe-user/deluxe-user.component.spec.ts
+++ b/frontend/src/app/deluxe-user/deluxe-user.component.spec.ts
@@ -7,7 +7,7 @@ import { TranslateModule } from '@ngx-translate/core'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { MatCardModule } from '@angular/material/card'
 import { MatFormFieldModule } from '@angular/material/form-field'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { MatInputModule } from '@angular/material/input'
 import { ReactiveFormsModule } from '@angular/forms'
 import { BrowserAnimationsModule } from '@angular/platform-browser/animations'
diff --git a/frontend/src/app/deluxe-user/deluxe-user.component.ts b/frontend/src/app/deluxe-user/deluxe-user.component.ts
index 344eab13cb3..a4019c60dd8 100644
--- a/frontend/src/app/deluxe-user/deluxe-user.component.ts
+++ b/frontend/src/app/deluxe-user/deluxe-user.component.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, NgZone, OnInit } from '@angular/core'
+import { Component, NgZone, type OnInit } from '@angular/core'
 import { UserService } from '../Services/user.service'
 import { ActivatedRoute, Router } from '@angular/router'
 import { CookieService } from 'ngx-cookie'
@@ -14,10 +14,10 @@ import { SocketIoService } from '../Services/socket-io.service'
   selector: 'app-deluxe-user',
   templateUrl: './deluxe-user.component.html',
   styleUrls: ['./deluxe-user.component.scss']
-  })
+})
 
 export class DeluxeUserComponent implements OnInit {
-  public membershipCost: Number = 0
+  public membershipCost: number = 0
   public error: string = undefined
   public applicationName = 'OWASP Juice Shop'
   public logoSrc: string = 'assets/public/images/JuiceShop_Logo.png'
@@ -46,7 +46,7 @@ export class DeluxeUserComponent implements OnInit {
           this.io.socket().emit('verifySvgInjectionChallenge', decalParam)
         })
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
     this.userService.deluxeStatus().subscribe((res) => {
       this.membershipCost = res.membershipCost
     }, (err) => {
diff --git a/frontend/src/app/error-page/error-page.component.spec.ts b/frontend/src/app/error-page/error-page.component.spec.ts
index 1beaa248c6f..a08fe0b33db 100644
--- a/frontend/src/app/error-page/error-page.component.spec.ts
+++ b/frontend/src/app/error-page/error-page.component.spec.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 import { MatCardModule } from '@angular/material/card'
 
 import { ErrorPageComponent } from './error-page.component'
diff --git a/frontend/src/app/error-page/error-page.component.ts b/frontend/src/app/error-page/error-page.component.ts
index 75664af0a8b..3b514d089bf 100644
--- a/frontend/src/app/error-page/error-page.component.ts
+++ b/frontend/src/app/error-page/error-page.component.ts
@@ -4,19 +4,18 @@
  */
 
 import { TranslateService } from '@ngx-translate/core'
-import { Component, OnInit } from '@angular/core'
+import { Component, type OnInit } from '@angular/core'
 import { ActivatedRoute } from '@angular/router'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faUserSlash, faHandPaper } from '@fortawesome/free-solid-svg-icons'
 
 library.add(faUserSlash, faHandPaper)
-dom.watch()
 
 @Component({
   selector: 'app-error-page',
   templateUrl: './error-page.component.html',
   styleUrls: ['./error-page.component.scss']
-  })
+})
 export class ErrorPageComponent implements OnInit {
   public error: string | null = null
 
diff --git a/frontend/src/app/faucet/faucet.component.html b/frontend/src/app/faucet/faucet.component.html
new file mode 100644
index 00000000000..765c0a83b53
--- /dev/null
+++ b/frontend/src/app/faucet/faucet.component.html
@@ -0,0 +1,82 @@
+<div class="container">
+  <mat-card class="mat-elevation-z6 faucet-container">
+    <h1 translate>TITLE_BEE_HAVEN</h1>
+    <div class="faucet-image">
+      <img src="assets/public/images/BeeOwner.png" />
+    </div>
+    <p translate>BEE_HAVEN_INTRO</p>
+    <div class="faucet-balance">
+      <span color="accent">
+        {{'FAUCET_BALANCE' | translate}}: {{ BEEBalance }} | {{'BEE_BALANCE' | translate}}:
+        {{ myBEEBalance }}</span
+      >
+      <div class="metamask-button">
+        <button
+          mat-raised-button
+          color="accent"
+          type="button"
+          (click)="handleAuth()"
+        >
+          <i class="material-icons">
+            account_balance_wallet
+          </i>
+          <span *ngIf="!session" translate>BTN_CONNECT_METAMASK</span>
+          <span *ngIf="session"
+            >{{ userData.address.substring(0, 6) }}...{{
+              userData.address.slice(-6)
+            }}</span
+          >
+        </button>
+      </div>
+    </div>
+
+    <div class="withdraw-container">
+      <div>
+        <mat-form-field style="width: 100%" color="accent" appearance="outline">
+          <mat-label translate>LABEL_NUMBER_OF_BEES</mat-label>
+          <input
+            matInput
+            [placeholder]="'LABEL_NUMBER_OF_BEES'|translate"
+            type="number"
+            id="withdrawAmount"
+            [(ngModel)]="withdrawAmount"
+            aria-label="Text field for the withdrawal amount"
+          />
+        </mat-form-field>
+        <h5 class="error">{{ errorMessage }}</h5>
+      </div>
+      <button
+        mat-raised-button
+        type="button"
+        color="primary"
+        (click)="extractBEETokens()"
+      >
+        <i class="material-icons">
+          emoji_nature
+        </i>
+        {{ "BTN_CLAIM_BEES" | translate }}
+      </button>
+    </div>
+  </mat-card>
+  <mat-card class="mat-elevation-z6 honeypot-container">
+    <div class="honeypot-image mat-elevation-z6">
+      <img src="assets/public/images/HoneyPot.png" />
+    </div>
+    <h2 translate>BEE_HONEYPOT_TITLE</h2>
+    <p translate>BEE_HONEYPOT_DESCRIPTION</p>
+
+    <button
+      class="mint_button"
+      mat-raised-button
+      color="warn"
+      [disabled]="mintButtonDisabled"
+      fxFlexAlign="center"
+      (click)="mintNFT()"
+    >
+      <i class="material-icons">
+        image
+      </i>
+      {{ nftMintText }}
+    </button>
+  </mat-card>
+</div>
diff --git a/frontend/src/app/faucet/faucet.component.scss b/frontend/src/app/faucet/faucet.component.scss
new file mode 100644
index 00000000000..8d3409ae93b
--- /dev/null
+++ b/frontend/src/app/faucet/faucet.component.scss
@@ -0,0 +1,146 @@
+.container {
+  display: flex;
+  grid-gap: 40px;
+  margin: 0 40px;
+}
+
+.faucet-container {
+  padding: 40px 80px;
+
+  p {
+    text-align: center;
+  }
+
+  h1 {
+    font-weight: bold;
+    margin: 0;
+    text-align: center;
+  }
+}
+
+.faucet-balance {
+  align-items: center;
+  border: 1px solid #7b7b7b;
+  border-radius: 10px;
+  display: flex;
+  font-size: 18px;
+  justify-content: center;
+  margin: 20px 0;
+  padding: 8px;
+  text-align: center;
+  width: 100%;
+
+  span {
+    flex-grow: 1;
+    text-align: center;
+  }
+}
+
+.faucet-image {
+  display: flex;
+  justify-content: center;
+  padding: 16px;
+
+  img {
+    width: 250px;
+  }
+}
+
+.metamask-button {
+  margin: 16px;
+  margin-left: auto;
+
+  button {
+    padding: 8px 6px;
+    width: 220px;
+  }
+}
+
+.withdraw-container {
+  align-items: center;
+  display: flex;
+  flex-direction: column;
+  gap: 20px;
+  width: 100%;
+
+  div {
+    flex-direction: column;
+    width: 100%;
+  }
+
+  button {
+    border-radius: 10px;
+    font-weight: 500;
+    justify-self: end;
+    margin-top: -20px;
+    padding: 16px 24px;
+    width: 300px;
+  }
+}
+
+.honeypot-container {
+  display: flex;
+  flex-direction: column;
+  padding: 40px 80px;
+  text-align: center;
+  width: 35%;
+
+  h2 {
+    font-weight: bold;
+  }
+}
+
+.honeypot-image {
+  height: 320px;
+  margin: 0 auto;
+  margin-bottom: 16px;
+  width: 320px;
+
+  img {
+    height: 300px;
+    margin: 10px;
+  }
+}
+
+.mint_button {
+  border-radius: 10px;
+  font-weight: 500;
+  margin-top: 32px;
+  padding: 16px 48px;
+}
+@media (max-width: 1100px) {
+  .container {
+    flex-direction: column;
+  }
+
+  .honeypot-container {
+    margin-bottom: 40px;
+    width: auto;
+  }
+
+  .faucet-balance {
+    flex-direction: column;
+    padding: 24px 0;
+  }
+
+  .metamask-button {
+    margin: auto;
+    margin-top: 16px;
+  }
+}
+@media (max-width: 580px) {
+  .faucet-container,
+  .honeypot-container {
+    padding: 30px;
+  }
+
+  .honeypot-image {
+    height: 240px;
+    width: 240px;
+  }
+
+  .honeypot-image > img {
+    height: 220px;
+    width: 220px;
+  }
+}
diff --git a/frontend/src/app/faucet/faucet.component.ts b/frontend/src/app/faucet/faucet.component.ts
new file mode 100644
index 00000000000..041143f16f3
--- /dev/null
+++ b/frontend/src/app/faucet/faucet.component.ts
@@ -0,0 +1,302 @@
+import { Component, OnInit, ChangeDetectorRef } from '@angular/core'
+import { KeysService } from '../Services/keys.service'
+import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
+import { TranslateService } from '@ngx-translate/core'
+import {
+  BeeFaucetABI,
+  BeeTokenABI,
+  nftABI
+} from '../../assets/public/ContractABIs'
+import { getDefaultProvider, ethers, type BigNumber } from 'ethers'
+import {
+  createClient,
+  connect,
+  disconnect,
+  getAccount,
+  signMessage,
+  InjectedConnector
+} from '@wagmi/core'
+
+const client = createClient({
+  autoConnect: true,
+  provider: getDefaultProvider()
+})
+const { ethereum } = window
+
+const nftAddress = '0x41427790c94E7a592B17ad694eD9c06A02bb9C39'
+const BeeTokenAddress = '0x36435796Ca9be2bf150CE0dECc2D8Fab5C4d6E13'
+const BeeFaucetAddress = '0x860e3616aD0E0dEDc23352891f3E10C4131EA5BC'
+
+@Component({
+  selector: 'app-faucet',
+  templateUrl: './faucet.component.html',
+  styleUrls: ['./faucet.component.scss']
+})
+export class FaucetComponent {
+  constructor (
+    private readonly keysService: KeysService,
+    private readonly snackBarHelperService: SnackBarHelperService,
+    private readonly translateService: TranslateService,
+    private readonly changeDetectorRef: ChangeDetectorRef
+  ) {}
+
+  userData: object
+  session = false
+  deployedContractAddress = ''
+  BEEBalance = 0
+  myBEEBalance = 0
+  withdrawAmount: number = null
+  successResponse = false
+  mintButtonDisabled = true
+  challengeSolved = false
+  nftMintText = 'Mint the Pot - 1000 BEE'
+  errorMessage = ''
+  metamaskAddress = ''
+
+  ngOnInit (): void {
+    this.translateService.get('NFT_MINT_TEXT_INTRO').subscribe((translatedString: string) => {
+      this.nftMintText = translatedString
+    })
+    this.handleAuth()
+    this.checkNftMinted()
+    this.nftMintListener()
+    window.ethereum.on('chainChanged', this.handleChainChanged.bind(this))
+  }
+
+  nftMintListener () {
+    this.keysService.nftMintListen().subscribe(
+      (response) => {
+        console.log(response)
+      },
+      (error) => {
+        console.error(error)
+      }
+    )
+  }
+
+  checkNftMinted () {
+    this.keysService.checkNftMinted().subscribe(
+      (response) => {
+        const challengeSolvedStatus = response.data[0].solved
+        this.mintButtonDisabled = challengeSolvedStatus
+        this.challengeSolved = challengeSolvedStatus
+        if (challengeSolvedStatus) {
+          this.translateService.get('NFT_MINT_TEXT_SUCCESS').subscribe((translatedString: string) => {
+            this.nftMintText = translatedString
+          })
+        }
+      },
+      (error) => {
+        console.error(error)
+        this.successResponse = false
+      }
+    )
+  }
+
+  async fetchMyBeeBalance () {
+    try {
+      const provider = new ethers.providers.Web3Provider(window.ethereum)
+      const signer = provider.getSigner()
+
+      const contract = new ethers.Contract(
+        BeeTokenAddress,
+        BeeTokenABI,
+        signer
+      )
+      const userAddress = await signer.getAddress()
+      const balanceBigNumber: BigNumber = await contract.balanceOf(userAddress)
+      console.log(balanceBigNumber)
+      this.myBEEBalance = balanceBigNumber
+        .div(ethers.constants.WeiPerEther)
+        .toNumber()
+      if (this.myBEEBalance >= 1000 && !this.challengeSolved) {
+        this.mintButtonDisabled = false
+      }
+      if (this.myBEEBalance <= 1000 && !this.challengeSolved) {
+        this.mintButtonDisabled = true
+      }
+    } catch (error) {
+      console.error('Error fetching BEE balance:', error)
+    }
+  }
+
+  async fetchBeeBalance () {
+    try {
+      const provider = new ethers.providers.Web3Provider(window.ethereum)
+      const signer = provider.getSigner()
+
+      const contract = new ethers.Contract(
+        BeeFaucetAddress,
+        BeeFaucetABI,
+        signer
+      )
+      const balance = await contract.balance()
+      console.log(balance)
+      this.BEEBalance = balance
+    } catch (error) {
+      console.error('Error fetching BEE balance:', error)
+    }
+  }
+
+  async handleChainChanged (chainId: string) {
+    await this.handleAuth()
+  }
+
+  async handleAuth () {
+    try {
+      const { isConnected } = getAccount()
+
+      if (isConnected) {
+        await disconnect()
+      }
+      if (!window.ethereum) {
+        this.snackBarHelperService.open('PLEASE_INSTALL_WEB3_WALLET', 'errorBar')
+        return
+      }
+
+      const provider = await connect({ connector: new InjectedConnector() })
+      this.metamaskAddress = provider.account
+      this.userData = {
+        address: provider.account,
+        chain: provider.chain.id,
+        network: 'evm'
+      }
+      await ethereum.request({
+        method: 'wallet_addEthereumChain',
+        params: [
+          {
+            chainId: '0xaa36a7',
+            chainName: 'Sepolia Test Network',
+            nativeCurrency: {
+              name: 'SepoliaETH',
+              symbol: 'ETH',
+              decimals: 18
+            },
+            rpcUrls: ['https://ethereum-sepolia.blockpi.network/v1/rpc/public'],
+            blockExplorerUrls: ['https://sepolia.etherscan.io/']
+          }
+        ]
+      })
+      const targetChainId = '11155111'
+      const currentChainId = String(provider.chain?.id)
+
+      if (provider && currentChainId !== targetChainId) {
+        this.session = false
+        this.snackBarHelperService.open('PLEASE_CONNECT_TO_SEPOLIA_NETWORK', 'errorBar')
+      } else {
+        console.log('Should show ethereum chain now')
+        this.session = true
+        await this.fetchBeeBalance()
+        await this.fetchMyBeeBalance()
+      }
+      console.log('session', this.session)
+      this.changeDetectorRef.detectChanges()
+    } catch (err) {
+      console.log(err)
+    }
+  }
+
+  async extractBEETokens (amount = this.withdrawAmount) {
+    if (!this.session) {
+      this.snackBarHelperService.open('PLEASE_CONNECT_WEB3_WALLET', 'errorBar')
+      return
+    }
+    try {
+      const provider = new ethers.providers.Web3Provider(window.ethereum)
+      const signer = provider.getSigner()
+      const userAddress = await signer.getAddress()
+
+      const balanceBigNumber = await provider.getBalance(userAddress)
+
+      const balanceEth = ethers.utils.formatEther(balanceBigNumber)
+
+      console.log('ETH balance:', balanceEth, typeof balanceEth)
+      if (balanceEth < '0.001') {
+        this.errorMessage = 'Deposit some test ETH from sepoliafaucet.com or any other ETH faucet to initiate transaction.'
+        return
+      }
+      const contract = new ethers.Contract(
+        BeeFaucetAddress,
+        BeeFaucetABI,
+        signer
+      )
+      const tx = await contract.withdraw(amount)
+      await tx.wait()
+
+      console.log('BEE tokens extracted successfully')
+      this.fetchBeeBalance()
+      this.fetchMyBeeBalance()
+    } catch (error) {
+      console.error('Error extracting BEEs:', error.message)
+      this.errorMessage = error.message
+    }
+  }
+
+  async mintNFT () {
+    if (!this.session) {
+      this.snackBarHelperService.open('PLEASE_CONNECT_WEB3_WALLET', 'errorBar')
+      return
+    }
+    this.translateService.get('NFT_MINT_TEXT_AWAITING_APPROVAL').subscribe((translatedString: string) => {
+      this.nftMintText = translatedString
+    })
+    try {
+      const provider = new ethers.providers.Web3Provider(window.ethereum)
+      const signer = provider.getSigner()
+      const amountToApprove = ethers.utils.parseUnits('1000', '18')
+      const BeeTokenContract = new ethers.Contract(
+        BeeTokenAddress,
+        BeeTokenABI,
+        signer
+      )
+      const approvalTx = await BeeTokenContract.approve(
+        nftAddress,
+        amountToApprove
+      )
+
+      await approvalTx.wait()
+      this.translateService.get('NFT_MINT_TEXT_CONFIRM').subscribe((translatedString: string) => {
+        this.nftMintText = translatedString
+      })
+
+      const contract = new ethers.Contract(nftAddress, nftABI, signer)
+
+      const transaction = await contract.mintNFT()
+      console.log(transaction)
+      this.translateService.get('NFT_MINT_TEXT_IN_PROGRESS').subscribe((translatedString: string) => {
+        this.nftMintText = translatedString
+      })
+
+      const mintConfirmation = await transaction.wait()
+      console.log(mintConfirmation)
+      if (mintConfirmation) {
+        this.translateService.get('NFT_MINT_TEXT_SUCCESS').subscribe((translatedString: string) => {
+          this.nftMintText = translatedString
+        })
+        setTimeout(() => {
+          this.keysService.verifyNFTWallet(this.metamaskAddress).subscribe(
+            (response) => {
+              if (response.success) {
+                this.successResponse = response.status
+                this.mintButtonDisabled = true
+              }
+            },
+            (error) => {
+              console.error(error)
+              this.successResponse = false
+            }
+          )
+        }, 3500)
+      }
+
+      console.log('NFT minted successfully!')
+    } catch (error) {
+      console.error('Error minting NFT:', error)
+    }
+  }
+
+  async signOut () {
+    await disconnect()
+    this.session = false
+  }
+}
diff --git a/frontend/src/app/faucet/faucet.module.ts b/frontend/src/app/faucet/faucet.module.ts
new file mode 100644
index 00000000000..08f976eafe1
--- /dev/null
+++ b/frontend/src/app/faucet/faucet.module.ts
@@ -0,0 +1,43 @@
+import { NgModule, CUSTOM_ELEMENTS_SCHEMA } from '@angular/core'
+import { CommonModule } from '@angular/common'
+import { ReactiveFormsModule, FormsModule } from '@angular/forms'
+import { RouterModule, type Routes } from '@angular/router'
+import { ConfigurationService } from '../Services/configuration.service'
+import { OverlayContainer } from '@angular/cdk/overlay'
+import { MatCardModule } from '@angular/material/card'
+import { MatInputModule } from '@angular/material/input'
+import { MatButtonModule } from '@angular/material/button'
+import { MatSnackBarModule } from '@angular/material/snack-bar'
+
+import { FaucetComponent } from './faucet.component'
+import { TranslateModule } from '@ngx-translate/core'
+
+const routes: Routes = [
+  {
+    path: '',
+    component: FaucetComponent
+  }
+]
+
+@NgModule({
+  declarations: [FaucetComponent],
+  imports: [
+    CommonModule,
+    RouterModule.forChild(routes),
+    TranslateModule,
+    FormsModule,
+    ReactiveFormsModule,
+    MatButtonModule,
+    MatCardModule,
+    MatInputModule,
+    MatSnackBarModule
+  ],
+  schemas: [CUSTOM_ELEMENTS_SCHEMA]
+})
+export class FaucetModule {
+  constructor (public configurationService: ConfigurationService, public overlayContainer: OverlayContainer) {
+    configurationService.getApplicationConfiguration().subscribe((conf) => {
+      overlayContainer.getContainerElement().classList.add(conf.application.theme + '-theme')
+    })
+  }
+}
diff --git a/frontend/src/app/feedback-details/feedback-details.component.spec.ts b/frontend/src/app/feedback-details/feedback-details.component.spec.ts
index a79606db246..783d5b0b72f 100644
--- a/frontend/src/app/feedback-details/feedback-details.component.spec.ts
+++ b/frontend/src/app/feedback-details/feedback-details.component.spec.ts
@@ -8,7 +8,7 @@ import { MAT_DIALOG_DATA, MatDialogModule, MatDialogRef } from '@angular/materia
 import { UserService } from '../Services/user.service'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { MatDividerModule } from '@angular/material/divider'
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 
 import { FeedbackDetailsComponent } from './feedback-details.component'
 
diff --git a/frontend/src/app/feedback-details/feedback-details.component.ts b/frontend/src/app/feedback-details/feedback-details.component.ts
index 614f8cdcf6b..529bf0f3b66 100644
--- a/frontend/src/app/feedback-details/feedback-details.component.ts
+++ b/frontend/src/app/feedback-details/feedback-details.component.ts
@@ -3,14 +3,14 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, OnInit, Inject } from '@angular/core'
+import { Component, type OnInit, Inject } from '@angular/core'
 import { MAT_DIALOG_DATA } from '@angular/material/dialog'
 
 @Component({
   selector: 'app-feedback-details',
   templateUrl: './feedback-details.component.html',
   styleUrls: ['./feedback-details.component.scss']
-  })
+})
 export class FeedbackDetailsComponent implements OnInit {
   public feedback: any
   public id: any
diff --git a/frontend/src/app/forgot-password/forgot-password.component.spec.ts b/frontend/src/app/forgot-password/forgot-password.component.spec.ts
index 4bd8c38584d..58f59c03ca3 100644
--- a/frontend/src/app/forgot-password/forgot-password.component.spec.ts
+++ b/frontend/src/app/forgot-password/forgot-password.component.spec.ts
@@ -6,7 +6,7 @@
 import { TranslateModule } from '@ngx-translate/core'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { ReactiveFormsModule } from '@angular/forms'
-import { ComponentFixture, fakeAsync, flush, TestBed, tick, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, flush, TestBed, tick, waitForAsync } from '@angular/core/testing'
 import { ForgotPasswordComponent } from './forgot-password.component'
 import { SecurityQuestionService } from '../Services/security-question.service'
 
diff --git a/frontend/src/app/forgot-password/forgot-password.component.ts b/frontend/src/app/forgot-password/forgot-password.component.ts
index 5a85d15f89a..6204ae7cb91 100644
--- a/frontend/src/app/forgot-password/forgot-password.component.ts
+++ b/frontend/src/app/forgot-password/forgot-password.component.ts
@@ -5,22 +5,21 @@
 
 import { UserService } from '../Services/user.service'
 import { SecurityQuestionService } from '../Services/security-question.service'
-import { AbstractControl, UntypedFormControl, Validators } from '@angular/forms'
+import { type AbstractControl, UntypedFormControl, Validators } from '@angular/forms'
 import { Component } from '@angular/core'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faSave } from '@fortawesome/free-solid-svg-icons'
 import { faEdit } from '@fortawesome/free-regular-svg-icons'
-import { SecurityQuestion } from '../Models/securityQuestion.model'
+import { type SecurityQuestion } from '../Models/securityQuestion.model'
 import { TranslateService } from '@ngx-translate/core'
 
 library.add(faSave, faEdit)
-dom.watch()
 
 @Component({
   selector: 'app-forgot-password',
   templateUrl: './forgot-password.component.html',
   styleUrls: ['./forgot-password.component.scss']
-  })
+})
 export class ForgotPasswordComponent {
   public emailControl: UntypedFormControl = new UntypedFormControl('', [Validators.required, Validators.email])
   public securityQuestionControl: UntypedFormControl = new UntypedFormControl({ disabled: true, value: '' }, [Validators.required])
diff --git a/frontend/src/app/last-login-ip/last-login-ip.component.spec.ts b/frontend/src/app/last-login-ip/last-login-ip.component.spec.ts
index 427812aabf2..0b25fcdec1d 100644
--- a/frontend/src/app/last-login-ip/last-login-ip.component.spec.ts
+++ b/frontend/src/app/last-login-ip/last-login-ip.component.spec.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 import { LastLoginIpComponent } from './last-login-ip.component'
 import { MatCardModule } from '@angular/material/card'
 import { DomSanitizer } from '@angular/platform-browser'
diff --git a/frontend/src/app/last-login-ip/last-login-ip.component.ts b/frontend/src/app/last-login-ip/last-login-ip.component.ts
index 21a785436a2..c3a4d29d976 100644
--- a/frontend/src/app/last-login-ip/last-login-ip.component.ts
+++ b/frontend/src/app/last-login-ip/last-login-ip.component.ts
@@ -12,7 +12,7 @@ import * as jwtDecode from 'jwt-decode'
   templateUrl: './last-login-ip.component.html',
   styleUrls: ['./last-login-ip.component.scss']
 
-  })
+})
 
 export class LastLoginIpComponent {
   lastLoginIp: any = '?'
diff --git a/frontend/src/app/login/login.component.spec.ts b/frontend/src/app/login/login.component.spec.ts
index 8211048b6be..e7309a40f32 100644
--- a/frontend/src/app/login/login.component.spec.ts
+++ b/frontend/src/app/login/login.component.spec.ts
@@ -7,7 +7,7 @@ import { SearchResultComponent } from '../search-result/search-result.component'
 import { WindowRefService } from '../Services/window-ref.service'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { UserService } from '../Services/user.service'
-import { ComponentFixture, fakeAsync, TestBed, tick, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, tick, waitForAsync } from '@angular/core/testing'
 import { LoginComponent } from './login.component'
 import { RouterTestingModule } from '@angular/router/testing'
 import { ReactiveFormsModule } from '@angular/forms'
diff --git a/frontend/src/app/login/login.component.ts b/frontend/src/app/login/login.component.ts
index 61546febf86..9bd137c1c16 100644
--- a/frontend/src/app/login/login.component.ts
+++ b/frontend/src/app/login/login.component.ts
@@ -6,9 +6,9 @@
 import { CookieService } from 'ngx-cookie'
 import { WindowRefService } from '../Services/window-ref.service'
 import { Router } from '@angular/router'
-import { Component, NgZone, OnInit } from '@angular/core'
+import { Component, NgZone, type OnInit } from '@angular/core'
 import { UntypedFormControl, Validators } from '@angular/forms'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { UserService } from '../Services/user.service'
 import { faEye, faEyeSlash, faKey } from '@fortawesome/free-solid-svg-icons'
 import { faGoogle } from '@fortawesome/free-brands-svg-icons'
@@ -17,7 +17,6 @@ import { ConfigurationService } from '../Services/configuration.service'
 import { BasketService } from '../Services/basket.service'
 
 library.add(faKey, faEye, faEyeSlash, faGoogle)
-dom.watch()
 
 const oauthProviderUrl = 'https://accounts.google.com/o/oauth2/v2/auth'
 
@@ -65,9 +64,9 @@ export class LoginComponent implements OnInit {
           console.log(this.redirectUri + ' is not an authorized redirect URI for this application.')
         }
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
 
-    this.formSubmitService.attachEnterKeyHandler('login-form', 'loginButton', () => this.login())
+    this.formSubmitService.attachEnterKeyHandler('login-form', 'loginButton', () => { this.login() })
   }
 
   login () {
diff --git a/frontend/src/app/navbar/navbar.component.spec.ts b/frontend/src/app/navbar/navbar.component.spec.ts
index fb18c181259..9f4b09bcb17 100644
--- a/frontend/src/app/navbar/navbar.component.spec.ts
+++ b/frontend/src/app/navbar/navbar.component.spec.ts
@@ -8,7 +8,7 @@ import { SearchResultComponent } from '../search-result/search-result.component'
 import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { UserService } from '../Services/user.service'
 import { ConfigurationService } from '../Services/configuration.service'
-import { ComponentFixture, fakeAsync, TestBed, tick, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, tick, waitForAsync } from '@angular/core/testing'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { NavbarComponent } from './navbar.component'
 import { Location } from '@angular/common'
@@ -39,7 +39,7 @@ import { MatRadioModule } from '@angular/material/radio'
 import { MatSnackBarModule } from '@angular/material/snack-bar'
 
 class MockSocket {
-  on (str: string, callback: Function) {
+  on (str: string, callback: any) {
     callback(str)
   }
 }
diff --git a/frontend/src/app/navbar/navbar.component.ts b/frontend/src/app/navbar/navbar.component.ts
index 4294d331fb0..28c3802319c 100644
--- a/frontend/src/app/navbar/navbar.component.ts
+++ b/frontend/src/app/navbar/navbar.component.ts
@@ -8,7 +8,7 @@ import { ChallengeService } from '../Services/challenge.service'
 import { UserService } from '../Services/user.service'
 import { AdministrationService } from '../Services/administration.service'
 import { ConfigurationService } from '../Services/configuration.service'
-import { Component, EventEmitter, NgZone, OnInit, Output } from '@angular/core'
+import { Component, EventEmitter, NgZone, type OnInit, Output } from '@angular/core'
 import { CookieService } from 'ngx-cookie'
 import { TranslateService } from '@ngx-translate/core'
 import { Router } from '@angular/router'
@@ -39,18 +39,17 @@ import {
 } from '@fortawesome/free-solid-svg-icons'
 import { faComments } from '@fortawesome/free-regular-svg-icons'
 import { faGithub } from '@fortawesome/free-brands-svg-icons'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { LoginGuard } from '../app.guard'
 import { roles } from '../roles'
 
 library.add(faLanguage, faSearch, faSignInAlt, faSignOutAlt, faComment, faBomb, faTrophy, faInfoCircle, faShoppingCart, faUserSecret, faRecycle, faMapMarker, faUserCircle, faGithub, faComments, faThermometerEmpty, faThermometerQuarter, faThermometerHalf, faThermometerThreeQuarters, faThermometerFull)
-dom.watch()
 
 @Component({
   selector: 'app-navbar',
   templateUrl: './navbar.component.html',
   styleUrls: ['./navbar.component.scss']
-  })
+})
 export class NavbarComponent implements OnInit {
   public userEmail: string = ''
   public languages: any = []
@@ -79,7 +78,7 @@ export class NavbarComponent implements OnInit {
         // eslint-disable-next-line @typescript-eslint/restrict-template-expressions
         this.version = `v${version}`
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
 
     this.configurationService.getApplicationConfiguration().subscribe((config: any) => {
       if (config?.application?.name) {
@@ -97,7 +96,7 @@ export class NavbarComponent implements OnInit {
         }
         this.logoSrc = 'assets/public/images/' + logo
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
 
     if (localStorage.getItem('token')) {
       this.getUserDetails()
@@ -149,7 +148,7 @@ export class NavbarComponent implements OnInit {
   getUserDetails () {
     this.userService.whoAmI().subscribe((user: any) => {
       this.userEmail = user.email
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   isLoggedIn () {
@@ -157,7 +156,7 @@ export class NavbarComponent implements OnInit {
   }
 
   logout () {
-    this.userService.saveLastLoginIp().subscribe((user: any) => { this.noop() }, (err) => console.log(err))
+    this.userService.saveLastLoginIp().subscribe((user: any) => { this.noop() }, (err) => { console.log(err) })
     localStorage.removeItem('token')
     this.cookieService.remove('token')
     sessionStorage.removeItem('bid')
@@ -189,7 +188,7 @@ export class NavbarComponent implements OnInit {
       this.ngZone.run(() => {
         this.scoreBoardVisible = challenges[0].solved
       })
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   goToProfilePage () {
diff --git a/frontend/src/app/nft-unlock/nft-unlock.component.html b/frontend/src/app/nft-unlock/nft-unlock.component.html
new file mode 100644
index 00000000000..586f20c89e4
--- /dev/null
+++ b/frontend/src/app/nft-unlock/nft-unlock.component.html
@@ -0,0 +1,90 @@
+<mat-card>
+  <div class="container" fxLayout="column" fxLayoutGap="20px">
+    <button
+      class="detail-container offer-container warning-container"
+      mat-raised-button
+      color="warn"
+      fxFlexAlign="center"
+      translate
+    >
+      BTN_SBT_NOTE
+    </button>
+    <div
+      class="detail-container offer-container"
+      fxFlexAlign="center"
+      fxLayout="row"
+      fxLayout.lt-lg="column"
+    >
+      <div>
+        <img src="assets/public/images/products/juicy_chatbot.jpg" />
+      </div>
+      <div *ngIf="!successResponse">
+        <div>
+          <mat-card-title translate>TITLE_SBT</mat-card-title>
+        </div>
+        <form (ngSubmit)="submitForm()">
+          <div class="form-group">
+            <mat-form-field
+              style="width: 350px"
+              color="accent"
+              appearance="outline"
+            >
+              <mat-label translate>LABEL_PRIVATE_KEY</mat-label>
+              <input
+                matInput
+                [(ngModel)]="privateKey"
+                id="privateKey"
+                name="privateKey"
+                required
+                type="text"
+                aria-label="Text field for the private key"
+              />
+            </mat-form-field>
+            <h5 class="error">{{ errorMessage }}</h5>
+          </div>
+
+          <button
+            type="submit"
+            class="btn btn-primary"
+            mat-raised-button
+            color="accent"
+            translate
+          >
+            BTN_AUTHENTICATE
+          </button>
+        </form>
+      </div>
+      <div *ngIf="successResponse">
+        <div>
+          <mat-card-title translate>TITLE_SBT</mat-card-title>
+        </div>
+        <div class="owner-text">
+          {{'OWNED_BY' | translate}}
+          <a
+            target="_blank"
+            href="https://testnets.opensea.io/0x8343d2eb2B13A2495De435a1b15e85b98115Ce05"
+            >8343D2</a
+          >
+        </div>
+        <mat-divider class="detail-divider"></mat-divider>
+        <div class="detail-box mat-elevation-z6">
+          <div class="box-title" translate>LABEL_ACCOUNT_ADDRESS</div>
+          <mat-divider class="detail-divider"></mat-divider>
+          <p class="box-text">0x8343d2eb2B13A2495De435a1b15e85b98115Ce05</p>
+        </div>
+        <div class="detail-box mat-elevation-z6">
+          <div class="box-title" translate>LABEL_DESCRIPTION</div>
+          <mat-divider class="detail-divider"></mat-divider>
+          <p class="box-text">
+            {{'NFT_SBT_BOX_TEXT' | translate: {
+              link: '<a
+                target="_blank"
+                href="https://testnets.opensea.io/assets/mumbai/0xf4817631372dca68a25a18eb7a0b36d54f3dbcf7/0"
+              >Opensea</a>'
+            } }}
+          </p>
+        </div>
+      </div>
+    </div>
+  </div>
+</mat-card>
diff --git a/frontend/src/app/nft-unlock/nft-unlock.component.scss b/frontend/src/app/nft-unlock/nft-unlock.component.scss
new file mode 100644
index 00000000000..8da4b7e836a
--- /dev/null
+++ b/frontend/src/app/nft-unlock/nft-unlock.component.scss
@@ -0,0 +1,70 @@
+.container {
+  justify-content: center;
+}
+
+.heading {
+  justify-content: center;
+  margin-bottom: 10px;
+  padding: 12px 20px;
+}
+
+.detail-container.offer-container {
+  display: flex;
+  gap: 16px;
+  max-width: 700px;
+  min-width: 300px;
+  width: 70%;
+}
+
+.owner-text {
+  margin-bottom: 10px;
+}
+
+.warning-container {
+  border-radius: 4px;
+  font-weight: 600;
+  justify-content: center;
+  padding: 16px;
+  text-align: center;
+  white-space: normal;
+}
+
+.title {
+  padding-bottom: 27px;
+}
+
+.text-justify {
+  text-align: justify;
+}
+
+mat-card {
+  margin-bottom: 10px;
+}
+
+mat-card:nth-child(1) {
+  border-radius: 5px;
+  margin: 0 auto;
+  width: 80%;
+}
+
+.detail-box {
+  margin-bottom: 16px;
+  padding: 16px;
+}
+
+.box-title {
+  font-size: 16px;
+  font-weight: 500;
+}
+
+.box-text {
+  margin-top: 8px;
+  overflow-wrap: break-word;
+}
+
+.form-group {
+  display: flex;
+  flex-direction: column;
+  margin-top: 16px;
+  width: 100%;
+}
diff --git a/frontend/src/app/nft-unlock/nft-unlock.component.ts b/frontend/src/app/nft-unlock/nft-unlock.component.ts
new file mode 100644
index 00000000000..6fa9ea67c7b
--- /dev/null
+++ b/frontend/src/app/nft-unlock/nft-unlock.component.ts
@@ -0,0 +1,51 @@
+import { ConfigurationService } from '../Services/configuration.service'
+import { Component, OnInit } from '@angular/core'
+import { KeysService } from '../Services/keys.service'
+
+@Component({
+  selector: 'app-nft-unlock',
+  templateUrl: './nft-unlock.component.html',
+  styleUrls: ['./nft-unlock.component.scss']
+})
+export class NFTUnlockComponent {
+  privateKey: string
+  formSubmitted: boolean = false
+  successResponse: boolean = false
+  errorMessage = ''
+
+  constructor (private readonly keysService: KeysService) {}
+
+  ngOnInit () {
+    this.checkChallengeStatus()
+  }
+
+  checkChallengeStatus () {
+    this.keysService.nftUnlocked().subscribe(
+      (response) => {
+        this.successResponse = response.status
+      },
+      (error) => {
+        console.error(error)
+        this.successResponse = false
+      }
+    )
+  }
+
+  submitForm () {
+    this.formSubmitted = true
+    this.keysService.submitKey(this.privateKey).subscribe(
+      (response) => {
+        if (response.success) {
+          this.successResponse = true
+          this.errorMessage = response.message
+        } else {
+          this.successResponse = false
+        }
+      },
+      (error) => {
+        this.successResponse = false
+        this.errorMessage = error.error.message
+      }
+    )
+  }
+}
diff --git a/frontend/src/app/oauth/oauth.component.spec.ts b/frontend/src/app/oauth/oauth.component.spec.ts
index 2d0d4e9e4f2..25cc9a7b793 100644
--- a/frontend/src/app/oauth/oauth.component.spec.ts
+++ b/frontend/src/app/oauth/oauth.component.spec.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { TranslateModule } from '@ngx-translate/core'
 import { MatIconModule } from '@angular/material/icon'
 import { MatCheckboxModule } from '@angular/material/checkbox'
diff --git a/frontend/src/app/oauth/oauth.component.ts b/frontend/src/app/oauth/oauth.component.ts
index dac265988bb..4ab2233a0b4 100644
--- a/frontend/src/app/oauth/oauth.component.ts
+++ b/frontend/src/app/oauth/oauth.component.ts
@@ -6,22 +6,22 @@
 import { ActivatedRoute, Router } from '@angular/router'
 import { UserService } from '../Services/user.service'
 import { CookieService } from 'ngx-cookie'
-import { Component, NgZone, OnInit } from '@angular/core'
+import { Component, NgZone, type OnInit } from '@angular/core'
 
 @Component({
   selector: 'app-oauth',
   templateUrl: './oauth.component.html',
   styleUrls: ['./oauth.component.scss']
-  })
+})
 export class OAuthComponent implements OnInit {
   constructor (private readonly cookieService: CookieService, private readonly userService: UserService, private readonly router: Router, private readonly route: ActivatedRoute, private readonly ngZone: NgZone) { }
 
   ngOnInit () {
     this.userService.oauthLogin(this.parseRedirectUrlParams().access_token).subscribe((profile: any) => {
       const password = btoa(profile.email.split('').reverse().join(''))
-      this.userService.save({ email: profile.email, password: password, passwordRepeat: password }).subscribe(() => {
+      this.userService.save({ email: profile.email, password, passwordRepeat: password }).subscribe(() => {
         this.login(profile)
-      }, () => this.login(profile))
+      }, () => { this.login(profile) })
     }, (error) => {
       this.invalidateSession(error)
       this.ngZone.run(async () => await this.router.navigate(['/login']))
diff --git a/frontend/src/app/order-completion/order-completion.component.spec.ts b/frontend/src/app/order-completion/order-completion.component.spec.ts
index ec2c398e471..31662b0de30 100644
--- a/frontend/src/app/order-completion/order-completion.component.spec.ts
+++ b/frontend/src/app/order-completion/order-completion.component.spec.ts
@@ -6,7 +6,7 @@
 import { TranslateModule } from '@ngx-translate/core'
 import { MatDividerModule } from '@angular/material/divider'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { RouterTestingModule } from '@angular/router/testing'
 import { MatGridListModule } from '@angular/material/grid-list'
 import { MatCardModule } from '@angular/material/card'
diff --git a/frontend/src/app/order-completion/order-completion.component.ts b/frontend/src/app/order-completion/order-completion.component.ts
index 5df41e428e3..5342fbfc3b9 100644
--- a/frontend/src/app/order-completion/order-completion.component.ts
+++ b/frontend/src/app/order-completion/order-completion.component.ts
@@ -3,24 +3,23 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, OnInit } from '@angular/core'
+import { Component, type OnInit } from '@angular/core'
 import { TrackOrderService } from '../Services/track-order.service'
-import { ActivatedRoute, ParamMap } from '@angular/router'
+import { ActivatedRoute, type ParamMap } from '@angular/router'
 import { MatTableDataSource } from '@angular/material/table'
 import { BasketService } from '../Services/basket.service'
 import { AddressService } from '../Services/address.service'
 import { ConfigurationService } from '../Services/configuration.service'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faTwitter } from '@fortawesome/free-brands-svg-icons'
 
 library.add(faTwitter)
-dom.watch()
 
 @Component({
   selector: 'app-order-completion',
   templateUrl: './order-completion.component.html',
   styleUrls: ['./order-completion.component.scss']
-  })
+})
 export class OrderCompletionComponent implements OnInit {
   public tableColumns = ['product', 'price', 'quantity', 'total price']
   public dataSource
@@ -62,12 +61,12 @@ export class OrderCompletionComponent implements OnInit {
               this.tweetText += config.application.name
             }
           }
-        }, (err) => console.log(err))
+        }, (err) => { console.log(err) })
         this.addressService.getById(this.orderDetails.addressId).subscribe((address) => {
           this.address = address
-        }, (error) => console.log(error))
-      }, (err) => console.log(err))
-    }, (err) => console.log(err))
+        }, (error) => { console.log(error) })
+      }, (err) => { console.log(err) })
+    }, (err) => { console.log(err) })
   }
 
   openConfirmationPDF () {
diff --git a/frontend/src/app/order-history/order-history.component.spec.ts b/frontend/src/app/order-history/order-history.component.spec.ts
index e769adb457a..d62aafd86ed 100644
--- a/frontend/src/app/order-history/order-history.component.spec.ts
+++ b/frontend/src/app/order-history/order-history.component.spec.ts
@@ -6,7 +6,7 @@
 import { TranslateModule } from '@ngx-translate/core'
 import { MatDividerModule } from '@angular/material/divider'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { ProductService } from '../Services/product.service'
 import { RouterTestingModule } from '@angular/router/testing'
 import { MatGridListModule } from '@angular/material/grid-list'
@@ -19,7 +19,7 @@ import { MatFormFieldModule } from '@angular/material/form-field'
 import { throwError } from 'rxjs/internal/observable/throwError'
 import { OrderHistoryService } from '../Services/order-history.service'
 import { OrderHistoryComponent } from './order-history.component'
-import { Product } from '../Models/product.model'
+import { type Product } from '../Models/product.model'
 import { ProductDetailsComponent } from '../product-details/product-details.component'
 import { MatIconModule } from '@angular/material/icon'
 import { MatTooltipModule } from '@angular/material/tooltip'
diff --git a/frontend/src/app/order-history/order-history.component.ts b/frontend/src/app/order-history/order-history.component.ts
index c8b113f5164..c272f4c8718 100644
--- a/frontend/src/app/order-history/order-history.component.ts
+++ b/frontend/src/app/order-history/order-history.component.ts
@@ -3,13 +3,13 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, NgZone, OnInit } from '@angular/core'
+import { Component, NgZone, type OnInit } from '@angular/core'
 import { OrderHistoryService } from '../Services/order-history.service'
 import { MatTableDataSource } from '@angular/material/table'
 import { BasketService } from '../Services/basket.service'
 import { ProductDetailsComponent } from '../product-details/product-details.component'
 import { MatDialog } from '@angular/material/dialog'
-import { Product } from '../Models/product.model'
+import { type Product } from '../Models/product.model'
 import { ProductService } from '../Services/product.service'
 import { Router } from '@angular/router'
 
@@ -33,7 +33,7 @@ export interface Order {
   selector: 'app-order-history',
   templateUrl: './order-history.component.html',
   styleUrls: ['./order-history.component.scss']
-  })
+})
 export class OrderHistoryComponent implements OnInit {
   public tableColumns = ['product', 'price', 'quantity', 'total price', 'review']
   public orders: Order[] = []
@@ -68,7 +68,7 @@ export class OrderHistoryComponent implements OnInit {
           delivered: order.delivered
         })
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   showDetail (id: number) {
@@ -88,7 +88,7 @@ export class OrderHistoryComponent implements OnInit {
           productData: element
         }
       })
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   openConfirmationPDF (orderId: string) {
diff --git a/frontend/src/app/order-summary/order-summary.component.spec.ts b/frontend/src/app/order-summary/order-summary.component.spec.ts
index 6823db21da1..6be9557144b 100644
--- a/frontend/src/app/order-summary/order-summary.component.spec.ts
+++ b/frontend/src/app/order-summary/order-summary.component.spec.ts
@@ -5,7 +5,7 @@
 
 import { TranslateModule } from '@ngx-translate/core'
 import { MatInputModule } from '@angular/material/input'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { MatCardModule } from '@angular/material/card'
 import { MatTableModule } from '@angular/material/table'
 import { MatButtonModule } from '@angular/material/button'
diff --git a/frontend/src/app/order-summary/order-summary.component.ts b/frontend/src/app/order-summary/order-summary.component.ts
index bf5db65f96d..6942aa1c1d7 100644
--- a/frontend/src/app/order-summary/order-summary.component.ts
+++ b/frontend/src/app/order-summary/order-summary.component.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, NgZone, OnInit } from '@angular/core'
+import { Component, NgZone, type OnInit } from '@angular/core'
 import { AddressService } from '../Services/address.service'
 import { PaymentService } from '../Services/payment.service'
 import { BasketService } from '../Services/basket.service'
@@ -15,7 +15,7 @@ import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
   selector: 'app-order-summary',
   templateUrl: './order-summary.component.html',
   styleUrls: ['./order-summary.component.scss']
-  })
+})
 export class OrderSummaryComponent implements OnInit {
   public bonus = 0
   public itemTotal = 0
@@ -32,13 +32,13 @@ export class OrderSummaryComponent implements OnInit {
 
     this.addressService.getById(sessionStorage.getItem('addressId')).subscribe((address) => {
       this.address = address
-    }, (error) => console.log(error))
+    }, (error) => { console.log(error) })
 
     if (sessionStorage.getItem('paymentId') !== 'wallet') {
       this.paymentService.getById(sessionStorage.getItem('paymentId')).subscribe((card) => {
         card.cardNum = String(card.cardNum).substring(String(card.cardNum).length - 4)
         this.paymentMethod = card
-      }, (err) => console.log(err))
+      }, (err) => { console.log(err) })
     } else if (sessionStorage.getItem('paymentId') === 'wallet') {
       this.paymentMethod = 'wallet'
     }
diff --git a/frontend/src/app/payment-method/payment-method.component.spec.ts b/frontend/src/app/payment-method/payment-method.component.spec.ts
index 5703a8c5c96..1170eff67a5 100644
--- a/frontend/src/app/payment-method/payment-method.component.spec.ts
+++ b/frontend/src/app/payment-method/payment-method.component.spec.ts
@@ -7,7 +7,7 @@ import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { MatCardModule } from '@angular/material/card'
 import { MatFormFieldModule } from '@angular/material/form-field'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { MatInputModule } from '@angular/material/input'
 import { ReactiveFormsModule } from '@angular/forms'
 import { BrowserAnimationsModule } from '@angular/platform-browser/animations'
@@ -148,9 +148,11 @@ describe('PaymentMethodComponent', () => {
   it('card number should be in the range [1000000000000000, 9999999999999999]', () => {
     component.numberControl.setValue(1111110)
     expect(component.numberControl.valid).toBeFalsy()
-    component.numberControl.setValue(99999999999999999) // eslint-disable-line no-loss-of-precision
+    // eslint-disable-next-line @typescript-eslint/no-loss-of-precision
+    component.numberControl.setValue(99999999999999999)
     expect(component.numberControl.valid).toBeFalsy()
-    component.numberControl.setValue(9999999999999999) // eslint-disable-line no-loss-of-precision
+    // eslint-disable-next-line @typescript-eslint/no-loss-of-precision
+    component.numberControl.setValue(9999999999999999)
     expect(component.numberControl.valid).toBe(true)
     component.numberControl.setValue(1234567887654321)
     expect(component.numberControl.valid).toBe(true)
diff --git a/frontend/src/app/payment-method/payment-method.component.ts b/frontend/src/app/payment-method/payment-method.component.ts
index 9ade15da5de..4c08016298d 100644
--- a/frontend/src/app/payment-method/payment-method.component.ts
+++ b/frontend/src/app/payment-method/payment-method.component.ts
@@ -4,30 +4,30 @@
  */
 
 import { UntypedFormControl, Validators } from '@angular/forms'
-import { Component, EventEmitter, Input, OnInit, Output } from '@angular/core'
+import { Component, EventEmitter, Input, type OnInit, Output } from '@angular/core'
 import { PaymentService } from '../Services/payment.service'
 import { MatTableDataSource } from '@angular/material/table'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faPaperPlane } from '@fortawesome/free-solid-svg-icons'
 import { faTrashAlt } from '@fortawesome/free-regular-svg-icons/'
 import { TranslateService } from '@ngx-translate/core'
 import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
 
 library.add(faPaperPlane, faTrashAlt)
-dom.watch()
 
 @Component({
   selector: 'app-payment-method',
   templateUrl: './payment-method.component.html',
   styleUrls: ['./payment-method.component.scss']
-  })
+})
 
 export class PaymentMethodComponent implements OnInit {
   @Output() emitSelection = new EventEmitter()
   @Input('allowDelete') public allowDelete: boolean = false
   public displayedColumns = ['Number', 'Name', 'Expiry']
   public nameControl: UntypedFormControl = new UntypedFormControl('', [Validators.required])
-  public numberControl: UntypedFormControl = new UntypedFormControl('', [Validators.required, Validators.min(1000000000000000), Validators.max(9999999999999999)]) // eslint-disable-line no-loss-of-precision
+  // eslint-disable-next-line @typescript-eslint/no-loss-of-precision
+  public numberControl: UntypedFormControl = new UntypedFormControl('', [Validators.required, Validators.min(1000000000000000), Validators.max(9999999999999999)])
   public monthControl: UntypedFormControl = new UntypedFormControl('', [Validators.required])
   public yearControl: UntypedFormControl = new UntypedFormControl('', [Validators.required])
   public confirmation: any
@@ -58,7 +58,7 @@ export class PaymentMethodComponent implements OnInit {
       this.cardsExist = cards.length
       this.storedCards = cards
       this.dataSource = new MatTableDataSource<Element>(this.storedCards)
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   save () {
@@ -84,7 +84,7 @@ export class PaymentMethodComponent implements OnInit {
   delete (id) {
     this.paymentService.del(id).subscribe(() => {
       this.load()
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   emitSelectionToParent (id: number) {
diff --git a/frontend/src/app/payment/payment.component.spec.ts b/frontend/src/app/payment/payment.component.spec.ts
index a14382577f3..4603c18c1eb 100644
--- a/frontend/src/app/payment/payment.component.spec.ts
+++ b/frontend/src/app/payment/payment.component.spec.ts
@@ -7,7 +7,7 @@ import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { MatCardModule } from '@angular/material/card'
 import { MatFormFieldModule } from '@angular/material/form-field'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { PaymentComponent } from './payment.component'
 import { MatInputModule } from '@angular/material/input'
 import { ReactiveFormsModule } from '@angular/forms'
diff --git a/frontend/src/app/payment/payment.component.ts b/frontend/src/app/payment/payment.component.ts
index 0511fe8f5f3..58172347d74 100644
--- a/frontend/src/app/payment/payment.component.ts
+++ b/frontend/src/app/payment/payment.component.ts
@@ -4,11 +4,11 @@
  */
 
 import { UntypedFormControl, Validators } from '@angular/forms'
-import { Component, NgZone, OnInit } from '@angular/core'
+import { Component, NgZone, type OnInit } from '@angular/core'
 import { ConfigurationService } from '../Services/configuration.service'
 import { BasketService } from '../Services/basket.service'
 import { TranslateService } from '@ngx-translate/core'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import {
   faCartArrowDown,
   faCoffee,
@@ -24,7 +24,7 @@ import {
 import { faLeanpub, faStripe } from '@fortawesome/free-brands-svg-icons'
 import { QrCodeComponent } from '../qr-code/qr-code.component'
 import { MatDialog } from '@angular/material/dialog'
-import { ActivatedRoute, ParamMap, Router } from '@angular/router'
+import { ActivatedRoute, type ParamMap, Router } from '@angular/router'
 import { WalletService } from '../Services/wallet.service'
 import { DeliveryService } from '../Services/delivery.service'
 import { UserService } from '../Services/user.service'
@@ -33,13 +33,12 @@ import { Location } from '@angular/common'
 import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
 
 library.add(faCartArrowDown, faGift, faHeart, faLeanpub, faThumbsUp, faTshirt, faStickyNote, faHandHoldingUsd, faCoffee, faTimes, faStripe, faPalette)
-dom.watch()
 
 @Component({
   selector: 'app-payment',
   templateUrl: './payment.component.html',
   styleUrls: ['./payment.component.scss']
-  })
+})
 export class PaymentComponent implements OnInit {
   public couponConfirmation: any
   public couponError: any
@@ -82,7 +81,7 @@ export class PaymentComponent implements OnInit {
     this.walletService.get().subscribe((balance) => {
       this.walletBalance = balance
       this.walletBalanceStr = parseFloat(balance).toFixed(2)
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
     this.couponPanelExpanded = localStorage.getItem('couponPanelExpanded') ? JSON.parse(localStorage.getItem('couponPanelExpanded')) : false
     this.paymentPanelExpanded = localStorage.getItem('paymentPanelExpanded') ? JSON.parse(localStorage.getItem('paymentPanelExpanded')) : false
 
@@ -98,7 +97,7 @@ export class PaymentComponent implements OnInit {
           this.applicationName = config.application.name
         }
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   initTotal () {
@@ -109,7 +108,7 @@ export class PaymentComponent implements OnInit {
       } else if (this.mode === 'deluxe') {
         this.userService.deluxeStatus().subscribe((res) => {
           this.totalPrice = res.membershipCost
-        }, (err) => console.log(err))
+        }, (err) => { console.log(err) })
       } else {
         const itemTotal = parseFloat(sessionStorage.getItem('itemTotal'))
         const promotionalDiscount = sessionStorage.getItem('couponDiscount') ? (parseFloat(sessionStorage.getItem('couponDiscount')) / 100) * itemTotal : 0
@@ -118,7 +117,7 @@ export class PaymentComponent implements OnInit {
           this.totalPrice = itemTotal + deliveryPrice - promotionalDiscount
         })
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   applyCoupon () {
@@ -191,7 +190,7 @@ export class PaymentComponent implements OnInit {
         localStorage.setItem('token', data.token)
         this.cookieService.put('token', data.token)
         this.ngZone.run(async () => await this.router.navigate(['/deluxe-membership']))
-      }, (err) => console.log(err))
+      }, (err) => { console.log(err) })
     } else {
       if (this.paymentMode === 'wallet') {
         if (this.walletBalance < this.totalPrice) {
diff --git a/frontend/src/app/photo-wall/mime-type.validator.ts b/frontend/src/app/photo-wall/mime-type.validator.ts
index f267ade056e..50d63455e77 100644
--- a/frontend/src/app/photo-wall/mime-type.validator.ts
+++ b/frontend/src/app/photo-wall/mime-type.validator.ts
@@ -3,19 +3,19 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { AbstractControl } from '@angular/forms'
-import { Observable, Observer, of } from 'rxjs'
+import { type AbstractControl } from '@angular/forms'
+import { Observable, type Observer, of } from 'rxjs'
 
 export const mimeType = (
   control: AbstractControl
-): Promise<{ [key: string]: any }> | Observable<{ [key: string]: any }> => {
+): Promise<Record<string, any>> | Observable<Record<string, any>> => {
   if (typeof (control.value) === 'string') {
     return of(null)
   }
   const file = control.value as File
   const fileReader = new FileReader()
   const frObs = new Observable(
-    (observer: Observer<{ [key: string]: any }>) => {
+    (observer: Observer<Record<string, any>>) => {
       fileReader.addEventListener('loadend', () => {
         const arr = new Uint8Array(fileReader.result as ArrayBuffer).subarray(0, 4)
         let header = ''
diff --git a/frontend/src/app/photo-wall/photo-wall.component.spec.ts b/frontend/src/app/photo-wall/photo-wall.component.spec.ts
index 8bdb0b2ed95..bbcd8b7f700 100644
--- a/frontend/src/app/photo-wall/photo-wall.component.spec.ts
+++ b/frontend/src/app/photo-wall/photo-wall.component.spec.ts
@@ -6,7 +6,7 @@
 import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { MatDividerModule } from '@angular/material/divider'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { RouterTestingModule } from '@angular/router/testing'
 import { MatGridListModule } from '@angular/material/grid-list'
 import { MatCardModule } from '@angular/material/card'
diff --git a/frontend/src/app/photo-wall/photo-wall.component.ts b/frontend/src/app/photo-wall/photo-wall.component.ts
index abb2bb394a4..04abeb75f0c 100644
--- a/frontend/src/app/photo-wall/photo-wall.component.ts
+++ b/frontend/src/app/photo-wall/photo-wall.component.ts
@@ -3,24 +3,23 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, OnInit } from '@angular/core'
+import { Component, type OnInit } from '@angular/core'
 import { UntypedFormControl, UntypedFormGroup, Validators } from '@angular/forms'
 import { mimeType } from './mime-type.validator'
 import { PhotoWallService } from '../Services/photo-wall.service'
-import { IImage } from 'ng-simple-slideshow'
+import { type IImage } from 'ng-simple-slideshow'
 import { ConfigurationService } from '../Services/configuration.service'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faTwitter } from '@fortawesome/free-brands-svg-icons'
 import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
 
 library.add(faTwitter)
-dom.watch()
 
 @Component({
   selector: 'app-photo-wall',
   templateUrl: './photo-wall.component.html',
   styleUrls: ['./photo-wall.component.scss']
-  })
+})
 export class PhotoWallComponent implements OnInit {
   public emptyState: boolean = true
   public imagePreview: string
@@ -50,14 +49,14 @@ export class PhotoWallComponent implements OnInit {
         }
         this.slideshowDataSource.push({ url: memory.imagePath, caption: memory.caption })
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
     this.configurationService.getApplicationConfiguration().subscribe((config) => {
       if (config?.application?.social) {
         if (config.application.social.twitterUrl) {
           this.twitterHandle = config.application.social.twitterUrl.replace('https://twitter.com/', '@')
         }
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   onImagePicked (event: Event) {
diff --git a/frontend/src/app/privacy-policy/privacy-policy.component.spec.ts b/frontend/src/app/privacy-policy/privacy-policy.component.spec.ts
index 140aa9700fd..b57a58b3b5b 100644
--- a/frontend/src/app/privacy-policy/privacy-policy.component.spec.ts
+++ b/frontend/src/app/privacy-policy/privacy-policy.component.spec.ts
@@ -4,7 +4,7 @@
  */
 
 import { HttpClientTestingModule } from '@angular/common/http/testing'
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 import { ConfigurationService } from '../Services/configuration.service'
 import { MatCardModule } from '@angular/material/card'
 import { MatDividerModule } from '@angular/material/divider'
diff --git a/frontend/src/app/privacy-policy/privacy-policy.component.ts b/frontend/src/app/privacy-policy/privacy-policy.component.ts
index 7e124999c55..9d1c4664cc0 100644
--- a/frontend/src/app/privacy-policy/privacy-policy.component.ts
+++ b/frontend/src/app/privacy-policy/privacy-policy.component.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, Inject, OnInit } from '@angular/core'
+import { Component, Inject, type OnInit } from '@angular/core'
 import { DOCUMENT } from '@angular/common'
 import { ConfigurationService } from '../Services/configuration.service'
 
@@ -11,7 +11,7 @@ import { ConfigurationService } from '../Services/configuration.service'
   selector: 'app-privacy-policy',
   templateUrl: './privacy-policy.component.html',
   styleUrls: ['./privacy-policy.component.scss']
-  })
+})
 export class PrivacyPolicyComponent implements OnInit {
   public applicationName: string = 'OWASP Juice Shop'
   public privacyContactEmail!: string
@@ -30,6 +30,6 @@ export class PrivacyPolicyComponent implements OnInit {
       } else {
         this.privacyContactEmail = `donotreply@${this._document.location.hostname}`
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 }
diff --git a/frontend/src/app/privacy-security/privacy-security.component.spec.ts b/frontend/src/app/privacy-security/privacy-security.component.spec.ts
index 6d9c4c026ac..812b1721833 100644
--- a/frontend/src/app/privacy-security/privacy-security.component.spec.ts
+++ b/frontend/src/app/privacy-security/privacy-security.component.spec.ts
@@ -4,7 +4,7 @@
  */
 
 import { LayoutModule } from '@angular/cdk/layout'
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 import { NoopAnimationsModule } from '@angular/platform-browser/animations'
 import { PrivacySecurityComponent } from './privacy-security.component'
 import { ChangePasswordComponent } from '../change-password/change-password.component'
diff --git a/frontend/src/app/privacy-security/privacy-security.component.ts b/frontend/src/app/privacy-security/privacy-security.component.ts
index 433fbddb631..77b40c588be 100644
--- a/frontend/src/app/privacy-security/privacy-security.component.ts
+++ b/frontend/src/app/privacy-security/privacy-security.component.ts
@@ -5,14 +5,14 @@
 
 import { Component } from '@angular/core'
 import { BreakpointObserver, Breakpoints } from '@angular/cdk/layout'
-import { Observable } from 'rxjs'
+import { type Observable } from 'rxjs'
 import { map } from 'rxjs/operators'
 
 @Component({
   selector: 'app-privacy-security',
   templateUrl: './privacy-security.component.html',
   styleUrls: ['./privacy-security.component.scss']
-  })
+})
 export class PrivacySecurityComponent {
   Ip!: string
   windowWidth: number = window.innerWidth
diff --git a/frontend/src/app/product-details/product-details.component.spec.ts b/frontend/src/app/product-details/product-details.component.spec.ts
index ff10cd067fd..938f696e47f 100644
--- a/frontend/src/app/product-details/product-details.component.spec.ts
+++ b/frontend/src/app/product-details/product-details.component.spec.ts
@@ -16,7 +16,7 @@ import { MatInputModule } from '@angular/material/input'
 import { MatFormFieldModule } from '@angular/material/form-field'
 import { MAT_DIALOG_DATA, MatDialog, MatDialogModule } from '@angular/material/dialog'
 import { MatBadgeModule } from '@angular/material/badge'
-import { ComponentFixture, fakeAsync, flush, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, flush, TestBed, waitForAsync } from '@angular/core/testing'
 import { MatTooltipModule } from '@angular/material/tooltip'
 import { MatIconModule } from '@angular/material/icon'
 import { MatExpansionModule } from '@angular/material/expansion'
@@ -25,7 +25,7 @@ import { ProductDetailsComponent } from './product-details.component'
 import { of, throwError } from 'rxjs'
 import { ReactiveFormsModule } from '@angular/forms'
 import { MatSnackBarModule } from '@angular/material/snack-bar'
-import { Product } from '../Models/product.model'
+import { type Product } from '../Models/product.model'
 
 describe('ProductDetailsComponent', () => {
   let component: ProductDetailsComponent
diff --git a/frontend/src/app/product-details/product-details.component.ts b/frontend/src/app/product-details/product-details.component.ts
index 585608c36cb..30067dc7662 100644
--- a/frontend/src/app/product-details/product-details.component.ts
+++ b/frontend/src/app/product-details/product-details.component.ts
@@ -6,31 +6,30 @@
 import { ProductReviewEditComponent } from '../product-review-edit/product-review-edit.component'
 import { UserService } from '../Services/user.service'
 import { ProductReviewService } from '../Services/product-review.service'
-import { Component, Inject, OnDestroy, OnInit } from '@angular/core'
+import { Component, Inject, type OnDestroy, type OnInit } from '@angular/core'
 import { MAT_DIALOG_DATA, MatDialog } from '@angular/material/dialog'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faArrowCircleLeft, faCrown, faPaperPlane, faThumbsUp, faUserEdit } from '@fortawesome/free-solid-svg-icons'
 import { UntypedFormControl, Validators } from '@angular/forms'
 import { MatSnackBar } from '@angular/material/snack-bar'
 import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
-import { Review } from '../Models/review.model'
-import { Product } from '../Models/product.model'
+import { type Review } from '../Models/review.model'
+import { type Product } from '../Models/product.model'
 
 library.add(faPaperPlane, faArrowCircleLeft, faUserEdit, faThumbsUp, faCrown)
-dom.watch()
 
 @Component({
   selector: 'app-product-details',
   templateUrl: './product-details.component.html',
   styleUrls: ['./product-details.component.scss']
-  })
+})
 export class ProductDetailsComponent implements OnInit, OnDestroy {
   public author: string = 'Anonymous'
   public reviews$: any
   public userSubscription: any
   public reviewControl: UntypedFormControl = new UntypedFormControl('', [Validators.maxLength(160)])
   constructor (private readonly dialog: MatDialog,
-    @Inject(MAT_DIALOG_DATA) public data: { productData: Product}, private readonly productReviewService: ProductReviewService,
+    @Inject(MAT_DIALOG_DATA) public data: { productData: Product }, private readonly productReviewService: ProductReviewService,
     private readonly userService: UserService, private readonly snackBar: MatSnackBar, private readonly snackBarHelperService: SnackBarHelperService) { }
 
   ngOnInit () {
@@ -42,7 +41,7 @@ export class ProductDetailsComponent implements OnInit, OnDestroy {
       } else {
         this.author = 'Anonymous'
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   ngOnDestroy () {
@@ -57,7 +56,7 @@ export class ProductDetailsComponent implements OnInit, OnDestroy {
     textPut.value = ''
     this.productReviewService.create(this.data.productData.id, review).subscribe(() => {
       this.reviews$ = this.productReviewService.get(this.data.productData.id)
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
     this.snackBarHelperService.open('CONFIRM_REVIEW_SAVED')
   }
 
diff --git a/frontend/src/app/product-review-edit/product-review-edit.component.spec.ts b/frontend/src/app/product-review-edit/product-review-edit.component.spec.ts
index ef2a7c98148..05630aa3c4e 100644
--- a/frontend/src/app/product-review-edit/product-review-edit.component.spec.ts
+++ b/frontend/src/app/product-review-edit/product-review-edit.component.spec.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { ComponentFixture, fakeAsync, flush, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, flush, TestBed, waitForAsync } from '@angular/core/testing'
 import { TranslateModule } from '@ngx-translate/core'
 import { ProductReviewEditComponent } from './product-review-edit.component'
 import { ReactiveFormsModule } from '@angular/forms'
diff --git a/frontend/src/app/product-review-edit/product-review-edit.component.ts b/frontend/src/app/product-review-edit/product-review-edit.component.ts
index a941283d191..75e65aeb33b 100644
--- a/frontend/src/app/product-review-edit/product-review-edit.component.ts
+++ b/frontend/src/app/product-review-edit/product-review-edit.component.ts
@@ -3,25 +3,24 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, Inject, OnInit } from '@angular/core'
+import { Component, Inject, type OnInit } from '@angular/core'
 import { MAT_DIALOG_DATA, MatDialogRef } from '@angular/material/dialog'
 import { UntypedFormControl, Validators } from '@angular/forms'
 import { ProductReviewService } from '../Services/product-review.service'
 import { MatSnackBar } from '@angular/material/snack-bar'
 
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faArrowCircleLeft, faPaperPlane } from '@fortawesome/free-solid-svg-icons'
-import { Review } from '../Models/review.model'
+import { type Review } from '../Models/review.model'
 import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
 
 library.add(faPaperPlane, faArrowCircleLeft)
-dom.watch()
 
 @Component({
   selector: 'app-product-review-edit',
   templateUrl: './product-review-edit.component.html',
   styleUrls: ['./product-review-edit.component.scss']
-  })
+})
 export class ProductReviewEditComponent implements OnInit {
   public editReviewControl: UntypedFormControl = new UntypedFormControl('', [Validators.required, Validators.minLength(1), Validators.maxLength(160)])
   public error: string | null = null
diff --git a/frontend/src/app/purchase-basket/purchase-basket.component.spec.ts b/frontend/src/app/purchase-basket/purchase-basket.component.spec.ts
index f42a6ea2399..f47c87848ed 100644
--- a/frontend/src/app/purchase-basket/purchase-basket.component.spec.ts
+++ b/frontend/src/app/purchase-basket/purchase-basket.component.spec.ts
@@ -6,7 +6,7 @@
 import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { MatInputModule } from '@angular/material/input'
 import { BasketService } from '../Services/basket.service'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { MatCardModule } from '@angular/material/card'
 import { MatTableModule } from '@angular/material/table'
 import { MatButtonModule } from '@angular/material/button'
diff --git a/frontend/src/app/purchase-basket/purchase-basket.component.ts b/frontend/src/app/purchase-basket/purchase-basket.component.ts
index 14f63e6a6af..dc099a3c727 100644
--- a/frontend/src/app/purchase-basket/purchase-basket.component.ts
+++ b/frontend/src/app/purchase-basket/purchase-basket.component.ts
@@ -3,23 +3,22 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, EventEmitter, Input, OnInit, Output } from '@angular/core'
+import { Component, EventEmitter, Input, type OnInit, Output } from '@angular/core'
 import { BasketService } from '../Services/basket.service'
 import { UserService } from '../Services/user.service'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faTrashAlt } from '@fortawesome/free-regular-svg-icons/'
 import { faMinusSquare, faPlusSquare } from '@fortawesome/free-solid-svg-icons'
 import { DeluxeGuard } from '../app.guard'
 import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
 
 library.add(faTrashAlt, faMinusSquare, faPlusSquare)
-dom.watch()
 
 @Component({
   selector: 'app-purchase-basket',
   templateUrl: './purchase-basket.component.html',
   styleUrls: ['./purchase-basket.component.scss']
-  })
+})
 export class PurchaseBasketComponent implements OnInit {
   @Input('allowEdit') public allowEdit: boolean = false
   @Input('displayTotal') public displayTotal: boolean = false
@@ -42,7 +41,7 @@ export class PurchaseBasketComponent implements OnInit {
     this.userService.whoAmI().subscribe((data) => {
       this.userEmail = data.email || 'anonymous'
       this.userEmail = '(' + this.userEmail + ')'
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   load () {
@@ -58,14 +57,14 @@ export class PurchaseBasketComponent implements OnInit {
       // eslint-disable-next-line @typescript-eslint/restrict-plus-operands
       this.bonus = basket.Products.reduce((bonusPoints, product) => bonusPoints + Math.round(product.price / 10) * product.BasketItem.quantity, 0)
       this.sendToParent(this.dataSource.length)
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   delete (id) {
     this.basketService.del(id).subscribe(() => {
       this.load()
       this.basketService.updateNumberOfCartItems()
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   inc (id) {
@@ -87,7 +86,7 @@ export class PurchaseBasketComponent implements OnInit {
         this.snackBarHelperService.open(err.error?.error, 'errorBar')
         console.log(err)
       })
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   sendToParent (count) {
diff --git a/frontend/src/app/qr-code/qr-code.component.spec.ts b/frontend/src/app/qr-code/qr-code.component.spec.ts
index 33c6b6d5a20..43860ce568d 100644
--- a/frontend/src/app/qr-code/qr-code.component.spec.ts
+++ b/frontend/src/app/qr-code/qr-code.component.spec.ts
@@ -5,7 +5,7 @@
 
 import { MAT_DIALOG_DATA, MatDialogModule } from '@angular/material/dialog'
 import { MatDividerModule } from '@angular/material/divider'
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 import { QRCodeModule } from 'anuglar2-qrcode'
 import { TranslateModule } from '@ngx-translate/core'
 import { QrCodeComponent } from './qr-code.component'
diff --git a/frontend/src/app/qr-code/qr-code.component.ts b/frontend/src/app/qr-code/qr-code.component.ts
index e3302813867..e4b8b6b258f 100644
--- a/frontend/src/app/qr-code/qr-code.component.ts
+++ b/frontend/src/app/qr-code/qr-code.component.ts
@@ -4,18 +4,17 @@
  */
 
 import { MAT_DIALOG_DATA } from '@angular/material/dialog'
-import { Component, Inject, OnInit } from '@angular/core'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { Component, Inject, type OnInit } from '@angular/core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faArrowCircleLeft } from '@fortawesome/free-solid-svg-icons'
 
 library.add(faArrowCircleLeft)
-dom.watch()
 
 @Component({
   selector: 'app-qr-code',
   templateUrl: './qr-code.component.html',
   styleUrls: ['./qr-code.component.scss']
-  })
+})
 export class QrCodeComponent implements OnInit {
   public title!: string
   public url!: string
diff --git a/frontend/src/app/recycle/recycle.component.spec.ts b/frontend/src/app/recycle/recycle.component.spec.ts
index 25502fd5c78..4e54c5838bc 100644
--- a/frontend/src/app/recycle/recycle.component.spec.ts
+++ b/frontend/src/app/recycle/recycle.component.spec.ts
@@ -13,7 +13,7 @@ import { MatCardModule } from '@angular/material/card'
 import { BrowserAnimationsModule } from '@angular/platform-browser/animations'
 import { MatButtonModule } from '@angular/material/button'
 import { MatInputModule } from '@angular/material/input'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 
 import { RecycleComponent } from './recycle.component'
 import { MatFormFieldModule } from '@angular/material/form-field'
diff --git a/frontend/src/app/recycle/recycle.component.ts b/frontend/src/app/recycle/recycle.component.ts
index 05c70de0ee1..97058a6b48f 100644
--- a/frontend/src/app/recycle/recycle.component.ts
+++ b/frontend/src/app/recycle/recycle.component.ts
@@ -6,9 +6,9 @@
 import { ConfigurationService } from '../Services/configuration.service'
 import { UserService } from '../Services/user.service'
 import { RecycleService } from '../Services/recycle.service'
-import { Component, OnInit, ViewChild } from '@angular/core'
+import { Component, type OnInit, ViewChild } from '@angular/core'
 import { UntypedFormControl, Validators } from '@angular/forms'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faPaperPlane } from '@fortawesome/free-solid-svg-icons'
 import { FormSubmitService } from '../Services/form-submit.service'
 import { AddressComponent } from '../address/address.component'
@@ -16,13 +16,12 @@ import { TranslateService } from '@ngx-translate/core'
 import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
 
 library.add(faPaperPlane)
-dom.watch()
 
 @Component({
   selector: 'app-recycle',
   templateUrl: './recycle.component.html',
   styleUrls: ['./recycle.component.scss']
-  })
+})
 export class RecycleComponent implements OnInit {
   @ViewChild('addressComp', { static: true }) public addressComponent: AddressComponent
   public requestorControl: UntypedFormControl = new UntypedFormControl({ value: '', disabled: true }, [])
@@ -48,12 +47,12 @@ export class RecycleComponent implements OnInit {
         // eslint-disable-next-line @typescript-eslint/restrict-template-expressions
         this.bottomImage = `assets/public/images/products/${config.application.recyclePage.bottomProductImage}`
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
 
     this.initRecycle()
     this.findAll()
 
-    this.formSubmitService.attachEnterKeyHandler('recycle-form', 'recycleButton', () => this.save())
+    this.formSubmitService.attachEnterKeyHandler('recycle-form', 'recycleButton', () => { this.save() })
   }
 
   initRecycle () {
@@ -62,7 +61,7 @@ export class RecycleComponent implements OnInit {
       this.recycle.UserId = data.id
       this.userEmail = data.email
       this.requestorControl.setValue(this.userEmail)
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   save () {
diff --git a/frontend/src/app/register/register.component.spec.ts b/frontend/src/app/register/register.component.spec.ts
index 572399e84ee..eb17e6552b3 100644
--- a/frontend/src/app/register/register.component.spec.ts
+++ b/frontend/src/app/register/register.component.spec.ts
@@ -8,7 +8,7 @@ import { SecurityAnswerService } from '../Services/security-answer.service'
 import { UserService } from '../Services/user.service'
 import { SecurityQuestionService } from '../Services/security-question.service'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
-import { ComponentFixture, fakeAsync, flush, TestBed, tick, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, flush, TestBed, tick, waitForAsync } from '@angular/core/testing'
 import { RegisterComponent } from './register.component'
 import { ReactiveFormsModule } from '@angular/forms'
 import { RouterTestingModule } from '@angular/router/testing'
diff --git a/frontend/src/app/register/register.component.ts b/frontend/src/app/register/register.component.ts
index 041f29caadd..70c19b1b55e 100644
--- a/frontend/src/app/register/register.component.ts
+++ b/frontend/src/app/register/register.component.ts
@@ -5,27 +5,26 @@
 
 import { SecurityAnswerService } from '../Services/security-answer.service'
 import { UserService } from '../Services/user.service'
-import { AbstractControl, UntypedFormControl, Validators } from '@angular/forms'
-import { Component, NgZone, OnInit } from '@angular/core'
+import { type AbstractControl, UntypedFormControl, Validators } from '@angular/forms'
+import { Component, NgZone, type OnInit } from '@angular/core'
 import { SecurityQuestionService } from '../Services/security-question.service'
 import { Router } from '@angular/router'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { MatSnackBar } from '@angular/material/snack-bar'
 
 import { faExclamationCircle, faUserPlus } from '@fortawesome/free-solid-svg-icons'
 import { FormSubmitService } from '../Services/form-submit.service'
 import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
 import { TranslateService } from '@ngx-translate/core'
-import { SecurityQuestion } from '../Models/securityQuestion.model'
+import { type SecurityQuestion } from '../Models/securityQuestion.model'
 
 library.add(faUserPlus, faExclamationCircle)
-dom.watch()
 
 @Component({
   selector: 'app-register',
   templateUrl: './register.component.html',
   styleUrls: ['./register.component.scss']
-  })
+})
 export class RegisterComponent implements OnInit {
   public emailControl: UntypedFormControl = new UntypedFormControl('', [Validators.required, Validators.email])
   public passwordControl: UntypedFormControl = new UntypedFormControl('', [Validators.required, Validators.minLength(5), Validators.maxLength(40)])
@@ -49,9 +48,9 @@ export class RegisterComponent implements OnInit {
   ngOnInit () {
     this.securityQuestionService.find(null).subscribe((securityQuestions: any) => {
       this.securityQuestions = securityQuestions
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
 
-    this.formSubmitService.attachEnterKeyHandler('registration-form', 'registerButton', () => this.save())
+    this.formSubmitService.attachEnterKeyHandler('registration-form', 'registerButton', () => { this.save() })
   }
 
   save () {
diff --git a/frontend/src/app/saved-address/saved-address.component.spec.ts b/frontend/src/app/saved-address/saved-address.component.spec.ts
index 03778eebdf2..0cb2b545f91 100644
--- a/frontend/src/app/saved-address/saved-address.component.spec.ts
+++ b/frontend/src/app/saved-address/saved-address.component.spec.ts
@@ -7,7 +7,7 @@ import { TranslateModule } from '@ngx-translate/core'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { MatCardModule } from '@angular/material/card'
 import { MatFormFieldModule } from '@angular/material/form-field'
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 import { MatInputModule } from '@angular/material/input'
 import { ReactiveFormsModule } from '@angular/forms'
 import { BrowserAnimationsModule } from '@angular/platform-browser/animations'
diff --git a/frontend/src/app/saved-address/saved-address.component.ts b/frontend/src/app/saved-address/saved-address.component.ts
index 7abb721a4c1..44e61fea2a9 100644
--- a/frontend/src/app/saved-address/saved-address.component.ts
+++ b/frontend/src/app/saved-address/saved-address.component.ts
@@ -9,7 +9,7 @@ import { Component } from '@angular/core'
   selector: 'app-saved-address',
   templateUrl: './saved-address.component.html',
   styleUrls: ['./saved-address.component.scss']
-  })
+})
 
 export class SavedAddressComponent {
 }
diff --git a/frontend/src/app/saved-payment-methods/saved-payment-methods.component.spec.ts b/frontend/src/app/saved-payment-methods/saved-payment-methods.component.spec.ts
index 99a5e33326d..164fc1dcdaf 100644
--- a/frontend/src/app/saved-payment-methods/saved-payment-methods.component.spec.ts
+++ b/frontend/src/app/saved-payment-methods/saved-payment-methods.component.spec.ts
@@ -7,7 +7,7 @@ import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { MatCardModule } from '@angular/material/card'
 import { MatFormFieldModule } from '@angular/material/form-field'
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 import { MatInputModule } from '@angular/material/input'
 import { ReactiveFormsModule } from '@angular/forms'
 import { BrowserAnimationsModule } from '@angular/platform-browser/animations'
diff --git a/frontend/src/app/saved-payment-methods/saved-payment-methods.component.ts b/frontend/src/app/saved-payment-methods/saved-payment-methods.component.ts
index cdf47366c69..4d2cf207d67 100644
--- a/frontend/src/app/saved-payment-methods/saved-payment-methods.component.ts
+++ b/frontend/src/app/saved-payment-methods/saved-payment-methods.component.ts
@@ -9,7 +9,7 @@ import { Component } from '@angular/core'
   selector: 'app-saved-payment-methods',
   templateUrl: './saved-payment-methods.component.html',
   styleUrls: ['./saved-payment-methods.component.scss']
-  })
+})
 
 export class SavedPaymentMethodsComponent {
 }
diff --git a/frontend/src/app/score-board-preview/components/challenge-card/challenge-card.component.html b/frontend/src/app/score-board-preview/components/challenge-card/challenge-card.component.html
new file mode 100644
index 00000000000..fff0d351470
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/challenge-card/challenge-card.component.html
@@ -0,0 +1,96 @@
+<span class="category-row">{{ challenge.category }}</span>
+
+<div class="name-row">
+  <div class="dot"></div>
+  <span class="name">{{ challenge.name }}</span>
+  <difficulty-stars
+    [difficulty]="challenge.difficulty"
+  ></difficulty-stars>
+</div>
+<div class="description-row" [innerHtml]="challenge.description"></div>
+<div class="bottom-row">
+  <div class="tags">
+    <span *ngFor="let tag of challenge.tagList" class="tag" [matTooltip]="('TAG_' + tag?.toUpperCase().split(' ').join('_') + '_DESCRIPTION' | translate)">{{ tag }}</span>
+  </div>
+  <div class="badge-group">
+    <!-- info text if the challenge is unavailable -->
+    <button
+      class="badge"
+      *ngIf="challenge.disabledEnv !== null"
+      [matTooltip]="'CHALLENGE_UNAVAILABLE' | translate:{ env: challenge.disabledEnv }"
+    >
+      <mat-icon [style.color]="'var(--theme-warn)'">info_outline</mat-icon>
+    </button>
+    <!-- coding challenge badge -->
+    <button
+      class="badge"
+      *ngIf="challenge.hasCodingChallenge"
+      (click)="openCodingChallengeDialog(challenge.key)"
+      [disabled]="challenge.solved === false"
+      [ngClass]="{
+        'partially-completed': challenge.codingChallengeStatus === 1,
+        'completed': challenge.codingChallengeStatus === 2
+      }"
+      [matTooltip]="(challenge.solved ? 'LAUNCH_CODING_CHALLENGE' : 'SOLVE_HACKING_CHALLENGE') | translate"
+    >
+      <span class="badge-status" *ngIf="challenge.codingChallengeStatus !== 0">{{ challenge.codingChallengeStatus }}/2</span>
+      <mat-icon>code</mat-icon>
+    </button>
+    <!-- cheat cheat link-->
+    <a
+      class="badge not-completable"
+      *ngIf="challenge.mitigationUrl && challenge.solved"
+      [href]="challenge.mitigationUrl"
+      target="_blank"
+      rel="noopener noreferrer"
+      [matTooltip]="'INFO_VULNERABILITY_MITIGATION_LINK' | translate"
+      aria-label="Vulnerability mitigation link"
+    >
+      <mat-icon>policy_outline</mat-icon>
+    </a>
+    <!-- ctf mode flag repeat-->
+    <button
+      class="badge"
+      [ngClass]="{ 'completed': challenge.solved }"
+      *ngIf="challenge.solved && applicationConfiguration.ctf.showFlagsInNotifications"
+      (click)="repeatChallengeNotification(challenge.key)"
+      [matTooltip]="'NOTIFICATION_RESEND_INSTRUCTIONS' | translate"
+    >
+      <mat-icon>flag_outline</mat-icon>
+    </button>
+    <!-- hacking instructor-->
+    <button
+      class="badge not-completable"
+      *ngIf="hasInstructions(challenge.name)"
+      [matTooltip]="'INFO_HACKING_INSTRUCTOR' | translate"
+      (click)="startHackingInstructorFor(challenge.name)"
+    >
+      <mat-icon>school_outline</mat-icon>
+    </button>
+    <!-- challenge hint -->
+    <!-- with hintUrl -->
+    <a
+      *ngIf="challenge.hint && challenge.hintUrl"
+      class="badge not-completable"
+      [style.padding]="'0 6px 0 4px'"
+      target="_blank"
+      rel="noopener noreferrer"
+      [href]="challenge.hintUrl"
+      [matTooltip]="challenge.hint | challengeHint:{hintUrl: challenge.hintUrl} | async"
+    >
+      <mat-icon>lightbulb</mat-icon>
+      Hint
+    </a>
+    <!-- challenge hint -->
+    <!-- without hintUrl -->
+    <span
+      *ngIf="challenge.hint && !challenge.hintUrl"
+      class="badge not-completable"
+      [style.padding]="'0 6px 0 4px'"
+      [matTooltip]="challenge.hint"
+    >
+      <mat-icon>lightbulb</mat-icon>
+      Hint
+    </span>
+  </div>
+</div>
diff --git a/frontend/src/app/score-board-preview/components/challenge-card/challenge-card.component.scss b/frontend/src/app/score-board-preview/components/challenge-card/challenge-card.component.scss
new file mode 100644
index 00000000000..2d70bcfe118
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/challenge-card/challenge-card.component.scss
@@ -0,0 +1,178 @@
+:host {
+  background-color: var(--theme-background-darker);
+  border-radius: 2px;
+  box-shadow: 0 0 0 2px rgba(80, 80, 80, 0.25);
+  display: grid;
+  grid-template-rows: min-content min-content auto min-content;
+
+  max-height: 144px;
+  overflow: hidden;
+  padding: 12px 16px;
+
+  &.solved {
+    border-top: 4px solid var(--theme-accent);
+  }
+
+  &.solved .dot {
+    background-color: var(--theme-accent);
+  }
+
+  &.unsolved {
+    border-top: 4px solid rgba(80, 80, 80, 0.25);
+  }
+
+  &.unsolved .dot {
+    background-color: #5c5c5c;
+  }
+
+  &.disabled {
+    filter: opacity(0.4);
+  }
+
+  &.disabled .dot {
+    background-color: var(--theme-warn-fade-40);
+  }
+}
+
+.category-row {
+  color: var(--theme-text-fade-50);
+  font-size: 12px;
+  font-weight: 600;
+  line-height: 14px;
+}
+
+.name-row {
+  align-items: center;
+  column-gap: 6px;
+  display: grid;
+  grid-template-columns: 12px auto min-content;
+  margin-top: 8px;
+
+  .dot {
+    border-radius: 50%;
+    height: 14px;
+    width: 14px;
+  }
+
+  .name {
+    font-size: 16px;
+    font-weight: 600;
+    line-height: 18px;
+  }
+}
+
+.difficulty {
+  display: flex;
+}
+
+.description-row {
+  color: var(--theme-text-fade-50);
+  font-size: 12px;
+  font-weight: 400;
+  line-height: 14px;
+  margin-top: 12px;
+
+  overflow-y: auto;
+}
+
+.bottom-row {
+  align-items: end;
+  column-gap: 4px;
+  display: grid;
+  grid-template-columns: auto min-content;
+  margin-top: 16px;
+
+  .tags {
+    display: flex;
+    flex-wrap: wrap;
+    gap: 4px;
+  }
+
+  .tag {
+    background: #3d3d3d;
+    border-radius: 1.82849px;
+    color: #5fc091;
+    font-size: 10px;
+    font-style: normal;
+    font-weight: 400;
+    line-height: 14px;
+    padding: 6px;
+  }
+}
+
+.badge-group {
+  column-gap: 4px;
+  display: flex;
+}
+
+
+$badge-size: 24px;
+
+.badge {
+  align-items: center;
+  background-color: var(--theme-background-lighter);
+  border: 0;
+
+  border-radius: calc($badge-size / 2);
+  color: var(--theme-text) !important;
+  color: var(--theme-text);
+  cursor: pointer;
+
+  display: flex;
+
+  height: $badge-size;
+  justify-content: center;
+  min-width: $badge-size;
+  padding: 0;
+
+  position: relative;
+  
+  mat-icon {
+    font-size: 16px;
+    height: 16px;
+    width: 16px;
+  }
+
+  .badge-status {
+    background-color: var(--theme-background-darker);
+    border: 1px solid var(--theme-background-light);
+    border-radius: 4px;
+    font-size: 10px;
+    padding: 0 5px;
+    position: absolute;
+    top: -35%;
+  }
+}
+
+.badge.completed {
+  background-color: var(--theme-accent);
+
+  .badge-status {
+    color: var(--theme-accent);
+  }
+}
+
+.badge.partially-completed {
+  background-color: var(--theme-accent-dark);
+
+  .badge-status {
+    color: var(--theme-accent-dark);
+  }
+}
+
+.badge.not-completable {
+  background-color: var(--theme-accent);
+
+  .badge-status {
+    color: var(--theme-accent);
+  }
+}
+
+.badge:disabled {
+  background-color: var(--theme-background-light);
+  cursor: not-allowed;
+
+  .badge-status {
+    color: var(--theme-accent);
+  }
+}
diff --git a/frontend/src/app/score-board-preview/components/challenge-card/challenge-card.component.spec.ts b/frontend/src/app/score-board-preview/components/challenge-card/challenge-card.component.spec.ts
new file mode 100644
index 00000000000..5f95de8efe8
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/challenge-card/challenge-card.component.spec.ts
@@ -0,0 +1,60 @@
+import { type ComponentFixture, TestBed } from '@angular/core/testing'
+
+import { ChallengeCardComponent } from './challenge-card.component'
+import { type Config } from 'src/app/Services/configuration.service'
+import { TranslateModule } from '@ngx-translate/core'
+import { MatIconModule } from '@angular/material/icon'
+import { MatTooltipModule } from '@angular/material/tooltip'
+
+describe('ChallengeCard', () => {
+  let component: ChallengeCardComponent
+  let fixture: ComponentFixture<ChallengeCardComponent>
+
+  beforeEach(async () => {
+    await TestBed.configureTestingModule({
+      imports: [TranslateModule.forRoot(), MatIconModule, MatTooltipModule],
+      declarations: [ChallengeCardComponent]
+    })
+      .compileComponents()
+
+    fixture = TestBed.createComponent(ChallengeCardComponent)
+    component = fixture.componentInstance
+
+    component.challenge = {
+      category: 'foobar',
+      name: 'my name',
+      mitigationUrl: 'https://owasp.example.com',
+      hasCodingChallenge: true,
+      description: 'lorem ipsum',
+      tagList: ['Easy']
+    } as any
+
+    component.applicationConfiguration = {
+      ctf: {
+        showFlagsInNotifications: true
+      }
+    } as Config
+
+    fixture.detectChanges()
+  })
+
+  it('should create', () => {
+    expect(component).toBeTruthy()
+  })
+
+  it('should not show a mitigation link when challenge has it but isnt solved', () => {
+    component.challenge.solved = false
+    component.challenge.mitigationUrl = 'https://owasp.example.com'
+    fixture.detectChanges()
+    expect(fixture.nativeElement.querySelector('[aria-label="Vulnerability mitigation link"]'))
+      .toBeFalsy()
+  })
+
+  it('should show a mitigation link when challenge has it but isnt solved', () => {
+    component.challenge.solved = true
+    component.challenge.mitigationUrl = 'https://owasp.example.com'
+    fixture.detectChanges()
+    expect(fixture.nativeElement.querySelector('[aria-label="Vulnerability mitigation link"]'))
+      .toBeTruthy()
+  })
+})
diff --git a/frontend/src/app/score-board-preview/components/challenge-card/challenge-card.component.ts b/frontend/src/app/score-board-preview/components/challenge-card/challenge-card.component.ts
new file mode 100644
index 00000000000..048456bae20
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/challenge-card/challenge-card.component.ts
@@ -0,0 +1,28 @@
+import { Component, Input } from '@angular/core'
+
+import { EnrichedChallenge } from '../../types/EnrichedChallenge'
+
+import { hasInstructions, startHackingInstructorFor } from '../../../../hacking-instructor'
+import { Config } from 'src/app/Services/configuration.service'
+
+@Component({
+  selector: 'challenge-card',
+  templateUrl: './challenge-card.component.html',
+  styleUrls: ['./challenge-card.component.scss']
+})
+export class ChallengeCardComponent {
+  @Input()
+  public challenge: EnrichedChallenge
+
+  @Input()
+  public openCodingChallengeDialog: (challengeKey: string) => void
+
+  @Input()
+  public repeatChallengeNotification: (challengeKey: string) => void
+
+  @Input()
+  public applicationConfiguration: Config
+
+  public hasInstructions = hasInstructions
+  public startHackingInstructorFor = startHackingInstructorFor
+}
diff --git a/frontend/src/app/score-board-preview/components/challenges-unavailable-warning/challenges-unavailable-warning.component.html b/frontend/src/app/score-board-preview/components/challenges-unavailable-warning/challenges-unavailable-warning.component.html
new file mode 100644
index 00000000000..443469ee93c
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/challenges-unavailable-warning/challenges-unavailable-warning.component.html
@@ -0,0 +1,16 @@
+<warning-card *ngIf="numberOfDisabledChallenges > 0">
+  <ng-container warning-icon>
+    <i class="env-icon" *ngIf="disabledBecauseOfEnv !== 'Windows'" [ngClass]="'icon-' + disabledBecauseOfEnv.toString().toLowerCase()"></i>
+    <i class="env-icon" *ngIf="disabledBecauseOfEnv === 'Windows'" [ngClass]="'fab fa-' + disabledBecauseOfEnv.toString().toLowerCase()"></i>
+  </ng-container>
+  <span warning-text [innerHTML]="'INFO_DISABLED_CHALLENGES' | translate: {num: numberOfDisabledChallenges, env: disabledBecauseOfEnv}">
+  </span>
+  <button warning-action mat-button color="accent" (click)="toggleShowDisabledChallenges()">
+    <ng-container *ngIf="filterSetting.showDisabledChallenges == false">
+      {{ 'SHOW_DISABLED_CHALLENGES' | translate }}
+    </ng-container>
+    <ng-container *ngIf="filterSetting.showDisabledChallenges == true">
+      {{ 'HIDE_DISABLED_CHALLENGES' | translate }}
+    </ng-container>
+  </button>
+</warning-card>
diff --git a/frontend/src/app/score-board-preview/components/challenges-unavailable-warning/challenges-unavailable-warning.component.scss b/frontend/src/app/score-board-preview/components/challenges-unavailable-warning/challenges-unavailable-warning.component.scss
new file mode 100644
index 00000000000..181283f352d
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/challenges-unavailable-warning/challenges-unavailable-warning.component.scss
@@ -0,0 +1,4 @@
+.env-icon {
+  font-size: 18px;
+  padding: 2px;
+}
diff --git a/frontend/src/app/score-board-preview/components/challenges-unavailable-warning/challenges-unavailable-warning.component.spec.ts b/frontend/src/app/score-board-preview/components/challenges-unavailable-warning/challenges-unavailable-warning.component.spec.ts
new file mode 100644
index 00000000000..bcca1a39bb3
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/challenges-unavailable-warning/challenges-unavailable-warning.component.spec.ts
@@ -0,0 +1,53 @@
+import { type ComponentFixture, TestBed } from '@angular/core/testing'
+
+import { ChallengesUnavailableWarningComponent } from './challenges-unavailable-warning.component'
+import { TranslateModule } from '@ngx-translate/core'
+import { DEFAULT_FILTER_SETTING } from '../../filter-settings/FilterSetting'
+
+describe('ChallengesUnavailableWarningComponent', () => {
+  let component: ChallengesUnavailableWarningComponent
+  let fixture: ComponentFixture<ChallengesUnavailableWarningComponent>
+
+  beforeEach(async () => {
+    await TestBed.configureTestingModule({
+      imports: [TranslateModule.forRoot()],
+      declarations: [ChallengesUnavailableWarningComponent]
+    })
+      .compileComponents()
+
+    fixture = TestBed.createComponent(ChallengesUnavailableWarningComponent)
+    component = fixture.componentInstance
+
+    component.challenges = [
+      {
+        category: 'foobar',
+        name: 'my name',
+        mitigationUrl: 'https://owasp.example.com',
+        hasCodingChallenge: true,
+        description: 'lorem ipsum',
+        tagList: ['Easy'],
+        disabledEnv: 'Docker'
+      },
+      {
+        category: 'foobar',
+        name: 'my name two',
+        mitigationUrl: 'https://owasp.example.com',
+        hasCodingChallenge: true,
+        description: 'lorem ipsum',
+        tagList: ['Easy'],
+        disabledEnv: null
+      }
+    ] as any
+
+    component.filterSetting = structuredClone(DEFAULT_FILTER_SETTING)
+
+    fixture.detectChanges()
+  })
+
+  it('should properly calculate number of disabled challenges', () => {
+    component.ngOnChanges()
+
+    expect(component.numberOfDisabledChallenges).toBe(1)
+    expect(component.disabledBecauseOfEnv).toBe('Docker')
+  })
+})
diff --git a/frontend/src/app/score-board-preview/components/challenges-unavailable-warning/challenges-unavailable-warning.component.ts b/frontend/src/app/score-board-preview/components/challenges-unavailable-warning/challenges-unavailable-warning.component.ts
new file mode 100644
index 00000000000..b2365c1d8c9
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/challenges-unavailable-warning/challenges-unavailable-warning.component.ts
@@ -0,0 +1,40 @@
+import { Component, EventEmitter, Input, type OnChanges, Output } from '@angular/core'
+
+import { FilterSetting } from '../../filter-settings/FilterSetting'
+import { type EnrichedChallenge } from '../../types/EnrichedChallenge'
+
+@Component({
+  selector: 'challenges-unavailable-warning',
+  templateUrl: './challenges-unavailable-warning.component.html',
+  styleUrls: ['./challenges-unavailable-warning.component.scss']
+})
+export class ChallengesUnavailableWarningComponent implements OnChanges {
+  @Input()
+  public challenges: EnrichedChallenge[]
+
+  @Input()
+  public filterSetting: FilterSetting
+
+  @Output()
+  public filterSettingChange = new EventEmitter<FilterSetting>()
+
+  public numberOfDisabledChallenges = 0
+  public disabledBecauseOfEnv: string | null = null
+
+  public ngOnChanges () {
+    const disabledChallenges = this.challenges.filter(challenge => challenge.disabledEnv !== null)
+    this.numberOfDisabledChallenges = disabledChallenges.length
+    if (this.numberOfDisabledChallenges > 0) {
+      this.disabledBecauseOfEnv = disabledChallenges[0].disabledEnv
+    }
+  }
+
+  public toggleShowDisabledChallenges () {
+    const filterSetting = {
+      ...structuredClone(this.filterSetting),
+      showDisabledChallenges: !this.filterSetting.showDisabledChallenges
+    }
+    this.filterSetting = filterSetting
+    this.filterSettingChange.emit(filterSetting)
+  }
+}
diff --git a/frontend/src/app/score-board-preview/components/coding-challenge-progress-score-card/coding-challenge-progress-score-card.component.html b/frontend/src/app/score-board-preview/components/coding-challenge-progress-score-card/coding-challenge-progress-score-card.component.html
new file mode 100644
index 00000000000..f33f88e8588
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/coding-challenge-progress-score-card/coding-challenge-progress-score-card.component.html
@@ -0,0 +1,36 @@
+<score-card
+  [description]="'TITLE_CODING_CHALLENGES' | translate"
+  [total]="availableCodingChallenges"
+  [score]="solvedCodingChallenges"
+  [showAsPercentage]="true"
+>
+  <div right-side class="icon-group">
+    <svg
+      width="74"
+      height="85"
+      viewBox="0 0 74 85"
+      fill="none"
+      xmlns="http://www.w3.org/2000/svg"
+    >
+      <g clip-path="url(#clip0_2_635)">
+        <path
+          d="M69.2371 41.1778C68.9506 40.8702 68.6049 40.6235 68.2209 40.4524C67.8369 40.2813 67.4224 40.1893 67.0021 40.1819C66.5817 40.1745 66.1642 40.2518 65.7744 40.4092C65.3846 40.5667 65.0305 40.801 64.7332 41.0983C64.436 41.3956 64.2016 41.7497 64.0442 42.1395C63.8867 42.5293 63.8094 42.9468 63.8168 43.3671C63.8242 43.7875 63.9162 44.202 64.0873 44.586C64.2584 44.97 64.5051 45.3156 64.8127 45.6022L65.5265 46.3201C68.3731 49.1668 70.2806 51.0785 71.512 52.698C72.6932 54.2424 72.9603 55.1439 72.9603 55.912C72.9603 56.68 72.6932 57.5816 71.512 59.1259C70.2806 60.7413 68.3731 62.6571 65.5265 65.5038L64.8127 66.2217C64.5051 66.5083 64.2584 66.8539 64.0873 67.2379C63.9162 67.6219 63.8242 68.0365 63.8168 68.4568C63.8094 68.8771 63.8867 69.2947 64.0442 69.6845C64.2016 70.0743 64.436 70.4284 64.7332 70.7256C65.0305 71.0229 65.3846 71.2572 65.7744 71.4147C66.1642 71.5721 66.5817 71.6495 67.0021 71.642C67.4224 71.6346 67.8369 71.5426 68.2209 71.3715C68.6049 71.2004 68.9506 70.9537 69.2371 70.6462L70.1095 69.778C72.76 67.1275 74.9722 64.9153 76.4915 62.9243C78.0944 60.8206 79.2213 58.6 79.2213 55.912C79.2213 53.2239 78.0944 51.0033 76.4915 48.8997C74.9722 46.9087 72.76 44.6964 70.1053 42.046L69.2371 41.1778ZM58.6269 32.7296C59.428 32.9448 60.1111 33.4692 60.5259 34.1877C60.9406 34.9062 61.0533 35.7599 60.8391 36.5613L50.0368 76.8821C49.9302 77.2792 49.7464 77.6515 49.4959 77.9776C49.2454 78.3037 48.9332 78.5772 48.577 78.7827C47.8576 79.1975 47.0029 79.3096 46.2009 79.0943C45.3988 78.879 44.7152 78.3539 44.3003 77.6345C43.8855 76.9152 43.7733 76.0605 43.9887 75.2584L54.791 34.9418C54.8975 34.5442 55.0814 34.1715 55.3321 33.845C55.5828 33.5186 55.8955 33.2447 56.2522 33.0393C56.6089 32.8338 57.0026 32.7007 57.4108 32.6475C57.819 32.5944 58.2336 32.6223 58.631 32.7296H58.6269ZM40.0192 41.1778C39.4322 40.5915 38.6366 40.2622 37.807 40.2622C36.9774 40.2622 36.1817 40.5915 35.5948 41.1778L34.7266 42.046C32.0719 44.6964 29.8597 46.9087 28.3404 48.8997C26.7375 51.0033 25.6147 53.2239 25.6147 55.912C25.6147 58.6 26.7417 60.8206 28.3404 62.9243C29.8597 64.9153 32.0719 67.1275 34.7266 69.778L35.5948 70.6462C36.1882 71.1991 36.9731 71.5002 37.7841 71.4859C38.5951 71.4716 39.3689 71.143 39.9425 70.5694C40.516 69.9959 40.8446 69.2221 40.8589 68.4111C40.8732 67.6001 40.5722 66.8152 40.0192 66.2217L39.3054 65.5038C36.4588 62.6571 34.5554 60.7454 33.3199 59.1259C32.1387 57.5816 31.8757 56.68 31.8757 55.912C31.8757 55.1439 32.1387 54.2424 33.3199 52.698C34.5554 51.0827 36.4588 49.1668 39.3054 46.3201L40.0234 45.6022C40.6096 45.0152 40.9389 44.2196 40.9389 43.39C40.9389 42.5604 40.6096 41.7647 40.0234 41.1778H40.0192Z"
+          fill="var(--theme-text)"
+          fill-opacity="0.12"
+        />
+        <path
+          fill-rule="evenodd"
+          clip-rule="evenodd"
+          d="M52.4188 11.0416C27.6378 11.0416 7.54834 31.1311 7.54834 55.912C7.54834 80.693 27.6378 100.782 52.4188 100.782C77.1998 100.782 97.2892 80.693 97.2892 55.912C97.2892 31.1311 77.1998 11.0416 52.4188 11.0416ZM13.8093 55.912C13.8093 45.6722 17.8771 35.8517 25.1178 28.6111C32.3584 21.3704 42.1789 17.3026 52.4188 17.3026C62.6586 17.3026 72.4791 21.3704 79.7197 28.6111C86.9604 35.8517 91.0282 45.6722 91.0282 55.912C91.0282 66.1519 86.9604 75.9724 79.7197 83.213C72.4791 90.4537 62.6586 94.5215 52.4188 94.5215C42.1789 94.5215 32.3584 90.4537 25.1178 83.213C17.8771 75.9724 13.8093 66.1519 13.8093 55.912Z"
+          fill="var(--theme-text)"
+          fill-opacity="0.12"
+        />
+      </g>
+      <defs>
+        <clipPath id="clip0_2_635">
+          <rect width="106" height="106" fill="var(--theme-text)" />
+        </clipPath>
+      </defs>
+    </svg>
+  </div>
+</score-card>
diff --git a/frontend/src/app/score-board-preview/components/coding-challenge-progress-score-card/coding-challenge-progress-score-card.component.scss b/frontend/src/app/score-board-preview/components/coding-challenge-progress-score-card/coding-challenge-progress-score-card.component.scss
new file mode 100644
index 00000000000..e026e88ec21
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/coding-challenge-progress-score-card/coding-challenge-progress-score-card.component.scss
@@ -0,0 +1,6 @@
+.icon-group {
+  align-items: flex-end;
+  display: flex;
+  height: 100%;
+  justify-content: flex-end;
+}
diff --git a/frontend/src/app/score-board-preview/components/coding-challenge-progress-score-card/coding-challenge-progress-score-card.component.spec.ts b/frontend/src/app/score-board-preview/components/coding-challenge-progress-score-card/coding-challenge-progress-score-card.component.spec.ts
new file mode 100644
index 00000000000..6a509ad4486
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/coding-challenge-progress-score-card/coding-challenge-progress-score-card.component.spec.ts
@@ -0,0 +1,29 @@
+import { type ComponentFixture, TestBed } from '@angular/core/testing'
+
+import { ScoreCardComponent } from '../score-card/score-card.component'
+import { CodingChallengeProgressScoreCardComponent } from './coding-challenge-progress-score-card.component'
+import { TranslateModule } from '@ngx-translate/core'
+
+describe('CodingChallengeProgressScoreCardComponent', () => {
+  let component: CodingChallengeProgressScoreCardComponent
+  let fixture: ComponentFixture<CodingChallengeProgressScoreCardComponent>
+
+  beforeEach(async () => {
+    await TestBed.configureTestingModule({
+      declarations: [
+        ScoreCardComponent,
+        CodingChallengeProgressScoreCardComponent
+      ],
+      imports: [TranslateModule.forRoot()]
+    })
+      .compileComponents()
+
+    fixture = TestBed.createComponent(CodingChallengeProgressScoreCardComponent)
+    component = fixture.componentInstance
+    fixture.detectChanges()
+  })
+
+  it('should create', () => {
+    expect(component).toBeTruthy()
+  })
+})
diff --git a/frontend/src/app/score-board-preview/components/coding-challenge-progress-score-card/coding-challenge-progress-score-card.component.ts b/frontend/src/app/score-board-preview/components/coding-challenge-progress-score-card/coding-challenge-progress-score-card.component.ts
new file mode 100644
index 00000000000..2dfe640e076
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/coding-challenge-progress-score-card/coding-challenge-progress-score-card.component.ts
@@ -0,0 +1,35 @@
+import { Component, Input, type OnChanges, type OnInit, type SimpleChanges } from '@angular/core'
+
+import { type EnrichedChallenge } from '../../types/EnrichedChallenge'
+
+@Component({
+  selector: 'coding-challenge-progress-score-card',
+  templateUrl: './coding-challenge-progress-score-card.component.html',
+  styleUrls: ['./coding-challenge-progress-score-card.component.scss']
+})
+export class CodingChallengeProgressScoreCardComponent implements OnInit, OnChanges {
+  @Input()
+  public allChallenges: EnrichedChallenge[] = []
+
+  public availableCodingChallenges: number
+  public solvedCodingChallenges: number
+
+  ngOnInit (): void {
+    this.updatedNumberOfSolvedChallenges()
+  }
+
+  ngOnChanges (changes: SimpleChanges): void {
+    this.updatedNumberOfSolvedChallenges()
+  }
+
+  private updatedNumberOfSolvedChallenges (): void {
+    const availableCodingChallenges = this.allChallenges
+      .filter((challenge) => challenge.hasCodingChallenge)
+
+    this.solvedCodingChallenges = availableCodingChallenges
+      .map((challenge) => challenge.codingChallengeStatus)
+      .reduce((a, b) => a + b, 0) // sum up the scores
+    // multiply by 2 because each coding challenge has 2 parts (find it and fix it)
+    this.availableCodingChallenges = availableCodingChallenges.length * 2
+  }
+}
diff --git a/frontend/src/app/score-board-preview/components/difficulty-overview-score-card/difficulty-overview-score-card.component.html b/frontend/src/app/score-board-preview/components/difficulty-overview-score-card/difficulty-overview-score-card.component.html
new file mode 100644
index 00000000000..474612cec6c
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/difficulty-overview-score-card/difficulty-overview-score-card.component.html
@@ -0,0 +1,43 @@
+<score-card
+  [description]="'TITLE_CHALLENGES_SOLVED' | translate"
+  [total]="totalChallenges"
+  [score]="solvedChallenges"
+  [showAsPercentage]="false"
+  [showProgressBar]="false"
+>
+  <div right-side class="difficulties-group">
+    <div class="difficulty-container" *ngFor="let difficulty of difficultySummaries">
+      <div class="star-container">
+        <svg
+          width="28"
+          height="25"
+          viewBox="0 0 28 25"
+          fill="none"
+          xmlns="http://www.w3.org/2000/svg"
+        >
+          <path
+            [attr.fill]="'url(#solved-gradient-' + difficulty.difficulty + ')'"
+            d="M12.6496 1.25874L9.57854 7.48541L2.70757 8.48713C1.4754 8.66584 0.981596 10.1849 1.87515 11.0549L6.84614 15.8989L5.67041 22.7417C5.45878 23.9786 6.76149 24.905 7.85257 24.3266L13.9993 21.0957L20.146 24.3266C21.2371 24.9003 22.5398 23.9786 22.3282 22.7417L21.1524 15.8989L26.1234 11.0549C27.017 10.1849 26.5232 8.66584 25.291 8.48713L18.42 7.48541L15.349 1.25874C14.7988 0.148847 13.2045 0.134738 12.6496 1.25874Z"
+          />
+          <defs>
+            <linearGradient
+              [attr.id]="'solved-gradient-' + difficulty.difficulty"
+              x1="0" x2="0" y1="1" y2="0"
+            >
+            <stop stop-color="var(--theme-accent)" />
+            <stop *ngIf="difficulty.availableChallenges === 0" offset="0%" stop-color="var(--theme-accent)" />
+            <stop *ngIf="difficulty.availableChallenges !== 0" [attr.offset]="difficulty.solvedChallenges / difficulty.availableChallenges * 100 + '%'" stop-color="var(--theme-accent)" />
+            <stop stop-color="var(--theme-accent)" />
+            <!-- has to be duplicated here to stop the gradient directly instead of doing a "gradual" transition -->
+            <stop stop-color="var(--theme-primary)" />
+            </linearGradient>
+          </defs>
+        </svg>
+        <span class="star-difficulty-label">{{ difficulty.difficulty }}</span>
+      </div>
+      <span>
+        {{ difficulty.solvedChallenges }}/<span class="total-challenges">{{ difficulty.availableChallenges }}</span>
+      </span>
+    </div>
+  </div>
+</score-card>
diff --git a/frontend/src/app/score-board-preview/components/difficulty-overview-score-card/difficulty-overview-score-card.component.scss b/frontend/src/app/score-board-preview/components/difficulty-overview-score-card/difficulty-overview-score-card.component.scss
new file mode 100644
index 00000000000..73583893615
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/difficulty-overview-score-card/difficulty-overview-score-card.component.scss
@@ -0,0 +1,54 @@
+$vertical-margin: 4px;
+$vertical-padding: 8px;
+
+:host {
+  // use 2 columns ipads and smaller
+  @media (max-width: 810px) {
+    grid-column: span 2;
+  }
+  @media (max-width: 600px) {
+    grid-column: span 1;
+  }
+}
+
+.difficulties-group {
+  background-color: var(--theme-background-darkest);
+  border-radius: 4px;
+
+  color: var(--theme-text);
+  column-gap: 12px;
+  display: grid;
+  grid-template-columns: 1fr 1fr 1fr;
+
+  height: calc(100% - (2 * $vertical-margin + 2 * $vertical-padding));
+
+  margin: $vertical-margin 4px;
+
+  padding: $vertical-padding 12px;
+  row-gap: 2px;
+  
+  .difficulty-container {
+    align-items: center;
+    display: flex;
+    flex-direction: column;
+    justify-content: center;
+  }
+  
+  .total-challenges {
+    color: var(--theme-text-invert-30);
+  }
+}
+
+.star-container {
+  align-items: center;
+  display: flex;
+  justify-content: center;
+
+  .star-difficulty-label {
+    font-size: 11px;
+    line-height: 11px;
+    // text looks a bit more centered in the star if it is a bit under the center
+    margin-top: 2px;
+    position: absolute;
+  }
+}
diff --git a/frontend/src/app/score-board-preview/components/difficulty-overview-score-card/difficulty-overview-score-card.component.spec.ts b/frontend/src/app/score-board-preview/components/difficulty-overview-score-card/difficulty-overview-score-card.component.spec.ts
new file mode 100644
index 00000000000..970a21ca70d
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/difficulty-overview-score-card/difficulty-overview-score-card.component.spec.ts
@@ -0,0 +1,74 @@
+import { type ComponentFixture, TestBed } from '@angular/core/testing'
+
+import { DifficultyOverviewScoreCardComponent } from './difficulty-overview-score-card.component'
+import { ScoreCardComponent } from '../score-card/score-card.component'
+import { TranslateModule } from '@ngx-translate/core'
+
+describe('DifficultyOverviewScoreCardComponent', () => {
+  let component: DifficultyOverviewScoreCardComponent
+  let fixture: ComponentFixture<DifficultyOverviewScoreCardComponent>
+
+  beforeEach(async () => {
+    await TestBed.configureTestingModule({
+      declarations: [
+        ScoreCardComponent,
+        DifficultyOverviewScoreCardComponent
+      ],
+      imports: [TranslateModule.forRoot()]
+    })
+      .compileComponents()
+
+    fixture = TestBed.createComponent(DifficultyOverviewScoreCardComponent)
+    component = fixture.componentInstance
+    component.allChallenges = []
+    fixture.detectChanges()
+  })
+
+  it('should create', () => {
+    expect(component).toBeTruthy()
+  })
+
+  describe('difficultySummaries', () => {
+    it('should calculate difficulty summaries correctly for empty list of challenges', () => {
+      expect(DifficultyOverviewScoreCardComponent.calculateDifficultySummaries([])).toEqual([
+        { difficulty: 1, availableChallenges: 0, solvedChallenges: 0 },
+        { difficulty: 2, availableChallenges: 0, solvedChallenges: 0 },
+        { difficulty: 3, availableChallenges: 0, solvedChallenges: 0 },
+        { difficulty: 4, availableChallenges: 0, solvedChallenges: 0 },
+        { difficulty: 5, availableChallenges: 0, solvedChallenges: 0 },
+        { difficulty: 6, availableChallenges: 0, solvedChallenges: 0 }
+      ])
+    })
+    it('should calculate difficulty summaries', () => {
+      expect(DifficultyOverviewScoreCardComponent.calculateDifficultySummaries([
+        { difficulty: 1, solved: true, hasCodingChallenge: false } as any,
+        { difficulty: 1, solved: true, hasCodingChallenge: true, codingChallengeStatus: 1 } as any
+      ])).toEqual([
+        { difficulty: 1, availableChallenges: 4, solvedChallenges: 3 },
+        { difficulty: 2, availableChallenges: 0, solvedChallenges: 0 },
+        { difficulty: 3, availableChallenges: 0, solvedChallenges: 0 },
+        { difficulty: 4, availableChallenges: 0, solvedChallenges: 0 },
+        { difficulty: 5, availableChallenges: 0, solvedChallenges: 0 },
+        { difficulty: 6, availableChallenges: 0, solvedChallenges: 0 }
+      ])
+    })
+    it('should calculate difficulty summaries for multiple difficulties', () => {
+      expect(DifficultyOverviewScoreCardComponent.calculateDifficultySummaries([
+        { difficulty: 1, solved: true, hasCodingChallenge: true, codingChallengeStatus: 0 } as any,
+        { difficulty: 1, solved: true, hasCodingChallenge: true, codingChallengeStatus: 0 } as any,
+        { difficulty: 1, solved: true, hasCodingChallenge: true, codingChallengeStatus: 1 } as any,
+        { difficulty: 1, solved: true, hasCodingChallenge: true, codingChallengeStatus: 2 } as any,
+        { difficulty: 1, solved: false, hasCodingChallenge: true, codingChallengeStatus: 0 } as any,
+        { difficulty: 2, solved: true, hasCodingChallenge: true, codingChallengeStatus: 0 } as any,
+        { difficulty: 3, solved: false, hasCodingChallenge: true, codingChallengeStatus: 0 } as any
+      ])).toEqual([
+        { difficulty: 1, availableChallenges: 15, solvedChallenges: 7 },
+        { difficulty: 2, availableChallenges: 3, solvedChallenges: 1 },
+        { difficulty: 3, availableChallenges: 3, solvedChallenges: 0 },
+        { difficulty: 4, availableChallenges: 0, solvedChallenges: 0 },
+        { difficulty: 5, availableChallenges: 0, solvedChallenges: 0 },
+        { difficulty: 6, availableChallenges: 0, solvedChallenges: 0 }
+      ])
+    })
+  })
+})
diff --git a/frontend/src/app/score-board-preview/components/difficulty-overview-score-card/difficulty-overview-score-card.component.ts b/frontend/src/app/score-board-preview/components/difficulty-overview-score-card/difficulty-overview-score-card.component.ts
new file mode 100644
index 00000000000..657fa77e1d5
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/difficulty-overview-score-card/difficulty-overview-score-card.component.ts
@@ -0,0 +1,82 @@
+import { Component, Input, type OnChanges, type OnInit, type SimpleChanges } from '@angular/core'
+
+import { type EnrichedChallenge } from '../../types/EnrichedChallenge'
+
+interface DifficultySummary {
+  difficulty: 0 | 1 | 2 | 3 | 4 | 5 | 6
+  availableChallenges: number
+  solvedChallenges: number
+}
+
+// interface doesn't work here
+// eslint-disable-next-line @typescript-eslint/consistent-type-definitions
+type DifficultySummaries = Record<number, DifficultySummary>
+
+const INITIAL_SUMMARIES: Readonly<DifficultySummaries> = Object.freeze({
+  1: { difficulty: 1, availableChallenges: 0, solvedChallenges: 0 },
+  2: { difficulty: 2, availableChallenges: 0, solvedChallenges: 0 },
+  3: { difficulty: 3, availableChallenges: 0, solvedChallenges: 0 },
+  4: { difficulty: 4, availableChallenges: 0, solvedChallenges: 0 },
+  5: { difficulty: 5, availableChallenges: 0, solvedChallenges: 0 },
+  6: { difficulty: 6, availableChallenges: 0, solvedChallenges: 0 }
+})
+
+@Component({
+  selector: 'difficulty-overview-score-card',
+  templateUrl: './difficulty-overview-score-card.component.html',
+  styleUrls: ['./difficulty-overview-score-card.component.scss']
+})
+export class DifficultyOverviewScoreCardComponent implements OnInit, OnChanges {
+  @Input()
+  public allChallenges: EnrichedChallenge[] = []
+
+  // includes hacking and coding challenges (both find it and fix it)
+  public totalChallenges: number
+  public solvedChallenges: number
+
+  public difficultySummaries: DifficultySummary[] = [
+    { difficulty: 1, availableChallenges: 0, solvedChallenges: 0 },
+    { difficulty: 2, availableChallenges: 0, solvedChallenges: 0 },
+    { difficulty: 3, availableChallenges: 0, solvedChallenges: 0 },
+    { difficulty: 4, availableChallenges: 0, solvedChallenges: 0 },
+    { difficulty: 5, availableChallenges: 0, solvedChallenges: 0 },
+    { difficulty: 6, availableChallenges: 0, solvedChallenges: 0 }
+  ]
+
+  ngOnInit (): void {
+    this.updatedNumberOfSolvedChallenges()
+  }
+
+  ngOnChanges (changes: SimpleChanges): void {
+    this.updatedNumberOfSolvedChallenges()
+  }
+
+  private updatedNumberOfSolvedChallenges (): void {
+    const solvedHackingChallenges = this.allChallenges
+      .filter((challenge) => challenge.solved).length
+    const availableCodingChallenges = this.allChallenges
+      .filter((challenge) => challenge.hasCodingChallenge)
+
+    const codingScore = availableCodingChallenges
+      .map((challenge) => challenge.codingChallengeStatus)
+      .reduce((a, b) => a + b, 0) // sum up the scores
+
+    this.difficultySummaries = DifficultyOverviewScoreCardComponent.calculateDifficultySummaries(this.allChallenges)
+
+    this.totalChallenges = this.allChallenges.length + availableCodingChallenges.length * 2
+    this.solvedChallenges = solvedHackingChallenges + codingScore
+  }
+
+  static calculateDifficultySummaries (challenges: EnrichedChallenge[]): DifficultySummary[] {
+    const summariesLookup: DifficultySummaries = structuredClone(INITIAL_SUMMARIES)
+    for (const challenge of challenges) {
+      summariesLookup[challenge.difficulty].availableChallenges += challenge.hasCodingChallenge ? 3 : 1
+      if (challenge.solved) {
+        summariesLookup[challenge.difficulty].solvedChallenges++
+        summariesLookup[challenge.difficulty].solvedChallenges += challenge.hasCodingChallenge ? challenge.codingChallengeStatus : 0
+      }
+    }
+    return Object.values(summariesLookup)
+      .sort((a, b) => a.difficulty - b.difficulty)
+  }
+}
diff --git a/frontend/src/app/score-board-preview/components/difficulty-stars/difficulty-stars.component.html b/frontend/src/app/score-board-preview/components/difficulty-stars/difficulty-stars.component.html
new file mode 100644
index 00000000000..80966cd160a
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/difficulty-stars/difficulty-stars.component.html
@@ -0,0 +1,14 @@
+<ng-container *ngFor="let _ of [].constructor(difficulty)">
+  <svg
+    width="18"
+    height="18"
+    viewBox="0 0 14 13"
+    fill="none"
+    xmlns="http://www.w3.org/2000/svg"
+  >
+    <path
+      d="M6.56386 0.511963L8.10332 5.24992H13.0851L9.05475 8.17813L10.5942 12.9161L6.56386 9.98787L2.53352 12.9161L4.07297 8.17813L0.0426283 5.24992H5.02441L6.56386 0.511963Z"
+      fill="var(--theme-text)"
+    />
+  </svg>
+</ng-container>
diff --git a/frontend/src/app/score-board-preview/components/difficulty-stars/difficulty-stars.component.scss b/frontend/src/app/score-board-preview/components/difficulty-stars/difficulty-stars.component.scss
new file mode 100644
index 00000000000..79ff2d52696
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/difficulty-stars/difficulty-stars.component.scss
@@ -0,0 +1,3 @@
+:host {
+  display: flex;
+}
diff --git a/frontend/src/app/score-board-preview/components/difficulty-stars/difficulty-stars.component.ts b/frontend/src/app/score-board-preview/components/difficulty-stars/difficulty-stars.component.ts
new file mode 100644
index 00000000000..d0f7560996a
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/difficulty-stars/difficulty-stars.component.ts
@@ -0,0 +1,11 @@
+import { Component, Input } from '@angular/core'
+
+@Component({
+  selector: 'difficulty-stars',
+  templateUrl: './difficulty-stars.component.html',
+  styleUrls: ['./difficulty-stars.component.scss']
+})
+export class DifficultyStarsComponent {
+  @Input()
+    difficulty: 1 | 2 | 3 | 4 | 5 | 6
+}
diff --git a/frontend/src/app/score-board-preview/components/filter-settings/components/category-filter/category-filter.component.html b/frontend/src/app/score-board-preview/components/filter-settings/components/category-filter/category-filter.component.html
new file mode 100644
index 00000000000..d582ff8710b
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/filter-settings/components/category-filter/category-filter.component.html
@@ -0,0 +1,16 @@
+<button
+  class="pill selected"
+  (click)="resetCategoryFilter()"
+  [ngClass]="{ selected: isAllCategoriesSelected() }"
+>
+  All
+</button>
+<button
+  *ngFor="let category of availableCategories"
+  class="pill"
+  [ngClass]="{ selected: isCategorySelected(category) }"
+  (click)="toggleCategorySelected(category)"
+  [matTooltip]="'CATEGORY_' + category.toUpperCase().split(' ').join('_') + '_DESCRIPTION' | translate"
+>
+  {{ category }}
+</button>
diff --git a/frontend/src/app/score-board-preview/components/filter-settings/components/category-filter/category-filter.component.scss b/frontend/src/app/score-board-preview/components/filter-settings/components/category-filter/category-filter.component.scss
new file mode 100644
index 00000000000..a8bd722a824
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/filter-settings/components/category-filter/category-filter.component.scss
@@ -0,0 +1,27 @@
+:host {
+  display: flex;
+  flex-direction: row;
+  flex-wrap: wrap;
+  gap: 8px;
+  margin: 24px 0;
+}
+
+.pill {
+  background-color: var(--theme-primary-darker);
+  border: 1px solid transparent;
+  border-radius: 234234px;
+
+  color: var(--theme-text);
+  cursor: pointer;
+  font-size: 14px;
+
+  font-weight: 600;
+  line-height: 19px;
+  padding: 8px 16px;
+
+  &.selected {
+    background-color: var(--theme-accent-dark);
+    border: 1px solid var(--theme-accent);
+    color: var(--theme-text-invert-15);
+  }
+}
diff --git a/frontend/src/app/score-board-preview/components/filter-settings/components/category-filter/category-filter.component.spec.ts b/frontend/src/app/score-board-preview/components/filter-settings/components/category-filter/category-filter.component.spec.ts
new file mode 100644
index 00000000000..e95349af20a
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/filter-settings/components/category-filter/category-filter.component.spec.ts
@@ -0,0 +1,58 @@
+import { type ComponentFixture, TestBed } from '@angular/core/testing'
+
+import { CategoryFilterComponent } from './category-filter.component'
+import { type EnrichedChallenge } from 'src/app/score-board-preview/types/EnrichedChallenge'
+import { TranslateModule } from '@ngx-translate/core'
+import { MatTooltipModule } from '@angular/material/tooltip'
+
+describe('CategoryFilterComponent', () => {
+  let component: CategoryFilterComponent
+  let fixture: ComponentFixture<CategoryFilterComponent>
+
+  beforeEach(async () => {
+    await TestBed.configureTestingModule({
+      imports: [
+        TranslateModule.forRoot(),
+        MatTooltipModule
+      ],
+      declarations: [CategoryFilterComponent]
+    })
+      .compileComponents()
+
+    fixture = TestBed.createComponent(CategoryFilterComponent)
+    component = fixture.componentInstance
+
+    component.allChallenges = [
+      { category: 'category-one' } as EnrichedChallenge,
+      { category: 'category-one' } as EnrichedChallenge,
+      { category: 'category-two' } as EnrichedChallenge,
+      { category: 'category-three' } as EnrichedChallenge
+    ]
+    component.categories = []
+    fixture.detectChanges()
+  })
+
+  it('should extract all categories from passed in challenges', () => {
+    const availableCategories = CategoryFilterComponent.getAvailableCategories(component.allChallenges)
+    expect(availableCategories).toContain('category-one')
+    expect(availableCategories).toContain('category-two')
+    expect(availableCategories).toContain('category-three')
+  })
+
+  it('toggle should add and remove selected categories', () => {
+    component.toggleCategorySelected('category-one')
+    expect(component.categories).toContain('category-one')
+    expect(component.isCategorySelected('category-one')).toBe(true)
+    component.toggleCategorySelected('category-one')
+    expect(component.categories).not.toContain('category-one')
+    expect(component.isCategorySelected('category-one')).toBe(false)
+  })
+
+  it('reset should clear categories', () => {
+    component.toggleCategorySelected('category-one')
+    component.toggleCategorySelected('category-two')
+    expect(component.isAllCategoriesSelected()).toBe(false)
+    component.resetCategoryFilter()
+    expect(component.isAllCategoriesSelected()).toBe(true)
+  })
+})
diff --git a/frontend/src/app/score-board-preview/components/filter-settings/components/category-filter/category-filter.component.ts b/frontend/src/app/score-board-preview/components/filter-settings/components/category-filter/category-filter.component.ts
new file mode 100644
index 00000000000..a3d219aa30d
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/filter-settings/components/category-filter/category-filter.component.ts
@@ -0,0 +1,55 @@
+import { Component, EventEmitter, Input, type OnChanges, type OnInit, Output } from '@angular/core'
+import { type EnrichedChallenge } from '../../../../types/EnrichedChallenge'
+import { DEFAULT_FILTER_SETTING } from '../../../../filter-settings/FilterSetting'
+
+@Component({
+  selector: 'category-filter',
+  templateUrl: './category-filter.component.html',
+  styleUrls: ['./category-filter.component.scss']
+})
+export class CategoryFilterComponent implements OnInit, OnChanges {
+  public availableCategories = new Set<string>()
+
+  @Input()
+    allChallenges: EnrichedChallenge[]
+
+  @Input()
+    categories: string[]
+
+  @Output()
+    categoriesChange = new EventEmitter<string[]>()
+
+  ngOnInit () {
+    this.availableCategories = CategoryFilterComponent.getAvailableCategories(this.allChallenges)
+  }
+
+  ngOnChanges () {
+    this.availableCategories = CategoryFilterComponent.getAvailableCategories(this.allChallenges)
+  }
+
+  public static getAvailableCategories (allChallenges: EnrichedChallenge[]) {
+    return new Set(allChallenges.map((challenge) => challenge.category))
+  }
+
+  public toggleCategorySelected (category: string) {
+    if (this.isCategorySelected(category)) {
+      this.categories = this.categories.filter((c) => c !== category)
+    } else {
+      this.categories.push(category)
+    }
+    this.categoriesChange.emit(this.categories)
+  }
+
+  public isCategorySelected (category: string) {
+    return this.categories.includes(category)
+  }
+
+  public isAllCategoriesSelected () {
+    return (this.categories.length === 0)
+  }
+
+  public resetCategoryFilter () {
+    this.categories = DEFAULT_FILTER_SETTING.categories
+    this.categoriesChange.emit(this.categories)
+  }
+}
diff --git a/frontend/src/app/score-board-preview/components/filter-settings/components/score-board-additional-settings-dialog/score-board-additional-settings-dialog.component.html b/frontend/src/app/score-board-preview/components/filter-settings/components/score-board-additional-settings-dialog/score-board-additional-settings-dialog.component.html
new file mode 100644
index 00000000000..b1b5fb6da43
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/filter-settings/components/score-board-additional-settings-dialog/score-board-additional-settings-dialog.component.html
@@ -0,0 +1,37 @@
+<mat-dialog-content class="mat-typography">
+  <h1 mat-dialog-title translate>SCOREBOARD_ADDITIONAL_SETTINGS</h1>
+
+  <div class="settings">
+    <div class="setting-group">
+      <h2 translate>BACKUP_HEADLINE</h2>
+      <div class="setting">
+        <span translate>SAVE_BACKUP_TOOLTIP</span>
+        <button mat-flat-button color="primary" (click)="localBackupService.save()"><mat-icon>save_alt</mat-icon><span translate>BTN_SAVE_BACKUP</span></button>
+      </div>
+      <div class="setting">
+        <input type="file"
+          #restoreBackupFile
+          (change)="localBackupService.restore($event.target.files.item(0))"
+          style="display:none;" />
+        <span translate>RESTORE_BACKUP_TOOLTIP</span>
+        <button mat-flat-button color="primary" (click)="restoreBackupFile.click()"><mat-icon>settings_backup_restore</mat-icon><span translate>BTN_RESTORE_BACKUP</span></button>
+      </div>
+    </div>
+    <div class="setting-group">
+      <h2 translate>FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME</h2>
+      <div class="setting">
+        <span translate>FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION</span>
+        <mat-radio-group aria-label="Default ScoreBoard" (change)="featureFlagService.setDefaultScoreBoard($event.value)" [value]="scoreBoardVersion">
+          <mat-radio-button value="v1">{{ "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD" | translate}}</mat-radio-button>
+          <mat-radio-button value="v2">{{ "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW" | translate}}</mat-radio-button>
+        </mat-radio-group>
+      </div>
+    </div>
+  </div>
+
+  <mat-dialog-actions>
+    <button mat-flat-button [mat-dialog-close]="null" cdkFocusInitial>
+      {{ "BTN_CLOSE" | translate }}
+    </button>
+  </mat-dialog-actions>
+</mat-dialog-content>
diff --git a/frontend/src/app/score-board-preview/components/filter-settings/components/score-board-additional-settings-dialog/score-board-additional-settings-dialog.component.scss b/frontend/src/app/score-board-preview/components/filter-settings/components/score-board-additional-settings-dialog/score-board-additional-settings-dialog.component.scss
new file mode 100644
index 00000000000..56cd1706276
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/filter-settings/components/score-board-additional-settings-dialog/score-board-additional-settings-dialog.component.scss
@@ -0,0 +1,51 @@
+mat-dialog-content {
+  display: grid;
+  grid-template-rows: min-content 1fr min-content;
+  height: 100%;
+  overflow: visible;
+}
+
+.mat-radio-button ~ .mat-radio-button {
+  margin-left: 16px;
+}
+
+mat-dialog-actions {
+  display: flex;
+  flex-direction: row-reverse;
+}
+
+h1 {
+  margin-bottom: 24px;
+}
+
+.settings {
+  min-height: 400px;
+  overflow-y: auto;
+}
+
+.setting-group {
+  border-bottom: 3px solid var(--theme-background-lighter);
+  margin-bottom: 16px;
+
+  h2 {
+    font-size: 18px;
+    margin-bottom: 8px;
+  }
+
+  &:last-child {
+    border-bottom: unset;
+    margin-bottom: 0;
+  }
+}
+
+.setting {
+  align-items: center;
+  display: grid;
+  gap: 16px;
+  grid-template-columns: auto max-content;
+  margin-bottom: 16px;
+}
+
+button mat-icon {
+  margin-right: 8px;
+}
diff --git a/frontend/src/app/score-board-preview/components/filter-settings/components/score-board-additional-settings-dialog/score-board-additional-settings-dialog.component.spec.ts b/frontend/src/app/score-board-preview/components/filter-settings/components/score-board-additional-settings-dialog/score-board-additional-settings-dialog.component.spec.ts
new file mode 100644
index 00000000000..63d5f956620
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/filter-settings/components/score-board-additional-settings-dialog/score-board-additional-settings-dialog.component.spec.ts
@@ -0,0 +1,51 @@
+import { type ComponentFixture, TestBed } from '@angular/core/testing'
+
+import { ScoreBoardAdditionalSettingsDialogComponent } from './score-board-additional-settings-dialog.component'
+import { TranslateModule } from '@ngx-translate/core'
+import { MatDialogModule, MatDialogRef } from '@angular/material/dialog'
+import { FeatureFlagService } from 'src/app/Services/feature-flag.service'
+import { of } from 'rxjs'
+import { LocalBackupService } from 'src/app/Services/local-backup.service'
+
+describe('ScoreBoardAdditionalSettingsDialogComponent', () => {
+  let component: ScoreBoardAdditionalSettingsDialogComponent
+  let fixture: ComponentFixture<ScoreBoardAdditionalSettingsDialogComponent>
+
+  beforeEach(async () => {
+    await TestBed.configureTestingModule({
+      imports: [TranslateModule.forRoot(), MatDialogModule],
+      declarations: [ScoreBoardAdditionalSettingsDialogComponent],
+      providers: [
+        {
+          provide: MatDialogRef,
+          useValue: {}
+        },
+        {
+          provide: FeatureFlagService,
+          useValue: {
+            defaultScoreBoard$: of('v1'),
+            setDefaultScoreBoard: () => null
+          }
+        },
+        {
+          provide: LocalBackupService,
+          useValue: {
+            save: () => null,
+            restore: () => null
+          }
+        }
+      ]
+    }).compileComponents()
+
+    fixture = TestBed.createComponent(
+      ScoreBoardAdditionalSettingsDialogComponent
+    )
+    component = fixture.componentInstance
+
+    fixture.detectChanges()
+  })
+
+  it('should create', () => {
+    expect(component).toBeTruthy()
+  })
+})
diff --git a/frontend/src/app/score-board-preview/components/filter-settings/components/score-board-additional-settings-dialog/score-board-additional-settings-dialog.component.ts b/frontend/src/app/score-board-preview/components/filter-settings/components/score-board-additional-settings-dialog/score-board-additional-settings-dialog.component.ts
new file mode 100644
index 00000000000..9202c54ea09
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/filter-settings/components/score-board-additional-settings-dialog/score-board-additional-settings-dialog.component.ts
@@ -0,0 +1,39 @@
+import { Component, type OnDestroy, type OnInit } from '@angular/core'
+import { MatDialogRef } from '@angular/material/dialog'
+import { type Subscription } from 'rxjs'
+
+import { FeatureFlagService } from 'src/app/Services/feature-flag.service'
+import { LocalBackupService } from 'src/app/Services/local-backup.service'
+
+@Component({
+  selector: 'score-board-additional-settings-dialog',
+  templateUrl: './score-board-additional-settings-dialog.component.html',
+  styleUrls: ['./score-board-additional-settings-dialog.component.scss']
+})
+export class ScoreBoardAdditionalSettingsDialogComponent
+implements OnInit, OnDestroy {
+  public scoreBoardVersion: null | 'v1' | 'v2' = null
+
+  private readonly subscriptions: Subscription[] = []
+
+  constructor (
+    public dialogRef: MatDialogRef<ScoreBoardAdditionalSettingsDialogComponent>,
+    public featureFlagService: FeatureFlagService,
+    public localBackupService: LocalBackupService
+  ) {}
+
+  async ngOnInit () {
+    const subscription = this.featureFlagService.defaultScoreBoard$.subscribe(
+      (version) => {
+        this.scoreBoardVersion = version
+      }
+    )
+    this.subscriptions.push(subscription)
+  }
+
+  ngOnDestroy () {
+    for (const subscription of this.subscriptions) {
+      subscription.unsubscribe()
+    }
+  }
+}
diff --git a/frontend/src/app/score-board-preview/components/filter-settings/filter-settings.component.html b/frontend/src/app/score-board-preview/components/filter-settings/filter-settings.component.html
new file mode 100644
index 00000000000..b1f619aa7ff
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/filter-settings/filter-settings.component.html
@@ -0,0 +1,78 @@
+<div class="filter-row">
+  <div class="search-form-field">
+    <mat-form-field>
+      <mat-icon matPrefix class="search-icon">search</mat-icon>
+      <mat-label translate>NAV_SEARCH</mat-label>
+      <input type="search" matInput [value]="filterSetting.searchQuery" (input)="onSearchQueryFilterChange($event.target.value)">
+    </mat-form-field>
+  </div>
+  <div class="options-group">
+    <mat-form-field>
+      <mat-label translate>LABEL_DIFFICULTY</mat-label>
+      <mat-select multiple [value]="filterSetting.difficulties" (selectionChange)="onDifficultyFilterChange($event.value)">
+        <mat-select-trigger>
+          <ng-container *ngIf="filterSetting.difficulties.length === 0">
+            {{ "LABEL_DIFFICULTY" | translate }}
+          </ng-container>
+          <span *ngIf="filterSetting.difficulties.length !== 0">
+            {{ filterSetting.difficulties | difficultySelectionSummary }}
+          </span>
+        </mat-select-trigger>
+        <mat-option [value]="1">
+          <difficulty-stars [difficulty]="1"></difficulty-stars>
+        </mat-option>
+        <mat-option [value]="2">
+          <difficulty-stars [difficulty]="2"></difficulty-stars>
+        </mat-option>
+        <mat-option [value]="3">
+          <difficulty-stars [difficulty]="3"></difficulty-stars>
+        </mat-option>
+        <mat-option [value]="4">
+          <difficulty-stars [difficulty]="4"></difficulty-stars>
+        </mat-option>
+        <mat-option [value]="5">
+          <difficulty-stars [difficulty]="5"></difficulty-stars>
+        </mat-option>
+        <mat-option [value]="6">
+          <difficulty-stars [difficulty]="6"></difficulty-stars>
+        </mat-option>
+      </mat-select>
+    </mat-form-field>
+    <mat-form-field>
+      <mat-label translate>LABEL_STATUS</mat-label>
+      <mat-select placeholder="All" [value]="filterSetting.status" (selectionChange)="onStatusFilterChange($event.value)">
+        <mat-option [value]="null">{{ 'STATUS_ALL' | translate }}</mat-option>
+        <mat-option value="unsolved">{{ 'STATUS_UNSOLVED' | translate }}</mat-option>
+        <mat-option value="partially-solved">{{ 'STATUS_PARTIALLY_SOLVED' | translate }}</mat-option>
+        <mat-option value="solved">{{ 'STATUS_SOLVED' | translate }}</mat-option>
+      </mat-select>
+    </mat-form-field>
+    <mat-form-field>
+      <mat-label translate>LABEL_TAGS</mat-label>
+      <mat-select multiple [value]="filterSetting.tags" (selectionChange)="onTagFilterChange($event.value)">
+        <mat-option *ngFor="let tag of tags" [value]="tag">{{ tag }}</mat-option>
+      </mat-select>
+    </mat-form-field>
+    <div class="additional-settings-wrapper">
+      <div>
+        <button id="reset-filters" mat-icon-button aria-label="reset all filters" (click)="reset()" [matTooltip]="'LABEL_RESET_ALL_FILTERS' | translate">
+          <!-- inlined svg icon as the "filter_alt_off" isn't included in our icons. -->
+          <svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg" [style.color]="canBeReset() ? 'var(--theme-warn)' : 'var(--theme-text-dark)'">
+            <path d="M12.2442 2.96672L9.56672 6.37922L10.6392 7.45172C11.4117 6.46922 14.3742 2.67422 14.3742 2.67422C14.7567 2.17922 14.4042 1.46672 13.7817 1.46672H4.65422L6.15422 2.96672H12.2442Z" fill="currentColor"/>
+            <path d="M1.63922 0.574219L0.574219 1.63172L7.03172 8.21672V12.7167C7.03172 13.1292 7.36922 13.4667 7.78172 13.4667H9.28172C9.69422 13.4667 10.0317 13.1292 10.0317 12.7167V11.0892L14.3667 15.4242L15.4242 14.3667L1.63922 0.574219Z" fill="currentColor"/>
+          </svg>
+        </button>
+        <label class="reset-filters-label" for="reset-filters" translate>LABEL_RESET_ALL_FILTERS</label>
+      </div>
+      <button class="additional-settings-button" mat-icon-button aria-label="Open additional settings dialog" (click)="openAdditionalSettingsDialog()" [matTooltip]="'Open additional settings dialog'">
+        <mat-icon>settings</mat-icon>
+      </button>
+    </div>
+  </div>
+</div>
+
+<category-filter
+  [categories]="filterSetting.categories"
+  (categoriesChange)="onCategoryFilterChange($event)"
+  [allChallenges]="allChallenges"
+></category-filter>
diff --git a/frontend/src/app/score-board-preview/components/filter-settings/filter-settings.component.scss b/frontend/src/app/score-board-preview/components/filter-settings/filter-settings.component.scss
new file mode 100644
index 00000000000..2b77e384881
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/filter-settings/filter-settings.component.scss
@@ -0,0 +1,74 @@
+.options-group {
+  align-items: center;
+  column-gap: 16px;
+  display: grid;
+  grid-template-columns: repeat(3, 1fr) min-content;
+  row-gap: 8px;
+  @media (max-width: 800px) {
+    grid-template-columns: auto;
+  }
+}
+
+.filter-row {
+  display: grid;
+  gap: 16px;
+  grid-template-columns: auto min-content min-content;
+  margin-top: 16px;
+  @media (max-width: 1000px) {
+    grid-template-columns: auto;
+  }
+}
+
+.search-form-field {
+  mat-form-field {
+    width: 100%;
+  }
+}
+
+.search-icon {
+  align-items: flex-end;
+  color: var(--theme-text-fade-30);
+  display: flex;
+  // some weird fixes to get the icon to align with the search field
+  // something troubling seems to be broken with angular material positioning for us
+  font-size: 18px;
+  line-height: 12px;
+  margin-right: 4px;
+}
+
+.reset-filters-label {
+  color: var(--theme-text-fade-30);
+  @media (min-width: 800px) {
+    // hide the reset filters label on large screens
+    // not needed there and the button looks too alone and unexplained on smaller screens without it
+    display: none;
+  }
+}
+
+.reset-filters-label {
+  color: var(--theme-text-fade-30);
+  @media (min-width: 800px) {
+    // hide the reset filters label on large screens
+    // not needed there and the button looks too alone and unexplained on smaller screens without it
+    display: none;
+  }
+}
+
+.additional-settings-wrapper {
+  align-items: center;
+  display: flex;
+}
+
+.additional-settings-button {
+  align-items: center;
+  display: flex;
+  justify-content: center;
+
+  mat-icon {
+    color: var(--theme-text-fade-30);
+    font-size: 16px;
+    height: 16px;
+    line-height: 16px;
+    width: 16px;
+  }
+}
diff --git a/frontend/src/app/score-board-preview/components/filter-settings/filter-settings.component.spec.ts b/frontend/src/app/score-board-preview/components/filter-settings/filter-settings.component.spec.ts
new file mode 100644
index 00000000000..cc37df438a7
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/filter-settings/filter-settings.component.spec.ts
@@ -0,0 +1,64 @@
+import { type ComponentFixture, TestBed } from '@angular/core/testing'
+
+import { FilterSettingsComponent } from './filter-settings.component'
+import { CategoryFilterComponent } from './components/category-filter/category-filter.component'
+import { DEFAULT_FILTER_SETTING } from '../../filter-settings/FilterSetting'
+import { TranslateModule } from '@ngx-translate/core'
+import { MatFormFieldModule } from '@angular/material/form-field'
+import { MatInputModule } from '@angular/material/input'
+import { MatSelectModule } from '@angular/material/select'
+import { NoopAnimationsModule } from '@angular/platform-browser/animations'
+import { MatTooltipModule } from '@angular/material/tooltip'
+import { MatDialogModule } from '@angular/material/dialog'
+import { FeatureFlagService } from 'src/app/Services/feature-flag.service'
+import { DifficultySelectionSummaryPipe } from './pipes/difficulty-selection-summary.pipe'
+import { LocalBackupService } from 'src/app/Services/local-backup.service'
+
+describe('FilterSettingsComponent', () => {
+  let component: FilterSettingsComponent
+  let fixture: ComponentFixture<FilterSettingsComponent>
+
+  beforeEach(async () => {
+    await TestBed.configureTestingModule({
+      imports: [
+        NoopAnimationsModule,
+        TranslateModule.forRoot(),
+        MatFormFieldModule,
+        MatInputModule,
+        MatSelectModule,
+        MatTooltipModule,
+        MatDialogModule
+      ],
+      declarations: [
+        FilterSettingsComponent,
+        CategoryFilterComponent,
+        DifficultySelectionSummaryPipe
+      ],
+      providers: [
+        {
+          provide: FeatureFlagService,
+          useValue: { getDefaultScoreBoard: () => 'v1' }
+        },
+        {
+          provide: LocalBackupService,
+          useValue: {
+            save: () => null,
+            restore: () => null
+          }
+        }
+      ]
+    }).compileComponents()
+
+    fixture = TestBed.createComponent(FilterSettingsComponent)
+    component = fixture.componentInstance
+
+    component.allChallenges = []
+    component.filterSetting = { ...DEFAULT_FILTER_SETTING }
+
+    fixture.detectChanges()
+  })
+
+  it('should create', () => {
+    expect(component).toBeTruthy()
+  })
+})
diff --git a/frontend/src/app/score-board-preview/components/filter-settings/filter-settings.component.ts b/frontend/src/app/score-board-preview/components/filter-settings/filter-settings.component.ts
new file mode 100644
index 00000000000..2e1459694c7
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/filter-settings/filter-settings.component.ts
@@ -0,0 +1,74 @@
+import { Component, EventEmitter, Input, type OnChanges, OnInit, Output } from '@angular/core'
+import { DEFAULT_FILTER_SETTING, FilterSetting } from '../../filter-settings/FilterSetting'
+import { type EnrichedChallenge } from '../../types/EnrichedChallenge'
+import { MatDialog } from '@angular/material/dialog'
+import { ScoreBoardAdditionalSettingsDialogComponent } from './components/score-board-additional-settings-dialog/score-board-additional-settings-dialog.component'
+
+@Component({
+  selector: 'filter-settings',
+  templateUrl: './filter-settings.component.html',
+  styleUrls: ['./filter-settings.component.scss']
+})
+export class FilterSettingsComponent implements OnChanges {
+  @Input()
+  public allChallenges: EnrichedChallenge[]
+
+  @Input()
+  public filterSetting: FilterSetting
+
+  @Output()
+  public filterSettingChange = new EventEmitter<FilterSetting>()
+
+  @Input()
+  public reset: () => void
+
+  constructor (private readonly dialog: MatDialog) { }
+
+  public tags = new Set<string>()
+  ngOnChanges () {
+    this.tags = new Set(this.allChallenges.flatMap((challenge) => challenge.tagList))
+  }
+
+  onDifficultyFilterChange (difficulties: Array<1 | 2 | 3 | 4 | 5 | 6>) {
+    const filterSettingCopy = structuredClone(this.filterSetting)
+    filterSettingCopy.difficulties = difficulties
+    this.filterSettingChange.emit(filterSettingCopy)
+  }
+
+  onStatusFilterChange (status: 'solved' | 'unsolved' | null) {
+    const filterSettingCopy = structuredClone(this.filterSetting)
+    filterSettingCopy.status = status
+    this.filterSettingChange.emit(filterSettingCopy)
+  }
+
+  onTagFilterChange (tags: string[]) {
+    const filterSettingCopy = structuredClone(this.filterSetting)
+    filterSettingCopy.tags = tags
+    this.filterSettingChange.emit(filterSettingCopy)
+  }
+
+  onCategoryFilterChange (categories: string[]) {
+    const filterSettingCopy = structuredClone(this.filterSetting)
+    filterSettingCopy.categories = categories
+    this.filterSettingChange.emit(filterSettingCopy)
+  }
+
+  onSearchQueryFilterChange (searchQuery: string) {
+    const filterSettingCopy = structuredClone(this.filterSetting)
+    filterSettingCopy.searchQuery = searchQuery
+    this.filterSettingChange.emit(filterSettingCopy)
+  }
+
+  public canBeReset (): boolean {
+    return this.filterSetting.difficulties.length > 0 ||
+      this.filterSetting.status !== null ||
+      this.filterSetting.tags.length > 0 ||
+      this.filterSetting.categories.length > 0 ||
+      !!this.filterSetting.searchQuery ||
+      !this.filterSetting.showDisabledChallenges
+  }
+
+  public openAdditionalSettingsDialog () {
+    this.dialog.open(ScoreBoardAdditionalSettingsDialogComponent)
+  }
+}
diff --git a/frontend/src/app/score-board-preview/components/filter-settings/pipes/difficulty-selection-summary.pipe.spec.ts b/frontend/src/app/score-board-preview/components/filter-settings/pipes/difficulty-selection-summary.pipe.spec.ts
new file mode 100644
index 00000000000..e84c715cc14
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/filter-settings/pipes/difficulty-selection-summary.pipe.spec.ts
@@ -0,0 +1,19 @@
+import { DifficultySelectionSummaryPipe } from './difficulty-selection-summary.pipe'
+
+describe('DifficultySelectionSummaryPipe', () => {
+  let pipe: DifficultySelectionSummaryPipe
+
+  beforeEach(async () => {
+    pipe = new DifficultySelectionSummaryPipe()
+  })
+
+  it('should properly summarize selected difficulties', () => {
+    expect(pipe.transform([])).toBe('')
+    expect(pipe.transform([1])).toBe('1')
+    expect(pipe.transform([1, 3, 5])).toBe('1, 3, 5')
+    expect(pipe.transform([1, 2, 3, 5])).toBe('1 - 3, 5')
+    expect(pipe.transform([1, 3, 4, 5])).toBe('1, 3 - 5')
+    expect(pipe.transform([1, 2, 4, 5, 6])).toBe('1 - 2, 4 - 6')
+    expect(pipe.transform([1, 2, 3, 4, 5, 6])).toBe('1 - 6')
+  })
+})
diff --git a/frontend/src/app/score-board-preview/components/filter-settings/pipes/difficulty-selection-summary.pipe.ts b/frontend/src/app/score-board-preview/components/filter-settings/pipes/difficulty-selection-summary.pipe.ts
new file mode 100644
index 00000000000..c74bfdae0cf
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/filter-settings/pipes/difficulty-selection-summary.pipe.ts
@@ -0,0 +1,50 @@
+import { Pipe, type PipeTransform } from '@angular/core'
+
+import sortBy from 'lodash-es/sortBy'
+
+interface DifficultyGroup {
+  start: number
+  end: number
+}
+
+@Pipe({ name: 'difficultySelectionSummary', pure: true })
+export class DifficultySelectionSummaryPipe implements PipeTransform {
+  transform (selectedDifficulties: Array<1 | 2 | 3 | 4 | 5 | 6>): string {
+    if (selectedDifficulties.length === 0) {
+      return ''
+    }
+
+    const sortedDifficulties = sortBy(selectedDifficulties)
+    const difficultyGroups = breakDifficultiesIntoNeighboringGroups(sortedDifficulties)
+    return convertDifficultyGroupsToString(difficultyGroups)
+  }
+}
+
+function breakDifficultiesIntoNeighboringGroups (difficulties: Array<1 | 2 | 3 | 4 | 5 | 6>): DifficultyGroup[] {
+  const difficultyGroups: DifficultyGroup[] = []
+  let currentGroup: DifficultyGroup = null
+  for (const difficulty of difficulties) {
+    if (currentGroup === null) {
+      currentGroup = { start: difficulty, end: difficulty }
+    } else {
+      if (difficulty === currentGroup.end + 1) {
+        currentGroup.end = difficulty
+      } else {
+        difficultyGroups.push(currentGroup)
+        currentGroup = { start: difficulty, end: difficulty }
+      }
+    }
+  }
+  difficultyGroups.push(currentGroup)
+  return difficultyGroups
+}
+
+function convertDifficultyGroupsToString (difficultyGroups: DifficultyGroup[]): string {
+  return difficultyGroups.map(group => {
+    if (group.start === group.end) {
+      return group.start.toString()
+    } else {
+      return `${group.start} - ${group.end}`
+    }
+  }).join(', ')
+}
diff --git a/frontend/src/app/score-board-preview/components/hacking-challenge-progress-score-card/hacking-challenge-progress-score-card.component.html b/frontend/src/app/score-board-preview/components/hacking-challenge-progress-score-card/hacking-challenge-progress-score-card.component.html
new file mode 100644
index 00000000000..9f6703a0019
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/hacking-challenge-progress-score-card/hacking-challenge-progress-score-card.component.html
@@ -0,0 +1,32 @@
+<score-card
+  [description]="'TITLE_HACKING_CHALLENGES' | translate"
+  [total]="allChallenges.length"
+  [score]="solvedChallenges"
+  [showAsPercentage]="true"
+>
+    <div right-side class="icon-group">
+        <svg
+          width="62"
+          height="69"
+          viewBox="0 0 62 69"
+          fill="none"
+          xmlns="http://www.w3.org/2000/svg"
+        >
+          <g clip-path="url(#clip0_2_621)">
+            <path
+              d="M51.875 72.6249H29.125M51.875 72.6249V40.7749C51.875 40.1715 51.6353 39.5929 51.2087 39.1662C50.782 38.7396 50.2034 38.4999 49.6 38.4999H31.4C30.7966 38.4999 30.218 38.7396 29.7913 39.1662C29.3647 39.5929 29.125 40.1715 29.125 40.7749V72.6249M51.875 72.6249H72.35C72.9534 72.6249 73.532 72.3852 73.9587 71.9586C74.3853 71.5319 74.625 70.9533 74.625 70.3499V61.6291C74.625 61.0257 74.3853 60.447 73.9587 60.0204C73.532 59.5937 72.9534 59.3541 72.35 59.3541H54.15C53.5466 59.3541 52.968 59.5937 52.5413 60.0204C52.1147 60.447 51.875 61.0257 51.875 61.6291V72.6249ZM29.125 72.6249V54.0457C29.125 53.4424 28.8853 52.8637 28.4587 52.4371C28.032 52.0104 27.4534 51.7707 26.85 51.7707H8.65C8.04663 51.7707 7.46798 52.0104 7.04133 52.4371C6.61469 52.8637 6.375 53.4424 6.375 54.0457V70.3499C6.375 70.9533 6.61469 71.5319 7.04133 71.9586C7.46798 72.3852 8.04663 72.6249 8.65 72.6249H29.125ZM35.9727 12.3867L39.4194 5.08015C39.5124 4.87128 39.664 4.69384 39.8558 4.56933C40.0476 4.44481 40.2713 4.37854 40.5 4.37854C40.7287 4.37854 40.9524 4.44481 41.1442 4.56933C41.336 4.69384 41.4876 4.87128 41.5806 5.08015L45.031 12.3867L52.7357 13.5659C53.7253 13.7176 54.1197 14.9916 53.403 15.7196L47.8293 21.4071L49.145 29.4378C49.3118 30.4691 48.2805 31.2578 47.3933 30.7687L40.5 26.977L33.6068 30.7687C32.7233 31.254 31.6882 30.4691 31.855 29.4378L33.1707 21.4071L27.597 15.7196C26.8765 14.9916 27.2747 13.7176 28.2605 13.5659L35.9727 12.3867Z"
+              stroke="var(--theme-text)"
+              stroke-opacity="0.12"
+              stroke-width="5.6875"
+              stroke-linecap="round"
+              stroke-linejoin="round"
+            />
+          </g>
+          <defs>
+            <clipPath id="clip0_2_621">
+              <rect width="62" height="69" fill="var(--theme-text)" />
+            </clipPath>
+          </defs>
+        </svg>
+    </div>
+</score-card>
diff --git a/frontend/src/app/score-board-preview/components/hacking-challenge-progress-score-card/hacking-challenge-progress-score-card.component.scss b/frontend/src/app/score-board-preview/components/hacking-challenge-progress-score-card/hacking-challenge-progress-score-card.component.scss
new file mode 100644
index 00000000000..e026e88ec21
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/hacking-challenge-progress-score-card/hacking-challenge-progress-score-card.component.scss
@@ -0,0 +1,6 @@
+.icon-group {
+  align-items: flex-end;
+  display: flex;
+  height: 100%;
+  justify-content: flex-end;
+}
diff --git a/frontend/src/app/score-board-preview/components/hacking-challenge-progress-score-card/hacking-challenge-progress-score-card.component.spec.ts b/frontend/src/app/score-board-preview/components/hacking-challenge-progress-score-card/hacking-challenge-progress-score-card.component.spec.ts
new file mode 100644
index 00000000000..7e4bb73b8b0
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/hacking-challenge-progress-score-card/hacking-challenge-progress-score-card.component.spec.ts
@@ -0,0 +1,26 @@
+import { type ComponentFixture, TestBed } from '@angular/core/testing'
+
+import { HackingChallengeProgressScoreCardComponent } from './hacking-challenge-progress-score-card.component'
+import { TranslateModule } from '@ngx-translate/core'
+import { ScoreCardComponent } from '../score-card/score-card.component'
+
+describe('HackingChallengeProgressScoreCardComponent', () => {
+  let component: HackingChallengeProgressScoreCardComponent
+  let fixture: ComponentFixture<HackingChallengeProgressScoreCardComponent>
+
+  beforeEach(async () => {
+    await TestBed.configureTestingModule({
+      declarations: [ScoreCardComponent, HackingChallengeProgressScoreCardComponent],
+      imports: [TranslateModule.forRoot()]
+    })
+      .compileComponents()
+
+    fixture = TestBed.createComponent(HackingChallengeProgressScoreCardComponent)
+    component = fixture.componentInstance
+    fixture.detectChanges()
+  })
+
+  it('should create', () => {
+    expect(component).toBeTruthy()
+  })
+})
diff --git a/frontend/src/app/score-board-preview/components/hacking-challenge-progress-score-card/hacking-challenge-progress-score-card.component.ts b/frontend/src/app/score-board-preview/components/hacking-challenge-progress-score-card/hacking-challenge-progress-score-card.component.ts
new file mode 100644
index 00000000000..b50684d8d39
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/hacking-challenge-progress-score-card/hacking-challenge-progress-score-card.component.ts
@@ -0,0 +1,26 @@
+import { Component, Input, type OnChanges, type OnInit, type SimpleChanges } from '@angular/core'
+import { type EnrichedChallenge } from '../../types/EnrichedChallenge'
+
+@Component({
+  selector: 'hacking-challenge-progress-score-card',
+  templateUrl: './hacking-challenge-progress-score-card.component.html',
+  styleUrls: ['./hacking-challenge-progress-score-card.component.scss']
+})
+export class HackingChallengeProgressScoreCardComponent implements OnInit, OnChanges {
+  @Input()
+  public allChallenges: EnrichedChallenge[] = []
+
+  public solvedChallenges: number
+
+  ngOnInit (): void {
+    this.updatedNumberOfSolvedChallenges()
+  }
+
+  ngOnChanges (changes: SimpleChanges): void {
+    this.updatedNumberOfSolvedChallenges()
+  }
+
+  private updatedNumberOfSolvedChallenges (): void {
+    this.solvedChallenges = this.allChallenges.filter((challenge) => challenge.solved).length
+  }
+}
diff --git a/frontend/src/app/score-board-preview/components/preview-feature-notice/preview-feature-notice.component.html b/frontend/src/app/score-board-preview/components/preview-feature-notice/preview-feature-notice.component.html
new file mode 100644
index 00000000000..be794a641f7
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/preview-feature-notice/preview-feature-notice.component.html
@@ -0,0 +1,14 @@
+<warning-card>
+  <mat-icon warning-icon>texture</mat-icon>
+  <span warning-text>
+    <ng-container *ngIf="!applicationConfig?.application?.showGitHubLinks; else noticeWithLinks">
+      {{ 'SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT' | translate }}
+    </ng-container>
+    <ng-template #noticeWithLinks>
+      <span [innerHTML]="'SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT' | translate"></span>
+    </ng-template>
+  </span>
+  <a warning-action mat-button routerLink="/score-board">
+    {{ 'SCORE_BOARD_PREVIEW_BACK' | translate }}
+  </a>
+</warning-card>
diff --git a/frontend/src/app/score-board-preview/components/preview-feature-notice/preview-feature-notice.component.ts b/frontend/src/app/score-board-preview/components/preview-feature-notice/preview-feature-notice.component.ts
new file mode 100644
index 00000000000..866d02aef92
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/preview-feature-notice/preview-feature-notice.component.ts
@@ -0,0 +1,12 @@
+import { Component, Input } from '@angular/core'
+
+import { type Config } from 'src/app/Services/configuration.service'
+
+@Component({
+  selector: 'preview-feature-notice',
+  templateUrl: './preview-feature-notice.component.html'
+})
+export class PreviewFeatureNoticeComponent {
+  @Input()
+  public applicationConfig: Config | null = null
+}
diff --git a/frontend/src/app/score-board-preview/components/score-card/score-card.component.html b/frontend/src/app/score-board-preview/components/score-card/score-card.component.html
new file mode 100644
index 00000000000..cd03b83f281
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/score-card/score-card.component.html
@@ -0,0 +1,17 @@
+<div class="score-group">
+  <p class="score">
+    <ng-container *ngIf="showAsPercentage == true">
+      {{ (score / total) * 100 | number : "1.0-0" }}%
+    </ng-container>
+    <ng-container *ngIf="showAsPercentage == false">
+      {{ score }}/<span class="fraction-total">{{ total }}</span>
+    </ng-container>
+  </p>
+  <p class="category">{{ description }}</p>
+  <div *ngIf="showProgressBar === true" class="progress-bar-container">
+    <div class="progress-bar" [style.width]="(score / total) * 100 + '%'"></div>
+  </div>
+</div>
+<div class="right-group">
+  <ng-content select="[right-side]" />
+</div>
diff --git a/frontend/src/app/score-board-preview/components/score-card/score-card.component.scss b/frontend/src/app/score-board-preview/components/score-card/score-card.component.scss
new file mode 100644
index 00000000000..599eaa71f05
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/score-card/score-card.component.scss
@@ -0,0 +1,50 @@
+:host {
+  background-color: var(--theme-background-dark);
+  border-radius: 4px;
+  display: grid;
+  grid-template-columns: auto min-content;
+  height: 100%;
+}
+
+.score-group {
+  display: flex;
+  flex-direction: column;
+  justify-content: center;
+  padding: 16px 0 16px 16px;
+
+  .score {
+    color: var(--theme-text);
+    font-size: 32px;
+    font-style: normal;
+    font-weight: 500;
+    line-height: 42px;
+
+    margin-bottom: 0;
+  }
+
+  .fraction-total {
+    color: var(--theme-text-dark);
+    font-size: 16px;
+    line-height: 26px;
+  }
+
+  .category {
+    color: var(--theme-text);
+    font-size: 20px;
+    font-style: normal;
+    font-weight: 500;
+    line-height: 23px;
+  }
+}
+
+.progress-bar-container {
+  background-color: var(--theme-background-lighter);
+  border-radius: 3px;
+  max-width: 200px;
+  overflow: hidden;
+
+  .progress-bar {
+    background-color: var(--theme-accent);
+    height: 8px;
+  }
+}
diff --git a/frontend/src/app/score-board-preview/components/score-card/score-card.component.spec.ts b/frontend/src/app/score-board-preview/components/score-card/score-card.component.spec.ts
new file mode 100644
index 00000000000..3d72a545665
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/score-card/score-card.component.spec.ts
@@ -0,0 +1,23 @@
+import { type ComponentFixture, TestBed } from '@angular/core/testing'
+
+import { ScoreCardComponent } from './score-card.component'
+
+describe('ScoreCardComponent', () => {
+  let component: ScoreCardComponent
+  let fixture: ComponentFixture<ScoreCardComponent>
+
+  beforeEach(async () => {
+    await TestBed.configureTestingModule({
+      declarations: [ScoreCardComponent]
+    })
+      .compileComponents()
+
+    fixture = TestBed.createComponent(ScoreCardComponent)
+    component = fixture.componentInstance
+    fixture.detectChanges()
+  })
+
+  it('should create', () => {
+    expect(component).toBeTruthy()
+  })
+})
diff --git a/frontend/src/app/score-board-preview/components/score-card/score-card.component.ts b/frontend/src/app/score-board-preview/components/score-card/score-card.component.ts
new file mode 100644
index 00000000000..3e5a4f6fbbd
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/score-card/score-card.component.ts
@@ -0,0 +1,23 @@
+import { Component, Input } from '@angular/core'
+
+@Component({
+  selector: 'score-card',
+  templateUrl: './score-card.component.html',
+  styleUrls: ['./score-card.component.scss']
+})
+export class ScoreCardComponent {
+  @Input()
+  public description: string
+
+  @Input()
+  public total: number
+
+  @Input()
+  public score: number
+
+  @Input()
+  public showAsPercentage: boolean = true
+
+  @Input()
+  public showProgressBar: boolean = true
+}
diff --git a/frontend/src/app/score-board-preview/components/tutorial-mode-warning/tutorial-mode-warning.component.html b/frontend/src/app/score-board-preview/components/tutorial-mode-warning/tutorial-mode-warning.component.html
new file mode 100644
index 00000000000..075683949ed
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/tutorial-mode-warning/tutorial-mode-warning.component.html
@@ -0,0 +1,6 @@
+<warning-card *ngIf="tutorialModeActive">
+  <mat-icon warning-icon>school</mat-icon>
+  <span warning-text class="tutorial-mode-warning-text">
+    {{ 'INFO_FULL_CHALLENGE_MODE' | translate: {num: allChallenges.length} }}
+  </span>
+</warning-card>
diff --git a/frontend/src/app/score-board-preview/components/tutorial-mode-warning/tutorial-mode-warning.component.spec.ts b/frontend/src/app/score-board-preview/components/tutorial-mode-warning/tutorial-mode-warning.component.spec.ts
new file mode 100644
index 00000000000..0048ba4e8f7
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/tutorial-mode-warning/tutorial-mode-warning.component.spec.ts
@@ -0,0 +1,78 @@
+import { type ComponentFixture, TestBed } from '@angular/core/testing'
+
+import { TutorialModeWarningComponent } from './tutorial-mode-warning.component'
+import { TranslateModule } from '@ngx-translate/core'
+
+describe('TutorialModeWarningComponent', () => {
+  let component: TutorialModeWarningComponent
+  let fixture: ComponentFixture<TutorialModeWarningComponent>
+
+  beforeEach(async () => {
+    await TestBed.configureTestingModule({
+      imports: [TranslateModule.forRoot()],
+      declarations: [TutorialModeWarningComponent]
+    }).compileComponents()
+
+    fixture = TestBed.createComponent(TutorialModeWarningComponent)
+    component = fixture.componentInstance
+
+    component.allChallenges = [
+      {
+        category: 'foobar',
+        name: 'my name',
+        tutorialOrder: 1,
+        solved: false
+      },
+      {
+        category: 'foobar',
+        name: 'my name two',
+        description: 'lorem ipsum',
+        tutorialOrder: null,
+        solved: false
+      }
+    ] as any
+
+    component.applicationConfig = {
+      challenges: {
+        restrictToTutorialsFirst: true
+      }
+    } as any
+
+    fixture.detectChanges()
+  })
+
+  it('should show warning when there are configured and unsolved tutorial challenges exist', () => {
+    component.ngOnChanges()
+    expect(component.tutorialModeActive).toBe(true)
+  })
+
+  it('not show if tutorial is not configured', () => {
+    component.applicationConfig = {
+      challenges: {
+        restrictToTutorialsFirst: false
+      }
+    } as any
+    component.ngOnChanges()
+    expect(component.tutorialModeActive).toBe(false)
+  })
+
+  it('should not show warning when all tutorial mode challenges are solved', () => {
+    component.allChallenges = [
+      {
+        category: 'foobar',
+        name: 'my name',
+        tutorialOrder: 1,
+        solved: true
+      },
+      {
+        category: 'foobar',
+        name: 'my name two',
+        description: 'lorem ipsum',
+        tutorialOrder: null,
+        solved: false
+      }
+    ] as any
+    component.ngOnChanges()
+    expect(component.tutorialModeActive).toBe(false)
+  })
+})
diff --git a/frontend/src/app/score-board-preview/components/tutorial-mode-warning/tutorial-mode-warning.component.ts b/frontend/src/app/score-board-preview/components/tutorial-mode-warning/tutorial-mode-warning.component.ts
new file mode 100644
index 00000000000..f8e124473fc
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/tutorial-mode-warning/tutorial-mode-warning.component.ts
@@ -0,0 +1,30 @@
+import { Component, Input, type OnChanges } from '@angular/core'
+
+import { type EnrichedChallenge } from '../../types/EnrichedChallenge'
+import { type Config } from 'src/app/Services/configuration.service'
+
+@Component({
+  selector: 'tutorial-mode-warning',
+  templateUrl: './tutorial-mode-warning.component.html'
+})
+export class TutorialModeWarningComponent implements OnChanges {
+  @Input()
+  public allChallenges: EnrichedChallenge[]
+
+  @Input()
+  public applicationConfig: Config | null = null
+
+  public tutorialModeActive: boolean | null = null
+
+  ngOnChanges (): void {
+    if (!this.applicationConfig?.challenges?.restrictToTutorialsFirst) {
+      this.tutorialModeActive = false
+      return
+    }
+
+    const allTutorialChallengesSolved = this.allChallenges
+      .filter(challenge => challenge.tutorialOrder !== null)
+      .every(challenge => challenge.solved)
+    this.tutorialModeActive = !allTutorialChallengesSolved
+  }
+}
diff --git a/frontend/src/app/score-board-preview/components/warning-card/warning-card.component.html b/frontend/src/app/score-board-preview/components/warning-card/warning-card.component.html
new file mode 100644
index 00000000000..4135cf0a129
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/warning-card/warning-card.component.html
@@ -0,0 +1,14 @@
+<div
+  class="warning-container"
+>
+  <div class="warning-text-icon-group">
+    <ng-content select="[warning-icon]"></ng-content>
+    <span class="warning-text">
+      <ng-content select="[warning-text]"></ng-content>
+    </span>
+  </div>
+  <div class="warning-action">
+    <ng-content select="[warning-action]"></ng-content>
+  </div>
+</div>
+
diff --git a/frontend/src/app/score-board-preview/components/warning-card/warning-card.component.scss b/frontend/src/app/score-board-preview/components/warning-card/warning-card.component.scss
new file mode 100644
index 00000000000..54fffafec72
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/warning-card/warning-card.component.scss
@@ -0,0 +1,24 @@
+.warning-container {
+  align-items: center;
+  background-color: var(--theme-background-dark);
+  border-radius: 4px;
+  display: grid;
+  grid-template-columns: auto min-content;
+  margin-top: 16px;
+  padding: 12px;
+  @media (max-width: 600px) {
+    grid-template-columns: auto;
+    row-gap: 12px;
+  }
+}
+
+.warning-text {
+  margin-left: 12px;
+  padding-right: 8px;
+}
+
+.warning-text-icon-group {
+  align-items: center;
+  display: grid;
+  grid-template-columns: min-content auto;
+}
diff --git a/frontend/src/app/score-board-preview/components/warning-card/warning-card.component.ts b/frontend/src/app/score-board-preview/components/warning-card/warning-card.component.ts
new file mode 100644
index 00000000000..9ea94ecd68f
--- /dev/null
+++ b/frontend/src/app/score-board-preview/components/warning-card/warning-card.component.ts
@@ -0,0 +1,8 @@
+import { Component } from '@angular/core'
+
+@Component({
+  selector: 'warning-card',
+  templateUrl: './warning-card.component.html',
+  styleUrls: ['./warning-card.component.scss']
+})
+export class WarningCardComponent {}
diff --git a/frontend/src/app/score-board-preview/filter-settings/FilterSetting.ts b/frontend/src/app/score-board-preview/filter-settings/FilterSetting.ts
new file mode 100644
index 00000000000..cdffe298c0c
--- /dev/null
+++ b/frontend/src/app/score-board-preview/filter-settings/FilterSetting.ts
@@ -0,0 +1,34 @@
+export interface FilterSetting {
+  // categories to display. if empty, all categories are displayed
+  categories: string[]
+
+  // difficulties to display. if empty, all difficulties are displayed
+  difficulties: Array<1 | 2 | 3 | 4 | 5 | 6>
+
+  // tags to display. if empty, all tags are displayed
+  tags: string[]
+
+  // status to display. if null, all status are displayed
+  status: SolvedStatus | null
+
+  // search query to search challenge names & descriptions for. if null, all challenges are displayed
+  searchQuery: string | null
+
+  // whether to show disabled challenges
+  showDisabledChallenges: boolean
+
+  // if true only challenges belonging to a tutorial are displayed until the user has solved all tutorial challenges
+  restrictToTutorialChallengesFirst: boolean
+}
+
+export type SolvedStatus = 'solved' | 'unsolved' | 'partially-solved'
+
+export const DEFAULT_FILTER_SETTING: Readonly<FilterSetting> = Object.freeze({
+  categories: [],
+  difficulties: [],
+  tags: [],
+  status: null,
+  searchQuery: null,
+  showDisabledChallenges: true,
+  restrictToTutorialChallengesFirst: false
+})
diff --git a/frontend/src/app/score-board-preview/filter-settings/query-params-converters.ts b/frontend/src/app/score-board-preview/filter-settings/query-params-converters.ts
new file mode 100644
index 00000000000..0ffa1775281
--- /dev/null
+++ b/frontend/src/app/score-board-preview/filter-settings/query-params-converters.ts
@@ -0,0 +1,41 @@
+import type { Params } from '@angular/router'
+
+import { DEFAULT_FILTER_SETTING, type FilterSetting } from './FilterSetting'
+
+export function fromQueryParams (queryParams: Readonly<Params>): FilterSetting {
+  const filterSetting: FilterSetting = { ...structuredClone(DEFAULT_FILTER_SETTING) }
+  if (queryParams.searchQuery) {
+    filterSetting.searchQuery = queryParams.searchQuery
+  }
+  if (queryParams.difficulties) {
+    filterSetting.difficulties = queryParams.difficulties
+      .split(',')
+      .map((difficulty) => parseInt(difficulty, 10))
+      .filter((difficulty) => !isNaN(difficulty))
+  }
+  if (queryParams.tags) {
+    filterSetting.tags = queryParams.tags.split(',')
+  }
+  if (queryParams.status) {
+    filterSetting.status = queryParams.status
+  }
+  if (queryParams.categories) {
+    filterSetting.categories = queryParams.categories.split(',')
+  }
+  if (queryParams.showDisabledChallenges !== undefined) {
+    filterSetting.showDisabledChallenges = queryParams.showDisabledChallenges === 'true'
+  }
+
+  return filterSetting
+}
+
+export function toQueryParams (filterSetting: Readonly<FilterSetting>): Params {
+  return {
+    searchQuery: filterSetting.searchQuery || undefined,
+    difficulties: filterSetting.difficulties.join(',') || undefined,
+    status: filterSetting.status || undefined,
+    tags: filterSetting.tags.join(',') || undefined,
+    categories: filterSetting.categories.join(',') || undefined,
+    showDisabledChallenges: !filterSetting.showDisabledChallenges ? 'false' : undefined
+  }
+}
diff --git a/frontend/src/app/score-board-preview/filter-settings/query-params-coverter.spec.ts b/frontend/src/app/score-board-preview/filter-settings/query-params-coverter.spec.ts
new file mode 100644
index 00000000000..d3e98a8aac1
--- /dev/null
+++ b/frontend/src/app/score-board-preview/filter-settings/query-params-coverter.spec.ts
@@ -0,0 +1,101 @@
+import { DEFAULT_FILTER_SETTING } from './FilterSetting'
+import { fromQueryParams, toQueryParams } from './query-params-converters'
+
+describe('fromQueryParams', () => {
+  it('should convert empty settings to default filters', () => {
+    expect(fromQueryParams({})).toEqual(DEFAULT_FILTER_SETTING)
+  })
+  it('should somewhat filled query params properly', () => {
+    expect(
+      fromQueryParams({
+        searchQuery: 'jwt token',
+        difficulties: '1',
+        status: 'solved',
+        categories: 'Improper Input Validation'
+      })
+    ).toEqual({
+      ...DEFAULT_FILTER_SETTING,
+      searchQuery: 'jwt token',
+      difficulties: [1],
+      status: 'solved',
+      categories: ['Improper Input Validation']
+    })
+  })
+  it('should fully filled query params properly', () => {
+    expect(
+      fromQueryParams({
+        searchQuery: 'jwt token',
+        difficulties: '1,3,5,6',
+        status: 'partially-solved',
+        tags: 'Danger Zone,Good for Demos,Prerequisite',
+        categories: 'Improper Input Validation,Broken Anti Automation',
+        showDisabledChallenges: 'false'
+      })
+    ).toEqual({
+      ...DEFAULT_FILTER_SETTING,
+      searchQuery: 'jwt token',
+      difficulties: [1, 3, 5, 6],
+      status: 'partially-solved',
+      tags: ['Danger Zone', 'Good for Demos', 'Prerequisite'],
+      categories: [
+        'Improper Input Validation',
+        'Broken Anti Automation'
+      ],
+      showDisabledChallenges: false
+    })
+  })
+})
+
+describe('toQueryParams', () => {
+  it('should convert default filterSettings to empty params', () => {
+    expect(
+      toQueryParams(DEFAULT_FILTER_SETTING)
+    ).toEqual({
+      searchQuery: undefined,
+      difficulties: undefined,
+      status: undefined,
+      tags: undefined,
+      categories: undefined,
+      showDisabledChallenges: undefined
+    })
+  })
+  it('should convert somewhat filled filterSettings correctly', () => {
+    expect(
+      toQueryParams({
+        ...DEFAULT_FILTER_SETTING,
+        searchQuery: 'jwt token',
+        difficulties: [1],
+        status: 'solved',
+        categories: ['Improper Input Validation'],
+        showDisabledChallenges: false
+      })
+    ).toEqual({
+      searchQuery: 'jwt token',
+      difficulties: '1',
+      status: 'solved',
+      tags: undefined,
+      categories: 'Improper Input Validation',
+      showDisabledChallenges: 'false'
+    })
+  })
+  it('should convert fully filled filterSettings correctly', () => {
+    expect(
+      toQueryParams({
+        ...DEFAULT_FILTER_SETTING,
+        searchQuery: 'jwt token',
+        difficulties: [1, 3, 5, 6],
+        status: 'partially-solved',
+        tags: ['Danger Zone', 'Good for Demos', 'Prerequisite'],
+        categories: ['Improper Input Validation', 'Broken Anti Automation'],
+        showDisabledChallenges: false
+      })
+    ).toEqual({
+      searchQuery: 'jwt token',
+      difficulties: '1,3,5,6',
+      status: 'partially-solved',
+      tags: 'Danger Zone,Good for Demos,Prerequisite',
+      categories: 'Improper Input Validation,Broken Anti Automation',
+      showDisabledChallenges: 'false'
+    })
+  })
+})
diff --git a/frontend/src/app/score-board-preview/helpers/challenge-filtering.spec.ts b/frontend/src/app/score-board-preview/helpers/challenge-filtering.spec.ts
new file mode 100644
index 00000000000..7cd4dc16919
--- /dev/null
+++ b/frontend/src/app/score-board-preview/helpers/challenge-filtering.spec.ts
@@ -0,0 +1,159 @@
+import { type EnrichedChallenge } from '../types/EnrichedChallenge'
+import { DEFAULT_FILTER_SETTING } from '../filter-settings/FilterSetting'
+import { filterChallenges } from './challenge-filtering'
+
+const CHALLENGE_1 = {
+  category: 'foobar',
+  description: 'lorem ipsum',
+  originalDescription: 'lorem ipsum',
+  difficulty: 1,
+  hasCodingChallenge: true,
+  id: 1,
+  key: 'challenge-1',
+  mitigationUrl: 'https://owasp.example.com',
+  name: 'challenge one',
+  solved: false,
+  codingChallengeStatus: 0,
+  tagList: ['easy'],
+  disabledEnv: null,
+  tutorialOrder: 1
+} as EnrichedChallenge
+
+const CHALLENGE_2 = {
+  category: 'foobar',
+  description: 'lorem ipsum',
+  originalDescription: 'lorem ipsum',
+  difficulty: 3,
+  hasCodingChallenge: true,
+  id: 2,
+  key: 'challenge-2',
+  mitigationUrl: 'https://owasp.example.com',
+  name: 'challenge two',
+  solved: true,
+  codingChallengeStatus: 2,
+  tagList: ['easy'],
+  disabledEnv: null,
+  tutorialOrder: 2
+} as EnrichedChallenge
+
+const CHALLENGE_3 = {
+  category: 'barfoo',
+  description: 'lorem ipsum',
+  originalDescription: 'lorem ipsum',
+  difficulty: 6,
+  hasCodingChallenge: true,
+  id: 3,
+  key: 'challenge-3',
+  mitigationUrl: 'https://owasp.example.com',
+  name: 'challenge three',
+  solved: true,
+  codingChallengeStatus: 1,
+  tagList: ['hard'],
+  disabledEnv: 'docker',
+  tutorialOrder: null
+} as EnrichedChallenge
+
+describe('filterChallenges', () => {
+  it('should filter empty list', () => {
+    expect(filterChallenges([], { ...DEFAULT_FILTER_SETTING })).toEqual([])
+    expect(filterChallenges([], { categories: ['foo', 'bar'], difficulties: [1, 2, 3, 5, 6], tags: ['hard'], status: 'solved', searchQuery: 'foobar', showDisabledChallenges: true, restrictToTutorialChallengesFirst: true })).toEqual([])
+  })
+
+  it('should filter challenges based on categories properly', () => {
+    expect(filterChallenges(
+      [CHALLENGE_1, CHALLENGE_2, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, categories: ['foobar'] }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-1', 'challenge-2']))
+    expect(filterChallenges(
+      [CHALLENGE_1, CHALLENGE_2, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, categories: ['barfoo'] }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-3']))
+  })
+
+  it('should filter challenges based on difficulties properly', () => {
+    expect(filterChallenges(
+      [CHALLENGE_1, CHALLENGE_2, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, difficulties: [1, 6] }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-1', 'challenge-3']))
+    expect(filterChallenges(
+      [CHALLENGE_1, CHALLENGE_2, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, difficulties: [3] }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-2']))
+  })
+
+  it('should filter challenges based on tags properly', () => {
+    expect(filterChallenges(
+      [CHALLENGE_1, CHALLENGE_2, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, tags: ['easy'] }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-1', 'challenge-2']))
+    expect(filterChallenges(
+      [CHALLENGE_1, CHALLENGE_2, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, tags: ['hard'] }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-3']))
+  })
+
+  it('should filter challenges based on status properly', () => {
+    expect(filterChallenges(
+      [CHALLENGE_1, CHALLENGE_2, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, status: 'solved' }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-2']))
+    expect(filterChallenges(
+      [CHALLENGE_1, CHALLENGE_2, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, status: 'unsolved' }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-1']))
+    expect(filterChallenges(
+      [CHALLENGE_1, CHALLENGE_2, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, status: 'partially-solved' }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-3']))
+  })
+
+  it('should filter challenges based on searchQuery properly', () => {
+    expect(filterChallenges(
+      [CHALLENGE_1, CHALLENGE_2, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, searchQuery: 'lorem' }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-1', 'challenge-2', 'challenge-3']))
+    expect(filterChallenges(
+      [CHALLENGE_1, CHALLENGE_2, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, searchQuery: 'challenge three' }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-3']))
+  })
+
+  it('should filter challenges based on disabled setting properly', () => {
+    expect(filterChallenges(
+      [CHALLENGE_1, CHALLENGE_2, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, showDisabledChallenges: true }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-1', 'challenge-2', 'challenge-3']))
+    expect(filterChallenges(
+      [CHALLENGE_1, CHALLENGE_2, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, showDisabledChallenges: false }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-1', 'challenge-2']))
+  })
+
+  it('should only show unsolved tutorial of first difficulty if no challenges are solved', () => {
+    expect(filterChallenges(
+      [CHALLENGE_1, { ...CHALLENGE_2, solved: false }, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, restrictToTutorialChallengesFirst: true }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-1']))
+  })
+
+  it('should only show tutorial challenges when restrictToTutorialChallengesFirst is set', () => {
+    expect(filterChallenges(
+      [CHALLENGE_1, { ...CHALLENGE_2, solved: false, difficulty: 1, tutorialOrder: null }, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, restrictToTutorialChallengesFirst: true }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-1']))
+  })
+
+  it('should only show unsolved tutorial of first difficulty and solved ones of easier difficulties', () => {
+    expect(filterChallenges(
+      [{ ...CHALLENGE_1, solved: true }, { ...CHALLENGE_2, solved: false }, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, restrictToTutorialChallengesFirst: true }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-1', 'challenge-2']))
+  })
+
+  it('should only show ignore tutorial mode when all tutorial challenges are solved', () => {
+    expect(filterChallenges(
+      [{ ...CHALLENGE_1, solved: true }, { ...CHALLENGE_2, solved: true }, CHALLENGE_3],
+      { ...DEFAULT_FILTER_SETTING, restrictToTutorialChallengesFirst: true }
+    ).map((challenge) => challenge.key)).toEqual(jasmine.arrayWithExactContents(['challenge-1', 'challenge-2', 'challenge-3']))
+  })
+})
diff --git a/frontend/src/app/score-board-preview/helpers/challenge-filtering.ts b/frontend/src/app/score-board-preview/helpers/challenge-filtering.ts
new file mode 100644
index 00000000000..8a7585ad9f2
--- /dev/null
+++ b/frontend/src/app/score-board-preview/helpers/challenge-filtering.ts
@@ -0,0 +1,108 @@
+import { type EnrichedChallenge } from '../types/EnrichedChallenge'
+import { type FilterSetting, type SolvedStatus } from '../filter-settings/FilterSetting'
+
+export function filterChallenges (
+  challenges: EnrichedChallenge[],
+  filterSetting: FilterSetting
+): EnrichedChallenge[] {
+  return (
+    challenges
+      // filter by category
+      .filter((challenge) => {
+        if (filterSetting.categories.length === 0) {
+          return true
+        }
+        return filterSetting.categories.includes(challenge.category)
+      })
+      // filter by difficulty
+      .filter((challenge) => {
+        if (filterSetting.difficulties.length === 0) {
+          return true
+        }
+        return filterSetting.difficulties.includes(challenge.difficulty)
+      })
+      // filter by tags
+      .filter((challenge) => {
+        if (filterSetting.tags.length === 0) {
+          return true
+        }
+        return challenge.tagList.some((tag) =>
+          filterSetting.tags.includes(tag)
+        )
+      })
+      // filter by status
+      .filter((challenge) => {
+        if (filterSetting.status === null) {
+          return true
+        }
+        return filterSetting.status === getCompleteChallengeStatus(challenge)
+      })
+      // filter disabled challenges
+      .filter((challenge) => {
+        if (challenge.disabledEnv === null) {
+          return true
+        }
+        return filterSetting.showDisabledChallenges
+      })
+      // filter by search query
+      .filter((challenge) => {
+        if (filterSetting.searchQuery === null) {
+          return true
+        }
+        return (
+          challenge.name
+            .toLowerCase()
+            .includes(filterSetting.searchQuery.toLowerCase()) ||
+          challenge.originalDescription
+            .toLowerCase()
+            .includes(filterSetting.searchQuery.toLowerCase())
+        )
+      })
+      // filter by tutorial challenges
+      .filter((challenge) => {
+        if (!filterSetting.restrictToTutorialChallengesFirst) {
+          return true
+        }
+
+        const tutorialChallenges = challenges.filter(
+          (challenge) => challenge.tutorialOrder !== null
+        )
+        const allTutorialChallengesSolved = tutorialChallenges.every((challenge) => challenge.solved)
+
+        if (allTutorialChallengesSolved) {
+          return true
+        } else if (!allTutorialChallengesSolved && challenge.tutorialOrder === null) {
+          // there are still unsolved tutorial challenges, but this challenge is not a tutorial challenge so we don't want to show it
+          return false
+        }
+
+        // find --include difficulty of unsolved tutorial challenges, we only want to show ones matching it or easier
+        const difficultiesOfUnsolvedTutorialChallenges = tutorialChallenges
+          .filter((challenge) => !challenge.solved)
+          .map((challenge) => challenge.difficulty)
+        const easiestDifficultyOfUnsolvedTutorialChallenges = Math.min(...difficultiesOfUnsolvedTutorialChallenges)
+
+        if (challenge.difficulty <= easiestDifficultyOfUnsolvedTutorialChallenges) {
+          return true
+        }
+        return false
+      })
+  )
+}
+
+function getCompleteChallengeStatus (
+  challenge: EnrichedChallenge
+): SolvedStatus {
+  if (!challenge.solved) {
+    return 'unsolved'
+  }
+
+  if (!challenge.hasCodingChallenge) {
+    return challenge.solved ? 'solved' : 'unsolved'
+  } else {
+    if (challenge.codingChallengeStatus === 2) {
+      return 'solved'
+    }
+    return 'partially-solved'
+  }
+}
diff --git a/frontend/src/app/score-board-preview/helpers/challenge-sorting.spec.ts b/frontend/src/app/score-board-preview/helpers/challenge-sorting.spec.ts
new file mode 100644
index 00000000000..13c9a96ca4f
--- /dev/null
+++ b/frontend/src/app/score-board-preview/helpers/challenge-sorting.spec.ts
@@ -0,0 +1,79 @@
+import { type EnrichedChallenge } from '../types/EnrichedChallenge'
+import { sortChallenges } from './challenge-sorting'
+
+const CHALLENGE_1 = {
+  category: 'foobar',
+  description: 'lorem ipsum',
+  originalDescription: 'lorem ipsum',
+  difficulty: 1,
+  hasCodingChallenge: true,
+  id: 1,
+  key: 'challenge-1',
+  mitigationUrl: 'https://owasp.example.com',
+  name: 'challenge one',
+  solved: false,
+  codingChallengeStatus: 0,
+  tagList: ['easy'],
+  disabledEnv: null,
+  tutorialOrder: 1
+} as EnrichedChallenge
+
+const CHALLENGE_2 = {
+  category: 'foobar',
+  description: 'lorem ipsum',
+  originalDescription: 'lorem ipsum',
+  difficulty: 1,
+  hasCodingChallenge: true,
+  id: 2,
+  key: 'challenge-2',
+  mitigationUrl: 'https://owasp.example.com',
+  name: 'challenge two',
+  solved: true,
+  codingChallengeStatus: 2,
+  tagList: ['easy'],
+  disabledEnv: null,
+  tutorialOrder: 2
+} as EnrichedChallenge
+
+const CHALLENGE_3 = {
+  category: 'barfoo',
+  description: 'lorem ipsum',
+  originalDescription: 'lorem ipsum',
+  difficulty: 6,
+  hasCodingChallenge: true,
+  id: 3,
+  key: 'challenge-3',
+  mitigationUrl: 'https://owasp.example.com',
+  name: 'challenge three',
+  solved: true,
+  codingChallengeStatus: 1,
+  tagList: ['hard'],
+  disabledEnv: 'docker',
+  tutorialOrder: null
+} as EnrichedChallenge
+
+describe('sortChallenges', () => {
+  it('sort tutorial challenges correctly', () => {
+    expect(sortChallenges([CHALLENGE_1, CHALLENGE_2]).map(challenge => challenge.key)).toEqual(['challenge-1', 'challenge-2'])
+    expect(sortChallenges([CHALLENGE_2, CHALLENGE_1]).map(challenge => challenge.key)).toEqual(['challenge-1', 'challenge-2'])
+    for (const challengeOrderingCombination of [
+      [CHALLENGE_1, CHALLENGE_2],
+      [CHALLENGE_2, CHALLENGE_1]
+    ]) {
+      expect(sortChallenges(challengeOrderingCombination).map(challenge => challenge.key)).toEqual(['challenge-1', 'challenge-2'])
+    }
+  })
+
+  it('sort non tutorial challenges by difficulty while still maintaining tutorial order for challenges with tutorials', () => {
+    for (const challengeOrderingCombination of [
+      [CHALLENGE_1, CHALLENGE_2, CHALLENGE_3],
+      [CHALLENGE_1, CHALLENGE_3, CHALLENGE_2],
+      [CHALLENGE_2, CHALLENGE_1, CHALLENGE_3],
+      [CHALLENGE_2, CHALLENGE_3, CHALLENGE_1],
+      [CHALLENGE_3, CHALLENGE_1, CHALLENGE_2],
+      [CHALLENGE_3, CHALLENGE_2, CHALLENGE_1]
+    ]) {
+      expect(sortChallenges(challengeOrderingCombination).map(challenge => challenge.key)).toEqual(['challenge-1', 'challenge-2', 'challenge-3'])
+    }
+  })
+})
diff --git a/frontend/src/app/score-board-preview/helpers/challenge-sorting.ts b/frontend/src/app/score-board-preview/helpers/challenge-sorting.ts
new file mode 100644
index 00000000000..737500cc57c
--- /dev/null
+++ b/frontend/src/app/score-board-preview/helpers/challenge-sorting.ts
@@ -0,0 +1,9 @@
+import { type EnrichedChallenge } from '../types/EnrichedChallenge'
+
+import sortBy from 'lodash-es/sortBy'
+
+export function sortChallenges (
+  challenges: EnrichedChallenge[]
+): EnrichedChallenge[] {
+  return sortBy(challenges, ['difficulty', 'tutorialOrder', 'name'])
+}
diff --git a/frontend/src/app/score-board-preview/pipes/challenge-hint.pipe.ts b/frontend/src/app/score-board-preview/pipes/challenge-hint.pipe.ts
new file mode 100644
index 00000000000..289de72ce9c
--- /dev/null
+++ b/frontend/src/app/score-board-preview/pipes/challenge-hint.pipe.ts
@@ -0,0 +1,20 @@
+import { TranslateService } from '@ngx-translate/core'
+import { Pipe, type PipeTransform } from '@angular/core'
+import { type Observable, of } from 'rxjs'
+import { map } from 'rxjs/operators'
+
+interface ChallengeHintPipeArgs {
+  hintUrl: string | null
+}
+
+@Pipe({ name: 'challengeHint', pure: false })
+export class ChallengeHintPipe implements PipeTransform {
+  constructor (private readonly translate: TranslateService) { }
+
+  transform (hint: string, args: ChallengeHintPipeArgs = { hintUrl: null }): Observable<string> {
+    if (args.hintUrl) {
+      return this.translate.get('CLICK_FOR_MORE_HINTS').pipe(map((translation) => `${hint} ${translation as string}`))
+    }
+    return of(hint)
+  }
+}
diff --git a/frontend/src/app/score-board-preview/score-board-preview.component.html b/frontend/src/app/score-board-preview/score-board-preview.component.html
new file mode 100644
index 00000000000..f5e9dd53845
--- /dev/null
+++ b/frontend/src/app/score-board-preview/score-board-preview.component.html
@@ -0,0 +1,54 @@
+<div class="score-row">
+  <hacking-challenge-progress-score-card [allChallenges]="allChallenges" />
+  <coding-challenge-progress-score-card [allChallenges]="allChallenges" />
+  <difficulty-overview-score-card [allChallenges]="allChallenges" />
+</div>
+
+<filter-settings
+  *ngIf="applicationConfiguration?.challenges.restrictToTutorialsFirst === false"
+  [filterSetting]="filterSetting"
+  (filterSettingChange)="onFilterSettingUpdate($event)"
+  [allChallenges]="allChallenges"
+  [reset]="reset.bind(this)"
+></filter-settings>
+
+<preview-feature-notice [applicationConfig]="applicationConfiguration"></preview-feature-notice>
+
+<div *ngIf="isInitialized === false" class="loading-spinner-wrapper">
+  <mat-spinner></mat-spinner>
+</div>
+
+<ng-container *ngIf="isInitialized === true">
+  <challenges-unavailable-warning
+    [challenges]="allChallenges"
+    [filterSetting]="filterSetting"
+    (filterSettingChange)="onFilterSettingUpdate($event)"
+  ></challenges-unavailable-warning>
+
+  <tutorial-mode-warning 
+    [allChallenges]="allChallenges" 
+    [applicationConfig]="applicationConfiguration"
+  ></tutorial-mode-warning>
+
+  <div class="challenges" *ngIf="filteredChallenges.length > 0; else emptyChallenges">
+    <challenge-card
+      *ngFor="let challenge of filteredChallenges; trackBy:getChallengeKey"
+      [challenge]="challenge"
+      [applicationConfiguration]="applicationConfiguration"
+      [openCodingChallengeDialog]="openCodingChallengeDialog.bind(this)"
+      [repeatChallengeNotification]="repeatChallengeNotification.bind(this)"
+      [ngClass]="{ solved: challenge.solved, unsolved: !challenge.solved, disabled: challenge.disabledEnv !== null }"
+    />
+  </div>
+
+  <ng-template #emptyChallenges>
+    <!-- only showing when there are more than 1 challenge in total. not completely loaded otherwise -->
+    <div class="empty-challenges" *ngIf="allChallenges.length > 0">
+      <p>{{ 'NO_CHALLENGES_FOUND' | translate }}</p>
+    </div>
+  </ng-template>
+
+  <img src="assets/public/images/padding/1px.png"/>
+
+</ng-container>
+
diff --git a/frontend/src/app/score-board-preview/score-board-preview.component.scss b/frontend/src/app/score-board-preview/score-board-preview.component.scss
new file mode 100644
index 00000000000..b4dc3a10c3c
--- /dev/null
+++ b/frontend/src/app/score-board-preview/score-board-preview.component.scss
@@ -0,0 +1,76 @@
+:host {
+  display: block;
+  margin: 48px 72px;
+
+  @media (max-width: 1500px) {
+    margin: 48px 64px;
+  }
+  @media (max-width: 900px) {
+    margin: 48px;
+  }
+  @media (max-width: 600px) {
+    margin: 32px 16px;
+  }
+}
+
+.score-row {
+  column-gap: 16px;
+  display: grid;
+  grid-template-columns: repeat(3, 1fr);
+  min-height: 120px;
+  row-gap: 8px;
+
+  // use 3 columns on large(ish) screens
+  @media (max-width: 1500px) {
+    grid-template-columns: repeat(3, 1fr);
+  }
+  // use 2 columns ipads and smaller
+  @media (max-width: 900px) {
+    grid-template-columns: repeat(2, 1fr);
+  }
+  // use 1 column on extra small screens
+  @media (max-width: 600px) {
+    grid-template-columns: repeat(1, 1fr);
+  }
+}
+
+.challenges {
+  column-gap: 16px;
+  display: grid;
+  grid-template-columns: repeat(4, 1fr);
+
+  margin-top: 32px;
+  row-gap: 12px;
+
+  // use 3 columns on large(ish) screens
+  @media (max-width: 1500px) {
+    grid-template-columns: repeat(3, 1fr);
+  }
+  // use 2 columns ipads and smaller
+  @media (max-width: 900px) {
+    grid-template-columns: repeat(2, 1fr);
+  }
+  // use 1 column on extra small screens
+  @media (max-width: 600px) {
+    grid-template-columns: repeat(1, 1fr);
+  }
+}
+
+.empty-challenges {
+  align-items: center;
+  display: flex;
+  flex-direction: column;
+  justify-content: center;
+
+  margin: 0 32px;
+
+  min-height: 20vh;
+}
+
+.loading-spinner-wrapper {
+  align-items: center;
+  display: flex;
+  justify-content: center;
+  padding: 64px;
+  width: 100%;
+}
diff --git a/frontend/src/app/score-board-preview/score-board-preview.component.spec.ts b/frontend/src/app/score-board-preview/score-board-preview.component.spec.ts
new file mode 100644
index 00000000000..c785a59192f
--- /dev/null
+++ b/frontend/src/app/score-board-preview/score-board-preview.component.spec.ts
@@ -0,0 +1,205 @@
+import { MatProgressSpinnerModule } from '@angular/material/progress-spinner'
+import { HttpClientTestingModule } from '@angular/common/http/testing'
+import { type ComponentFixture, TestBed } from '@angular/core/testing'
+import { RouterTestingModule } from '@angular/router/testing'
+import { MatDialogModule } from '@angular/material/dialog'
+import { MatIconModule } from '@angular/material/icon'
+import { TranslateModule } from '@ngx-translate/core'
+import { of } from 'rxjs'
+
+import { HackingChallengeProgressScoreCardComponent } from './components/hacking-challenge-progress-score-card/hacking-challenge-progress-score-card.component'
+import { CodingChallengeProgressScoreCardComponent } from './components/coding-challenge-progress-score-card/coding-challenge-progress-score-card.component'
+import { ChallengesUnavailableWarningComponent } from './components/challenges-unavailable-warning/challenges-unavailable-warning.component'
+import { DifficultyOverviewScoreCardComponent } from './components/difficulty-overview-score-card/difficulty-overview-score-card.component'
+import { PreviewFeatureNoticeComponent } from './components/preview-feature-notice/preview-feature-notice.component'
+import { TutorialModeWarningComponent } from './components/tutorial-mode-warning/tutorial-mode-warning.component'
+import { WarningCardComponent } from './components/warning-card/warning-card.component'
+import { ScoreCardComponent } from './components/score-card/score-card.component'
+import { ScoreBoardPreviewComponent } from './score-board-preview.component'
+import { ConfigurationService } from '../Services/configuration.service'
+import { CodeSnippetService } from '../Services/code-snippet.service'
+import { ChallengeService } from '../Services/challenge.service'
+import { type Challenge } from '../Models/challenge.model'
+
+// allows to easily create a challenge with some overwrites
+function createChallenge (challengeOverwrites: Partial<Challenge>): Challenge {
+  return {
+    name: 'foobar',
+    key: 'challenge-1',
+    category: 'category-blue',
+    difficulty: 3,
+    description: '',
+    hint: '',
+    tags: '',
+    hintUrl: '',
+    disabledEnv: null,
+    solved: false,
+    tutorialOrder: null,
+    hasTutorial: false,
+    hasSnippet: false,
+    codingChallengeStatus: 0,
+    mitigationUrl: '',
+    ...challengeOverwrites
+  }
+}
+
+describe('ScoreBoardPreviewComponent', () => {
+  let component: ScoreBoardPreviewComponent
+  let fixture: ComponentFixture<ScoreBoardPreviewComponent>
+  let challengeService
+  let codeSnippetService
+  let configService
+
+  beforeEach(async () => {
+    challengeService = jasmine.createSpyObj('ChallengeService', ['find'])
+    codeSnippetService = jasmine.createSpyObj('CodeSnippetService', [
+      'challenges'
+    ])
+    configService = jasmine.createSpyObj('ConfigurationService', [
+      'getApplicationConfiguration'
+    ])
+    await TestBed.configureTestingModule({
+      declarations: [
+        ScoreBoardPreviewComponent,
+        HackingChallengeProgressScoreCardComponent,
+        CodingChallengeProgressScoreCardComponent,
+        DifficultyOverviewScoreCardComponent,
+        WarningCardComponent,
+        PreviewFeatureNoticeComponent,
+        ChallengesUnavailableWarningComponent,
+        TutorialModeWarningComponent,
+        ScoreCardComponent
+      ],
+      imports: [
+        TranslateModule.forRoot(),
+        HttpClientTestingModule,
+        RouterTestingModule,
+        MatProgressSpinnerModule,
+        MatDialogModule,
+        MatIconModule
+      ],
+      providers: [
+        { provide: ChallengeService, useValue: challengeService },
+        { provide: CodeSnippetService, useValue: codeSnippetService },
+        { provide: ConfigurationService, useValue: configService }
+      ]
+    }).compileComponents()
+
+    challengeService.find.and.returnValue(
+      of([
+        createChallenge({
+          name: 'Challenge 1',
+          key: 'challenge-1',
+          category: 'category-blue',
+          difficulty: 1,
+          solved: true
+        }),
+        createChallenge({
+          name: 'Challenge 2',
+          key: 'challenge-2',
+          category: 'category-blue',
+          difficulty: 5,
+          solved: false,
+          hasSnippet: true,
+          codingChallengeStatus: 1
+        }),
+        createChallenge({
+          name: 'Challenge 3',
+          key: 'challenge-3',
+          category: 'category-red',
+          difficulty: 3,
+          hasSnippet: true,
+          solved: false
+        })
+      ])
+    )
+    codeSnippetService.challenges.and.returnValue(of(['challenge-2']))
+    configService.getApplicationConfiguration.and.returnValue(
+      of({
+        challenges: {
+          restrictToTutorialsFirst: false,
+          codingChallengesEnabled: true,
+          showHints: true,
+          showMitigations: true
+        }
+      })
+    )
+
+    fixture = TestBed.createComponent(ScoreBoardPreviewComponent)
+    component = fixture.componentInstance
+    fixture.detectChanges()
+  })
+
+  it('should not filter any challenges on default settings', (): void => {
+    expect(component.filteredChallenges).toHaveSize(3)
+  })
+
+  it('should properly identify that a challenge has a associated coding challenge', (): void => {
+    expect(
+      component.filteredChallenges.find(
+        (challenge) => challenge.key === 'challenge-2'
+      ).hasCodingChallenge
+    ).toBe(true)
+  })
+
+  it('should mark challenges as solved on "challenge solved" websocket', (): void => {
+    expect(
+      component.filteredChallenges.find(
+        (challenge) => challenge.key === 'challenge-3'
+      ).solved
+    ).toBeFalse()
+
+    component.onChallengeSolvedWebsocket({
+      key: 'challenge-3',
+      name: '',
+      challenge: '',
+      flag: '',
+      hidden: false,
+      isRestore: false
+    })
+
+    expect(
+      component.filteredChallenges.find(
+        (challenge) => challenge.key === 'challenge-3'
+      ).solved
+    ).toBeTrue()
+  })
+
+  it('should mark find it code challenges as solved on "code challenge solved" websocket', (): void => {
+    expect(
+      component.filteredChallenges.find(
+        (challenge) => challenge.key === 'challenge-3'
+      ).codingChallengeStatus
+    ).toBe(0)
+
+    component.onCodeChallengeSolvedWebsocket({
+      key: 'challenge-3',
+      codingChallengeStatus: 1
+    })
+
+    expect(
+      component.filteredChallenges.find(
+        (challenge) => challenge.key === 'challenge-3'
+      ).codingChallengeStatus
+    ).toBe(1)
+  })
+
+  it('should mark fix it code challenges as solved on "code challenge solved" websocket', (): void => {
+    expect(
+      component.filteredChallenges.find(
+        (challenge) => challenge.key === 'challenge-2'
+      ).codingChallengeStatus
+    ).toBe(1)
+
+    component.onCodeChallengeSolvedWebsocket({
+      key: 'challenge-2',
+      codingChallengeStatus: 2
+    })
+
+    expect(
+      component.filteredChallenges.find(
+        (challenge) => challenge.key === 'challenge-2'
+      ).codingChallengeStatus
+    ).toBe(2)
+  })
+})
diff --git a/frontend/src/app/score-board-preview/score-board-preview.component.ts b/frontend/src/app/score-board-preview/score-board-preview.component.ts
new file mode 100644
index 00000000000..4e74c75bd35
--- /dev/null
+++ b/frontend/src/app/score-board-preview/score-board-preview.component.ts
@@ -0,0 +1,182 @@
+import { Component, NgZone, type OnDestroy, type OnInit } from '@angular/core'
+import { ActivatedRoute, Router } from '@angular/router'
+import { DomSanitizer } from '@angular/platform-browser'
+import { MatDialog } from '@angular/material/dialog'
+import { type Subscription, combineLatest } from 'rxjs'
+
+import { fromQueryParams, toQueryParams } from './filter-settings/query-params-converters'
+import { DEFAULT_FILTER_SETTING, type FilterSetting } from './filter-settings/FilterSetting'
+import { type Config, ConfigurationService } from '../Services/configuration.service'
+import { CodeSnippetComponent } from '../code-snippet/code-snippet.component'
+import { CodeSnippetService } from '../Services/code-snippet.service'
+import { ChallengeService } from '../Services/challenge.service'
+import { filterChallenges } from './helpers/challenge-filtering'
+import { SocketIoService } from '../Services/socket-io.service'
+import { type EnrichedChallenge } from './types/EnrichedChallenge'
+import { sortChallenges } from './helpers/challenge-sorting'
+
+interface ChallengeSolvedWebsocket {
+  key: string
+  name: string
+  challenge: string
+  flag: string
+  hidden: boolean
+  isRestore: boolean
+}
+interface CodeChallengeSolvedWebsocket {
+  key: string
+  codingChallengeStatus: 0 | 1 | 2
+}
+
+@Component({
+  selector: 'score-board-preview',
+  templateUrl: './score-board-preview.component.html',
+  styleUrls: ['./score-board-preview.component.scss']
+})
+export class ScoreBoardPreviewComponent implements OnInit, OnDestroy {
+  public allChallenges: EnrichedChallenge[] = []
+  public filteredChallenges: EnrichedChallenge[] = []
+  public filterSetting: FilterSetting = structuredClone(DEFAULT_FILTER_SETTING)
+  public applicationConfiguration: Config | null = null
+
+  public isInitialized: boolean = false
+
+  private readonly subscriptions: Subscription[] = []
+
+  constructor (
+    private readonly challengeService: ChallengeService,
+    private readonly codeSnippetService: CodeSnippetService,
+    private readonly configurationService: ConfigurationService,
+    private readonly sanitizer: DomSanitizer,
+    private readonly ngZone: NgZone,
+    private readonly io: SocketIoService,
+    private readonly dialog: MatDialog,
+    private readonly router: Router,
+    private readonly route: ActivatedRoute
+  ) { }
+
+  ngOnInit () {
+    const dataLoaderSubscription = combineLatest([
+      this.challengeService.find({ sort: 'name' }),
+      this.codeSnippetService.challenges(),
+      this.configurationService.getApplicationConfiguration()
+    ]).subscribe(([challenges, challengeKeysWithCodeChallenges, applicationConfiguration]) => {
+      this.applicationConfiguration = applicationConfiguration
+
+      const transformedChallenges = challenges.map((challenge) => {
+        return {
+          ...challenge,
+          tagList: challenge.tags ? challenge.tags.split(',').map((tag) => tag.trim()) : [],
+          originalDescription: challenge.description as string,
+          description: this.sanitizer.bypassSecurityTrustHtml(challenge.description as string),
+          hasCodingChallenge: challengeKeysWithCodeChallenges.includes(challenge.key)
+        }
+      })
+      this.allChallenges = transformedChallenges
+      this.filterAndUpdateChallenges()
+      this.isInitialized = true
+    })
+    this.subscriptions.push(dataLoaderSubscription)
+
+    const routerSubscription = this.route.queryParams.subscribe((queryParams) => {
+      this.filterSetting = fromQueryParams(queryParams)
+      this.filterAndUpdateChallenges()
+    })
+    this.subscriptions.push(routerSubscription)
+
+    this.io.socket().on('challenge solved', this.onChallengeSolvedWebsocket.bind(this))
+    this.io.socket().on('code challenge solved', this.onCodeChallengeSolvedWebsocket.bind(this))
+  }
+
+  ngOnDestroy (): void {
+    this.io.socket().off('challenge solved', this.onChallengeSolvedWebsocket.bind(this))
+    this.io.socket().off('code challenge solved', this.onCodeChallengeSolvedWebsocket.bind(this))
+    for (const subscription of this.subscriptions) {
+      subscription.unsubscribe()
+    }
+  }
+
+  onFilterSettingUpdate (filterSetting: FilterSetting) {
+    this.router.navigate([], {
+      queryParams: toQueryParams(filterSetting)
+    })
+  }
+
+  onChallengeSolvedWebsocket (data?: ChallengeSolvedWebsocket) {
+    if (!data) {
+      return
+    }
+
+    this.allChallenges = this.allChallenges.map((challenge) => {
+      if (challenge.key === data.key) {
+        return {
+          ...challenge,
+          solved: true
+        }
+      }
+      return { ...challenge }
+    })
+    this.filterAndUpdateChallenges()
+    // manually trigger angular change detection... :(
+    // unclear why this is necessary, possibly because the socket.io callback is not running inside angular
+    this.ngZone.run(() => {})
+  }
+
+  onCodeChallengeSolvedWebsocket (data?: CodeChallengeSolvedWebsocket) {
+    if (!data) {
+      return
+    }
+
+    this.allChallenges = this.allChallenges.map((challenge) => {
+      if (challenge.key === data.key) {
+        return {
+          ...challenge,
+          codingChallengeStatus: data.codingChallengeStatus
+        }
+      }
+      return { ...challenge }
+    })
+    this.filterAndUpdateChallenges()
+    // manually trigger angular change detection... :(
+    // unclear why this is necessary, possibly because the socket.io callback is not running inside angular
+    this.ngZone.run(() => {})
+  }
+
+  filterAndUpdateChallenges (): void {
+    this.filteredChallenges = sortChallenges(
+      filterChallenges(this.allChallenges, {
+        ...this.filterSetting,
+        restrictToTutorialChallengesFirst: this.applicationConfiguration?.challenges?.restrictToTutorialsFirst ?? true
+      })
+    )
+  }
+
+  // angular helper to speed up challenge rendering
+  getChallengeKey (index: number, challenge: EnrichedChallenge): string {
+    return challenge.key
+  }
+
+  reset () {
+    this.router.navigate([], {
+      queryParams: toQueryParams(DEFAULT_FILTER_SETTING)
+    })
+  }
+
+  openCodingChallengeDialog (challengeKey: string) {
+    const challenge = this.allChallenges.find((challenge) => challenge.key === challengeKey)
+
+    this.dialog.open(CodeSnippetComponent, {
+      disableClose: true,
+      data: {
+        key: challengeKey,
+        name: challenge.name,
+        codingChallengeStatus: challenge.codingChallengeStatus
+      }
+    })
+  }
+
+  async repeatChallengeNotification (challengeKey: string) {
+    const challenge = this.allChallenges.find((challenge) => challenge.key === challengeKey)
+    await this.challengeService.repeatNotification(encodeURIComponent(challenge.name)).toPromise()
+  }
+}
diff --git a/frontend/src/app/score-board-preview/score-board-preview.module.ts b/frontend/src/app/score-board-preview/score-board-preview.module.ts
new file mode 100644
index 00000000000..27fcb24145b
--- /dev/null
+++ b/frontend/src/app/score-board-preview/score-board-preview.module.ts
@@ -0,0 +1,73 @@
+import { NgModule } from '@angular/core'
+import { CommonModule } from '@angular/common'
+import { RouterModule } from '@angular/router'
+import { TranslateModule } from '@ngx-translate/core'
+import { MatIconModule } from '@angular/material/icon'
+import { MatInputModule } from '@angular/material/input'
+import { MatRadioModule } from '@angular/material/radio'
+import { MatSelectModule } from '@angular/material/select'
+import { MatButtonModule } from '@angular/material/button'
+import { MatDialogModule } from '@angular/material/dialog'
+import { MatTooltipModule } from '@angular/material/tooltip'
+import { MatFormFieldModule } from '@angular/material/form-field'
+import { FormsModule, ReactiveFormsModule } from '@angular/forms'
+import { MatProgressSpinnerModule } from '@angular/material/progress-spinner'
+
+import { ScoreBoardPreviewComponent } from './score-board-preview.component'
+import { ScoreCardComponent } from './components/score-card/score-card.component'
+import { WarningCardComponent } from './components/warning-card/warning-card.component'
+import { ChallengeCardComponent } from './components/challenge-card/challenge-card.component'
+import { FilterSettingsComponent } from './components/filter-settings/filter-settings.component'
+import { DifficultyStarsComponent } from './components/difficulty-stars/difficulty-stars.component'
+import { TutorialModeWarningComponent } from './components/tutorial-mode-warning/tutorial-mode-warning.component'
+import { PreviewFeatureNoticeComponent } from './components/preview-feature-notice/preview-feature-notice.component'
+import { CategoryFilterComponent } from './components/filter-settings/components/category-filter/category-filter.component'
+import { DifficultyOverviewScoreCardComponent } from './components/difficulty-overview-score-card/difficulty-overview-score-card.component'
+import { ChallengesUnavailableWarningComponent } from './components/challenges-unavailable-warning/challenges-unavailable-warning.component'
+import { CodingChallengeProgressScoreCardComponent } from './components/coding-challenge-progress-score-card/coding-challenge-progress-score-card.component'
+import { HackingChallengeProgressScoreCardComponent } from './components/hacking-challenge-progress-score-card/hacking-challenge-progress-score-card.component'
+import { ScoreBoardAdditionalSettingsDialogComponent } from './components/filter-settings/components/score-board-additional-settings-dialog/score-board-additional-settings-dialog.component'
+
+import { ChallengeHintPipe } from './pipes/challenge-hint.pipe'
+import { DifficultySelectionSummaryPipe } from './components/filter-settings/pipes/difficulty-selection-summary.pipe'
+
+@NgModule({
+  declarations: [
+    CategoryFilterComponent,
+    ChallengeCardComponent,
+    ChallengeHintPipe,
+    ChallengesUnavailableWarningComponent,
+    CodingChallengeProgressScoreCardComponent,
+    DifficultyOverviewScoreCardComponent,
+    FilterSettingsComponent,
+    HackingChallengeProgressScoreCardComponent,
+    PreviewFeatureNoticeComponent,
+    ScoreBoardAdditionalSettingsDialogComponent,
+    ScoreBoardPreviewComponent,
+    ScoreCardComponent,
+    TutorialModeWarningComponent,
+    WarningCardComponent,
+    DifficultySelectionSummaryPipe,
+    DifficultyStarsComponent
+  ],
+  imports: [
+    CommonModule,
+    FormsModule,
+    MatButtonModule,
+    MatDialogModule,
+    MatFormFieldModule,
+    MatFormFieldModule,
+    MatIconModule,
+    MatInputModule,
+    MatSelectModule,
+    MatTooltipModule,
+    MatRadioModule,
+    ReactiveFormsModule,
+    RouterModule,
+    TranslateModule,
+    MatProgressSpinnerModule
+  ]
+})
+class ScoreBoardPreviewModule {}
+
+export { ScoreBoardPreviewModule }
diff --git a/frontend/src/app/score-board-preview/types/EnrichedChallenge.ts b/frontend/src/app/score-board-preview/types/EnrichedChallenge.ts
new file mode 100644
index 00000000000..cf643befd6b
--- /dev/null
+++ b/frontend/src/app/score-board-preview/types/EnrichedChallenge.ts
@@ -0,0 +1,7 @@
+import { type Challenge } from '../../Models/challenge.model'
+
+export interface EnrichedChallenge extends Challenge {
+  originalDescription: string
+  tagList: string[]
+  hasCodingChallenge: boolean
+}
diff --git a/frontend/src/app/score-board/score-board.component.html b/frontend/src/app/score-board/score-board.component.html
index 86be669b413..d6e12569e6f 100644
--- a/frontend/src/app/score-board/score-board.component.html
+++ b/frontend/src/app/score-board/score-board.component.html
@@ -107,6 +107,13 @@
 
   </mat-card>
 
+  <div class="score-board-preview-ad">
+    {{ 'SCORE_BOARD_PREVIEW_CATCH_LINE' | translate }}
+    <a mat-button routerLink="/score-board-preview">
+      {{ 'SCORE_BOARD_PREVIEW_ACTION_BUTTON' | translate }}
+    </a>
+  </div>
+
   <mat-card>
     <mat-table *ngIf="challenges" [dataSource]="filterToDataSource(challenges)" [trackBy]="trackById">
 
diff --git a/frontend/src/app/score-board/score-board.component.scss b/frontend/src/app/score-board/score-board.component.scss
index a8afe2a53fe..75f3c702aa5 100644
--- a/frontend/src/app/score-board/score-board.component.scss
+++ b/frontend/src/app/score-board/score-board.component.scss
@@ -84,3 +84,15 @@ mat-table {
   margin-left: 15px;
 }
 
+.score-board-preview-ad {
+  align-items: center;
+  display: flex;
+  justify-content: center;
+  margin-bottom: 16px;
+
+  margin-top: -16px;
+
+  a {
+    margin-left: 8px;
+  }
+}
diff --git a/frontend/src/app/score-board/score-board.component.spec.ts b/frontend/src/app/score-board/score-board.component.spec.ts
index bc8e1c59e76..3c05f3de2fa 100644
--- a/frontend/src/app/score-board/score-board.component.spec.ts
+++ b/frontend/src/app/score-board/score-board.component.spec.ts
@@ -19,7 +19,7 @@ import { MatTooltipModule } from '@angular/material/tooltip'
 import { MatButtonToggleModule } from '@angular/material/button-toggle'
 import { MatIconModule } from '@angular/material/icon'
 import { NgxSpinnerModule } from 'ngx-spinner'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { ScoreBoardComponent } from './score-board.component'
 import { of, throwError } from 'rxjs'
 import { DomSanitizer } from '@angular/platform-browser'
@@ -33,7 +33,7 @@ import { CodeSnippetService } from '../Services/code-snippet.service'
 import { LocalBackupService } from '../Services/local-backup.service'
 import { ActivatedRoute, RouterModule } from '@angular/router'
 class MockSocket {
-  on (str: string, callback: Function) {
+  on (str: string, callback: any) {
     callback(str)
   }
 }
@@ -100,13 +100,13 @@ describe('ScoreBoardComponent', () => {
         { provide: LocalBackupService, useValue: localBackupService },
         { provide: SocketIoService, useValue: socketIoService },
         {
- provide: ActivatedRoute,
-useValue: {
- snapshot: {
-          queryParams: { challenge: 'value' }
+          provide: ActivatedRoute,
+          useValue: {
+            snapshot: {
+              queryParams: { challenge: 'value' }
+            }
+          }
         }
-}
-}
       ]
     })
       .compileComponents()
diff --git a/frontend/src/app/score-board/score-board.component.ts b/frontend/src/app/score-board/score-board.component.ts
index c7983b77981..76815ce189f 100644
--- a/frontend/src/app/score-board/score-board.component.ts
+++ b/frontend/src/app/score-board/score-board.component.ts
@@ -7,16 +7,16 @@ import { MatTableDataSource } from '@angular/material/table'
 import { DomSanitizer } from '@angular/platform-browser'
 import { ChallengeService } from '../Services/challenge.service'
 import { ConfigurationService } from '../Services/configuration.service'
-import { AfterViewInit, Component, NgZone, OnInit } from '@angular/core'
+import { type AfterViewInit, Component, NgZone, type OnInit } from '@angular/core'
 import { SocketIoService } from '../Services/socket-io.service'
 import { NgxSpinnerService } from 'ngx-spinner'
 import { ActivatedRoute } from '@angular/router'
 
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faStar, faTrophy, faPollH } from '@fortawesome/free-solid-svg-icons'
 import { faGem } from '@fortawesome/free-regular-svg-icons'
 import { faBtc, faGithub, faGitter } from '@fortawesome/free-brands-svg-icons'
-import { Challenge } from '../Models/challenge.model'
+import { type Challenge } from '../Models/challenge.model'
 import { TranslateService } from '@ngx-translate/core'
 import { LocalBackupService } from '../Services/local-backup.service'
 import { MatDialog } from '@angular/material/dialog'
@@ -24,7 +24,6 @@ import { CodeSnippetComponent } from '../code-snippet/code-snippet.component'
 import { CodeSnippetService } from '../Services/code-snippet.service'
 
 library.add(faStar, faGem, faGitter, faGithub, faBtc, faTrophy, faPollH)
-dom.watch()
 
 @Component({
   selector: 'app-score-board',
@@ -132,7 +131,7 @@ export class ScoreBoardComponent implements OnInit, AfterViewInit {
                 challenges[i].hasTutorial = module.hasInstructions(challenges[i].name)
               })
             }
-            challenges[i].hasSnippet = challengesWithCodeSnippet.indexOf(challenges[i].key) > -1
+            challenges[i].hasSnippet = challengesWithCodeSnippet.includes(challenges[i].key)
           }
           this.availableChallengeCategories.sort((a, b) => a.localeCompare(b))
           this.displayedChallengeCategories = localStorage.getItem('displayedChallengeCategories') ? JSON.parse(String(localStorage.getItem('displayedChallengeCategories'))) : this.availableChallengeCategories
@@ -152,12 +151,12 @@ export class ScoreBoardComponent implements OnInit, AfterViewInit {
           }
 
           this.spinner.hide()
-          })
+        })
       }, (err) => {
         this.challenges = []
         console.log(err)
       })
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
 
     this.ngZone.runOutsideAngular(() => {
       this.io.socket().on('challenge solved', (data: any) => {
@@ -178,12 +177,12 @@ export class ScoreBoardComponent implements OnInit, AfterViewInit {
   }
 
   scrollToChallenge (challengeName: string) {
-      const el = document.getElementById(challengeName)
-      if (!el) {
-        console.log(`Challenge ${challengeName} is not visible!`)
-      } else {
-        console.log(`Scrolling to challenge: ${challengeName}`)
-        el.scrollIntoView({ behavior: 'smooth' })
+    const el = document.getElementById(challengeName)
+    if (!el) {
+      console.log(`Challenge ${challengeName} is not visible!`)
+    } else {
+      console.log(`Scrolling to challenge: ${challengeName}`)
+      el.scrollIntoView({ behavior: 'smooth' })
     }
   }
 
@@ -199,9 +198,9 @@ export class ScoreBoardComponent implements OnInit, AfterViewInit {
     } else if (challenge.hintUrl) {
       if (challenge.hint) {
         this.translate.get('CLICK_FOR_MORE_HINTS').subscribe((clickForMoreHints: string) => {
-          challenge.hint += ` ${clickForMoreHints}`
+          challenge.hint = `${challenge.hint} ${clickForMoreHints}`
         }, (translationId: string) => {
-          challenge.hint += ` ${translationId}`
+          challenge.hint = `${challenge.hint} ${translationId}`
         })
       } else {
         this.translate.get('CLICK_TO_OPEN_HINTS').subscribe((clickToOpenHints) => {
@@ -409,9 +408,9 @@ export class ScoreBoardComponent implements OnInit, AfterViewInit {
     const dialogRef = this.dialog.open(CodeSnippetComponent, {
       disableClose: true,
       data: {
-        key: key,
-        name: name,
-        codingChallengeStatus: codingChallengeStatus
+        key,
+        name,
+        codingChallengeStatus
       }
     })
 
diff --git a/frontend/src/app/search-result/search-result.component.spec.ts b/frontend/src/app/search-result/search-result.component.spec.ts
index d28959616f9..cb6150afc25 100644
--- a/frontend/src/app/search-result/search-result.component.spec.ts
+++ b/frontend/src/app/search-result/search-result.component.spec.ts
@@ -6,7 +6,7 @@
 import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { MatDividerModule } from '@angular/material/divider'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { SearchResultComponent } from './search-result.component'
 import { ProductService } from '../Services/product.service'
 import { RouterTestingModule } from '@angular/router/testing'
@@ -26,12 +26,12 @@ import { BasketService } from '../Services/basket.service'
 import { EventEmitter } from '@angular/core'
 import { ActivatedRoute } from '@angular/router'
 import { SocketIoService } from '../Services/socket-io.service'
-import { Product } from '../Models/product.model'
+import { type Product } from '../Models/product.model'
 import { QuantityService } from '../Services/quantity.service'
 import { DeluxeGuard } from '../app.guard'
 
 class MockSocket {
-  on (str: string, callback: Function) {
+  on (str: string, callback: any) {
     callback(str)
   }
 
diff --git a/frontend/src/app/search-result/search-result.component.ts b/frontend/src/app/search-result/search-result.component.ts
index 41ef483decf..c8b5e0bb9ff 100644
--- a/frontend/src/app/search-result/search-result.component.ts
+++ b/frontend/src/app/search-result/search-result.component.ts
@@ -7,24 +7,23 @@ import { ProductDetailsComponent } from '../product-details/product-details.comp
 import { ActivatedRoute, Router } from '@angular/router'
 import { ProductService } from '../Services/product.service'
 import { BasketService } from '../Services/basket.service'
-import { AfterViewInit, Component, NgZone, OnDestroy, ViewChild, ChangeDetectorRef } from '@angular/core'
+import { type AfterViewInit, Component, NgZone, type OnDestroy, ViewChild, ChangeDetectorRef } from '@angular/core'
 import { MatPaginator } from '@angular/material/paginator'
-import { forkJoin, Subscription } from 'rxjs'
+import { forkJoin, type Subscription } from 'rxjs'
 import { MatTableDataSource } from '@angular/material/table'
 import { MatDialog } from '@angular/material/dialog'
-import { DomSanitizer, SafeHtml } from '@angular/platform-browser'
+import { DomSanitizer, type SafeHtml } from '@angular/platform-browser'
 import { TranslateService } from '@ngx-translate/core'
 import { SocketIoService } from '../Services/socket-io.service'
 import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
 
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faCartPlus, faEye } from '@fortawesome/free-solid-svg-icons'
-import { Product } from '../Models/product.model'
+import { type Product } from '../Models/product.model'
 import { QuantityService } from '../Services/quantity.service'
 import { DeluxeGuard } from '../app.guard'
 
 library.add(faEye, faCartPlus)
-dom.watch()
 
 interface TableEntry {
   name: string
@@ -40,7 +39,7 @@ interface TableEntry {
   selector: 'app-search-result',
   templateUrl: './search-result.component.html',
   styleUrls: ['./search-result.component.scss']
-  })
+})
 export class SearchResultComponent implements OnDestroy, AfterViewInit {
   public displayedColumns = ['Image', 'Product', 'Description', 'Price', 'Select']
   public tableData!: any[]
@@ -118,7 +117,7 @@ export class SearchResultComponent implements OnDestroy, AfterViewInit {
         this.breakpoint = 6
       }
       this.cdRef.detectChanges()
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   trustProductDescription (tableData: any[]) { // vuln-code-snippet neutral-line restfulXssChallenge
@@ -201,12 +200,12 @@ export class SearchResultComponent implements OnDestroy, AfterViewInit {
                   this.snackBarHelperService.open(translationId, 'confirmBar')
                   this.basketService.updateNumberOfCartItems()
                 })
-              }, (err) => console.log(err))
+              }, (err) => { console.log(err) })
             }, (err) => {
               this.snackBarHelperService.open(err.error?.error, 'errorBar')
               console.log(err)
             })
-          }, (err) => console.log(err))
+          }, (err) => { console.log(err) })
           break
         }
       }
@@ -220,13 +219,13 @@ export class SearchResultComponent implements OnDestroy, AfterViewInit {
               this.snackBarHelperService.open(translationId, 'confirmBar')
               this.basketService.updateNumberOfCartItems()
             })
-          }, (err) => console.log(err))
+          }, (err) => { console.log(err) })
         }, (err) => {
           this.snackBarHelperService.open(err.error?.error, 'errorBar')
           console.log(err)
         })
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   isLoggedIn () {
diff --git a/frontend/src/app/server-started-notification/server-started-notification.component.spec.ts b/frontend/src/app/server-started-notification/server-started-notification.component.spec.ts
index 07236b03447..6f338073215 100644
--- a/frontend/src/app/server-started-notification/server-started-notification.component.spec.ts
+++ b/frontend/src/app/server-started-notification/server-started-notification.component.spec.ts
@@ -8,7 +8,7 @@ import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { MatButtonModule } from '@angular/material/button'
 import { MatCardModule } from '@angular/material/card'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 
 import { ServerStartedNotificationComponent } from './server-started-notification.component'
 import { ChallengeService } from '../Services/challenge.service'
@@ -18,7 +18,7 @@ import { EventEmitter } from '@angular/core'
 import { MatIconModule } from '@angular/material/icon'
 
 class MockSocket {
-  on (str: string, callback: Function) {
+  on (str: string, callback: any) {
     callback()
   }
 }
diff --git a/frontend/src/app/server-started-notification/server-started-notification.component.ts b/frontend/src/app/server-started-notification/server-started-notification.component.ts
index 7c8afec6628..caf105fc841 100644
--- a/frontend/src/app/server-started-notification/server-started-notification.component.ts
+++ b/frontend/src/app/server-started-notification/server-started-notification.component.ts
@@ -5,7 +5,7 @@
 
 import { TranslateService } from '@ngx-translate/core'
 import { ChallengeService } from '../Services/challenge.service'
-import { ChangeDetectorRef, Component, NgZone, OnInit } from '@angular/core'
+import { ChangeDetectorRef, Component, NgZone, type OnInit } from '@angular/core'
 import { CookieService } from 'ngx-cookie'
 import { SocketIoService } from '../Services/socket-io.service'
 
@@ -18,7 +18,7 @@ interface HackingProgress {
   selector: 'app-server-started-notification',
   templateUrl: './server-started-notification.component.html',
   styleUrls: ['./server-started-notification.component.scss']
-  })
+})
 export class ServerStartedNotificationComponent implements OnInit {
   public hackingProgress: HackingProgress = {} as HackingProgress
 
@@ -40,7 +40,7 @@ export class ServerStartedNotificationComponent implements OnInit {
             })
           }, (error) => {
             console.log(error)
-            this.translate.get('AUTO_RESTORE_PROGRESS_FAILED', { error: error }).subscribe((notificationServerStarted) => {
+            this.translate.get('AUTO_RESTORE_PROGRESS_FAILED', { error }).subscribe((notificationServerStarted) => {
               this.hackingProgress.autoRestoreMessage = notificationServerStarted
             }, (translationId) => {
               this.hackingProgress.autoRestoreMessage = translationId
diff --git a/frontend/src/app/sidenav/sidenav.component.html b/frontend/src/app/sidenav/sidenav.component.html
index fff57618365..7a450be277b 100644
--- a/frontend/src/app/sidenav/sidenav.component.html
+++ b/frontend/src/app/sidenav/sidenav.component.html
@@ -233,7 +233,7 @@ <h3 mat-subheader class="side-subHeader" translate>COMPANY</h3>
 
   <mat-divider *ngIf="scoreBoardVisible || showGitHubLink" style="margin-bottom: 10px;"></mat-divider>
 
-  <a *ngIf="scoreBoardVisible" mat-list-item routerLink="/score-board" (click)="onToggleSidenav()"
+  <a *ngIf="scoreBoardVisible" mat-list-item [routerLink]="scoreBoardLink$ | async" (click)="onToggleSidenav()"
      aria-label="Open score-board">
     <mat-icon matListIcon class="fas fa-trophy fa-lg"></mat-icon>
     <span class="menu-text truncate">
@@ -250,7 +250,7 @@ <h3 mat-subheader class="side-subHeader" translate>COMPANY</h3>
     </span>
   </a>
 
-  <a *ngIf="showGitHubLink" mat-list-item href="./redirect?to=https://github.com/bkimminich/juice-shop"
+  <a *ngIf="showGitHubLink" mat-list-item href="./redirect?to=https://github.com/juice-shop/juice-shop"
      aria-label="Go to OWASP Juice Shop GitHub page">
     <mat-icon matListIcon class="fab fa-github fa-lg"></mat-icon>
     <span class="menu-text truncate">
diff --git a/frontend/src/app/sidenav/sidenav.component.spec.ts b/frontend/src/app/sidenav/sidenav.component.spec.ts
index 624fdd4c90c..b9cd2e026eb 100644
--- a/frontend/src/app/sidenav/sidenav.component.spec.ts
+++ b/frontend/src/app/sidenav/sidenav.component.spec.ts
@@ -4,7 +4,7 @@
  */
 
 import { ChallengeService } from '../Services/challenge.service'
-import { ComponentFixture, fakeAsync, TestBed, tick, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, tick, waitForAsync } from '@angular/core/testing'
 import { SocketIoService } from '../Services/socket-io.service'
 import { ConfigurationService } from '../Services/configuration.service'
 import { TranslateModule, TranslateService } from '@ngx-translate/core'
@@ -26,7 +26,7 @@ import { UserService } from '../Services/user.service'
 import { Location } from '@angular/common'
 
 class MockSocket {
-  on (str: string, callback: Function) {
+  on (str: string, callback: any) {
     callback(str)
   }
 }
diff --git a/frontend/src/app/sidenav/sidenav.component.ts b/frontend/src/app/sidenav/sidenav.component.ts
index 9217dd3c43e..9eef53308e1 100644
--- a/frontend/src/app/sidenav/sidenav.component.ts
+++ b/frontend/src/app/sidenav/sidenav.component.ts
@@ -5,7 +5,7 @@
 
 import { environment } from '../../environments/environment'
 import { ChallengeService } from '../Services/challenge.service'
-import { Component, EventEmitter, NgZone, OnInit, Output } from '@angular/core'
+import { Component, EventEmitter, NgZone, type OnInit, Output } from '@angular/core'
 import { SocketIoService } from '../Services/socket-io.service'
 import { AdministrationService } from '../Services/administration.service'
 import { Router } from '@angular/router'
@@ -14,12 +14,15 @@ import { CookieService } from 'ngx-cookie'
 import { ConfigurationService } from '../Services/configuration.service'
 import { LoginGuard } from '../app.guard'
 import { roles } from '../roles'
+import { type Observable } from 'rxjs'
+import { FeatureFlagService } from '../Services/feature-flag.service'
+import { map } from 'rxjs/operators'
 
 @Component({
   selector: 'sidenav',
   templateUrl: './sidenav.component.html',
   styleUrls: ['./sidenav.component.scss']
-  })
+})
 export class SidenavComponent implements OnInit {
   public applicationName = 'OWASP Juice Shop'
   public showGitHubLink = true
@@ -31,11 +34,13 @@ export class SidenavComponent implements OnInit {
   public isShowing = false
   public offerScoreBoardTutorial: boolean = false
 
+  public scoreBoardLink$: Observable<string>
+
   @Output() public sidenavToggle = new EventEmitter()
 
   constructor (private readonly administrationService: AdministrationService, private readonly challengeService: ChallengeService,
     private readonly ngZone: NgZone, private readonly io: SocketIoService, private readonly userService: UserService, private readonly cookieService: CookieService,
-    private readonly router: Router, private readonly configurationService: ConfigurationService, private readonly loginGuard: LoginGuard) { }
+    private readonly router: Router, private readonly configurationService: ConfigurationService, private readonly loginGuard: LoginGuard, private readonly featureFlagService: FeatureFlagService) { }
 
   ngOnInit () {
     this.administrationService.getApplicationVersion().subscribe((version: any) => {
@@ -43,7 +48,7 @@ export class SidenavComponent implements OnInit {
         // eslint-disable-next-line @typescript-eslint/restrict-template-expressions
         this.version = `v${version}`
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
     this.getApplicationDetails()
     this.getScoreBoardStatus()
 
@@ -67,6 +72,7 @@ export class SidenavComponent implements OnInit {
         }
       })
     })
+    this.scoreBoardLink$ = this.featureFlagService.defaultScoreBoard$.pipe(map((version) => version === 'v1' ? '/score-board' : '/score-board-preview'))
   }
 
   isLoggedIn () {
@@ -74,7 +80,7 @@ export class SidenavComponent implements OnInit {
   }
 
   logout () {
-    this.userService.saveLastLoginIp().subscribe((user: any) => { this.noop() }, (err) => console.log(err))
+    this.userService.saveLastLoginIp().subscribe((user: any) => { this.noop() }, (err) => { console.log(err) })
     localStorage.removeItem('token')
     this.cookieService.remove('token')
     sessionStorage.removeItem('bid')
@@ -99,13 +105,13 @@ export class SidenavComponent implements OnInit {
       this.ngZone.run(() => {
         this.scoreBoardVisible = challenges[0].solved
       })
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   getUserDetails () {
     this.userService.whoAmI().subscribe((user: any) => {
       this.userEmail = user.email
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   onToggleSidenav = () => {
@@ -123,7 +129,7 @@ export class SidenavComponent implements OnInit {
       if (config?.application.welcomeBanner.showOnFirstStart && config.hackingInstructor.isEnabled) {
         this.offerScoreBoardTutorial = config.application.welcomeBanner.showOnFirstStart && config.hackingInstructor.isEnabled
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   isAccounting () {
diff --git a/frontend/src/app/token-sale/token-sale.component.html b/frontend/src/app/token-sale/token-sale.component.html
index 4e5a50be908..bc867b5a985 100644
--- a/frontend/src/app/token-sale/token-sale.component.html
+++ b/frontend/src/app/token-sale/token-sale.component.html
@@ -17,7 +17,7 @@
         <div class="divider"></div>
         <mat-card class="mat-elevation-z6">
           <h4>{{'SECTION_WHITEPAPER' | translate}} <small style="margin-left: 10px;">(<span translate>WHITEPAPER_REFERENCES</span>)</small></h4>
-          <div>
+          <div class="whitepaper-buttons">
             <a href="https://ponzico.win/ponzico.pdf" target="_blank" rel="noopener noreferrer"><button mat-raised-button color="accent"><i class="fas fa-university fa-lg"></i> PonzICO Whitepaper</button></a>
             <a href="https://www.sec.gov/investor/alerts/ia_virtualcurrencies.pdf" target="_blank" rel="noopener noreferrer"><button mat-raised-button color="accent"><i class="fas fa-graduation-cap fa-lg"></i> PonziCoin Whitepaper</button></a>
           </div>
diff --git a/frontend/src/app/token-sale/token-sale.component.scss b/frontend/src/app/token-sale/token-sale.component.scss
index 968fa029ea4..ae04ae0e6d4 100644
--- a/frontend/src/app/token-sale/token-sale.component.scss
+++ b/frontend/src/app/token-sale/token-sale.component.scss
@@ -18,10 +18,17 @@ $bg-heading: rgba(0, 0, 0, 0.13);
 
 .whitepaper-container.offer-container {
   max-width: 700px;
-  min-width: 400px;
+  min-width: 300px;
   width: 70%;
 }
 
+.whitepaper-buttons {
+  display: flex;
+  flex-direction: row;
+  flex-wrap: wrap;
+  gap: 8px;
+}
+
 .faq-container {
   max-width: 500px;
   min-width: 200px;
diff --git a/frontend/src/app/token-sale/token-sale.component.spec.ts b/frontend/src/app/token-sale/token-sale.component.spec.ts
index fca4b402bb2..8cb35ac1e56 100644
--- a/frontend/src/app/token-sale/token-sale.component.spec.ts
+++ b/frontend/src/app/token-sale/token-sale.component.spec.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { TranslateModule } from '@ngx-translate/core'
 import { TokenSaleComponent } from './token-sale.component'
 import { of, throwError } from 'rxjs'
diff --git a/frontend/src/app/token-sale/token-sale.component.ts b/frontend/src/app/token-sale/token-sale.component.ts
index d7ae0beb371..043d6053496 100644
--- a/frontend/src/app/token-sale/token-sale.component.ts
+++ b/frontend/src/app/token-sale/token-sale.component.ts
@@ -4,20 +4,19 @@
  */
 
 import { ConfigurationService } from '../Services/configuration.service'
-import { Component, OnInit } from '@angular/core'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { Component, type OnInit } from '@angular/core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faBitcoin } from '@fortawesome/free-brands-svg-icons'
 import { faCommentAlt, faComments, faGraduationCap, faUniversity } from '@fortawesome/free-solid-svg-icons'
 import { faCommentAlt as farCommentAlt, faComments as farComments } from '@fortawesome/free-regular-svg-icons'
 
 library.add(faBitcoin, faUniversity, faGraduationCap, faCommentAlt, faComments, farCommentAlt, farComments)
-dom.watch()
 
 @Component({
   selector: 'app-token-sale',
   templateUrl: './token-sale.component.html',
   styleUrls: ['./token-sale.component.scss']
-  })
+})
 export class TokenSaleComponent implements OnInit {
   public altcoinName = 'Juicycoin'
   constructor (private readonly configurationService: ConfigurationService) { }
@@ -27,6 +26,6 @@ export class TokenSaleComponent implements OnInit {
       if (config?.application?.altcoinName) {
         this.altcoinName = config.application.altcoinName
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 }
diff --git a/frontend/src/app/track-result/track-result.component.spec.ts b/frontend/src/app/track-result/track-result.component.spec.ts
index 546946740ab..0506afc283a 100644
--- a/frontend/src/app/track-result/track-result.component.spec.ts
+++ b/frontend/src/app/track-result/track-result.component.spec.ts
@@ -4,7 +4,7 @@
  */
 
 import { HttpClientTestingModule } from '@angular/common/http/testing'
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 import { TranslateModule } from '@ngx-translate/core'
 import { Status, TrackResultComponent } from './track-result.component'
 import { MatTableModule } from '@angular/material/table'
diff --git a/frontend/src/app/track-result/track-result.component.ts b/frontend/src/app/track-result/track-result.component.ts
index 3624b430707..809ba9d503a 100644
--- a/frontend/src/app/track-result/track-result.component.ts
+++ b/frontend/src/app/track-result/track-result.component.ts
@@ -5,14 +5,13 @@
 
 import { ActivatedRoute } from '@angular/router'
 import { MatTableDataSource } from '@angular/material/table'
-import { Component, OnInit } from '@angular/core'
+import { Component, type OnInit } from '@angular/core'
 import { TrackOrderService } from '../Services/track-order.service'
 import { DomSanitizer } from '@angular/platform-browser'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faHome, faSync, faTruck, faTruckLoading, faWarehouse } from '@fortawesome/free-solid-svg-icons'
 
 library.add(faWarehouse, faSync, faTruckLoading, faTruck, faHome)
-dom.watch()
 
 export enum Status {
   New,
@@ -25,7 +24,7 @@ export enum Status {
   selector: 'app-track-result',
   templateUrl: './track-result.component.html',
   styleUrls: ['./track-result.component.scss']
-  })
+})
 export class TrackResultComponent implements OnInit {
   public displayedColumns = ['product', 'price', 'quantity', 'total price']
   public dataSource = new MatTableDataSource()
diff --git a/frontend/src/app/two-factor-auth-enter/two-factor-auth-enter.component.spec.ts b/frontend/src/app/two-factor-auth-enter/two-factor-auth-enter.component.spec.ts
index cf474585800..f29d734558a 100644
--- a/frontend/src/app/two-factor-auth-enter/two-factor-auth-enter.component.spec.ts
+++ b/frontend/src/app/two-factor-auth-enter/two-factor-auth-enter.component.spec.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 
 import { TwoFactorAuthEnterComponent } from './two-factor-auth-enter.component'
 import { SearchResultComponent } from '../search-result/search-result.component'
diff --git a/frontend/src/app/two-factor-auth-enter/two-factor-auth-enter.component.ts b/frontend/src/app/two-factor-auth-enter/two-factor-auth-enter.component.ts
index 5daf6c4264e..d906943e15e 100644
--- a/frontend/src/app/two-factor-auth-enter/two-factor-auth-enter.component.ts
+++ b/frontend/src/app/two-factor-auth-enter/two-factor-auth-enter.component.ts
@@ -9,11 +9,10 @@ import { TwoFactorAuthService } from '../Services/two-factor-auth-service'
 import { CookieService } from 'ngx-cookie'
 import { UserService } from '../Services/user.service'
 import { Router } from '@angular/router'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faUnlockAlt } from '@fortawesome/free-solid-svg-icons'
 
 library.add(faUnlockAlt)
-dom.watch()
 
 interface TokenEnterFormFields {
   token: string
@@ -23,13 +22,13 @@ interface TokenEnterFormFields {
   selector: 'app-two-factor-auth-enter',
   templateUrl: './two-factor-auth-enter.component.html',
   styleUrls: ['./two-factor-auth-enter.component.scss']
-  })
+})
 export class TwoFactorAuthEnterComponent {
   public twoFactorForm: UntypedFormGroup = new UntypedFormGroup({
     token: new UntypedFormControl('', [Validators.minLength(6), Validators.maxLength(6), Validators.required, Validators.pattern('^[\\d]{6}$')])
   })
 
-  public errored: Boolean = false
+  public errored: boolean = false
 
   constructor (
     private readonly twoFactorAuthService: TwoFactorAuthService,
diff --git a/frontend/src/app/two-factor-auth/two-factor-auth.component.spec.ts b/frontend/src/app/two-factor-auth/two-factor-auth.component.spec.ts
index 5d5841efba0..dc128fa4afb 100644
--- a/frontend/src/app/two-factor-auth/two-factor-auth.component.spec.ts
+++ b/frontend/src/app/two-factor-auth/two-factor-auth.component.spec.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 import { TwoFactorAuthComponent } from './two-factor-auth.component'
 
 import { ReactiveFormsModule } from '@angular/forms'
diff --git a/frontend/src/app/two-factor-auth/two-factor-auth.component.ts b/frontend/src/app/two-factor-auth/two-factor-auth.component.ts
index 08e2da0e808..5e27f1d7032 100644
--- a/frontend/src/app/two-factor-auth/two-factor-auth.component.ts
+++ b/frontend/src/app/two-factor-auth/two-factor-auth.component.ts
@@ -9,7 +9,7 @@ import { UntypedFormControl, UntypedFormGroup, Validators } from '@angular/forms
 import { TwoFactorAuthService } from '../Services/two-factor-auth-service'
 import { ConfigurationService } from '../Services/configuration.service'
 
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faSave, faUnlockAlt } from '@fortawesome/free-solid-svg-icons'
 
 import { forkJoin } from 'rxjs'
@@ -18,13 +18,12 @@ import { MatSnackBar } from '@angular/material/snack-bar'
 import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
 
 library.add(faUnlockAlt, faSave)
-dom.watch()
 
 @Component({
   selector: 'app-two-factor-auth',
   templateUrl: './two-factor-auth.component.html',
   styleUrls: ['./two-factor-auth.component.scss']
-  })
+})
 export class TwoFactorAuthComponent {
   public data?: string
 
diff --git a/frontend/src/app/user-details/user-details.component.spec.ts b/frontend/src/app/user-details/user-details.component.spec.ts
index 359537b4907..36fa6020f63 100644
--- a/frontend/src/app/user-details/user-details.component.spec.ts
+++ b/frontend/src/app/user-details/user-details.component.spec.ts
@@ -8,7 +8,7 @@ import { MAT_DIALOG_DATA, MatDialogModule, MatDialogRef } from '@angular/materia
 import { UserService } from '../Services/user.service'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { MatDividerModule } from '@angular/material/divider'
-import { ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, TestBed, waitForAsync } from '@angular/core/testing'
 
 import { UserDetailsComponent } from './user-details.component'
 import { of, throwError } from 'rxjs'
diff --git a/frontend/src/app/user-details/user-details.component.ts b/frontend/src/app/user-details/user-details.component.ts
index 3c85b2d02d2..95da28a6b1b 100644
--- a/frontend/src/app/user-details/user-details.component.ts
+++ b/frontend/src/app/user-details/user-details.component.ts
@@ -4,19 +4,18 @@
  */
 
 import { UserService } from '../Services/user.service'
-import { Component, Inject, OnInit } from '@angular/core'
+import { Component, Inject, type OnInit } from '@angular/core'
 import { MAT_DIALOG_DATA } from '@angular/material/dialog'
-import { dom, library } from '@fortawesome/fontawesome-svg-core'
+import { library } from '@fortawesome/fontawesome-svg-core'
 import { faArrowCircleLeft } from '@fortawesome/free-solid-svg-icons'
 
 library.add(faArrowCircleLeft)
-dom.watch()
 
 @Component({
   selector: 'app-user-details',
   templateUrl: './user-details.component.html',
   styleUrls: ['./user-details.component.scss']
-  })
+})
 export class UserDetailsComponent implements OnInit {
   public user: any
   constructor (@Inject(MAT_DIALOG_DATA) public dialogData: any, private readonly userService: UserService) { }
@@ -24,6 +23,6 @@ export class UserDetailsComponent implements OnInit {
   ngOnInit () {
     this.userService.get(this.dialogData.id).subscribe((user) => {
       this.user = user
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 }
diff --git a/frontend/src/app/wallet-web3/wallet-web3.component.html b/frontend/src/app/wallet-web3/wallet-web3.component.html
new file mode 100644
index 00000000000..60f8f3b8fb2
--- /dev/null
+++ b/frontend/src/app/wallet-web3/wallet-web3.component.html
@@ -0,0 +1,71 @@
+<mat-card class="mat-elevation-z6">
+  <div class="header_container">
+    <h1>{{"TITLE_CRYPTO_WALLET" | translate}}</h1>
+    <div class="metamask-button">
+      <button
+        mat-raised-button
+        color="accent"
+        type="button"
+        (click)="handleAuth()"
+      >
+        <i class="material-icons">
+          account_balance_wallet
+        </i>
+        <span *ngIf="!session">{{"BTN_CONNECT_METAMASK" | translate}}</span>
+        <span *ngIf="session"
+          >{{ userData.address.substring(0, 6) }}...{{
+            userData.address.slice(-6)
+          }}</span
+        >
+      </button>
+    </div>
+  </div>
+  <p>
+    <b>
+      <span translate>LABEL_WALLET_BALANCE</span>
+      <span class="confirmation"> {{ walletBalance }} ETH</span>
+    </b>
+  </p>
+  <div>
+    <mat-form-field style="width: 100%" color="accent" appearance="outline">
+      <mat-label>{{'LABEL_AMOUNT' | translate}}</mat-label>
+      <input
+        matInput
+        [placeholder]="'ENTER_ETHER_AMOUNT' | translate"
+        type="number"
+        id="inputAmount"
+        [(ngModel)]="inputAmount"
+        aria-label="Text field for the withdrawal amount"
+      />
+    </mat-form-field>
+    <h5 class="error">{{ errorMessage }}</h5>
+  </div>
+  <div class="dwbutton_container">
+    <button
+      type="submit"
+      class="deposit_withdraw_button"
+      mat-raised-button
+      color="primary"
+      aria-label="Button to deposit"
+      (click)="depositETH()"
+    >
+      <i class="material-icons">
+        monetization_on
+      </i>
+      {{'BTN_DEPOSIT' | translate}}
+    </button>
+    <button
+      type="submit"
+      class="deposit_withdraw_button"
+      mat-raised-button
+      color="warning"
+      aria-label="Button to withdraw"
+      (click)="withdrawETH()"
+    >
+      <i class="material-icons">
+        local_atm
+      </i>
+      {{'BTN_WITHDRAW' | translate}}
+    </button>
+  </div>
+</mat-card>
diff --git a/frontend/src/app/wallet-web3/wallet-web3.component.scss b/frontend/src/app/wallet-web3/wallet-web3.component.scss
new file mode 100644
index 00000000000..f3fc2ba1409
--- /dev/null
+++ b/frontend/src/app/wallet-web3/wallet-web3.component.scss
@@ -0,0 +1,54 @@
+.header_container {
+  display: flex;
+  justify-content: space-between;
+  margin-bottom: 30px;
+}
+
+.dwbutton_container {
+  display: flex;
+  gap: 12px;
+  justify-content: space-between;
+}
+
+mat-card {
+  display: block;
+  margin-left: 30%;
+  margin-right: 30%;
+}
+
+mat-form-field {
+  padding-top: 10px;
+  width: 100%;
+}
+
+.form-container {
+  min-width: 350px;
+}
+
+.deposit_withdraw_button {
+  width: 100%;
+}
+
+.heading {
+  background: rgba(0, 0, 0, 0.2);
+  font-size: x-large;
+  justify-content: center;
+  padding: 12px 20px;
+}
+@media (max-width: 1100px) {
+  mat-card {
+    margin-left: 20%;
+    margin-right: 20%;
+  }
+}
+@media (max-width: 580px) {
+  mat-card {
+    margin-left: 10%;
+    margin-right: 10%;
+  }
+
+  .header_container {
+    flex-direction: column;
+    margin-bottom: 16px;
+  }
+}
diff --git a/frontend/src/app/wallet-web3/wallet-web3.component.ts b/frontend/src/app/wallet-web3/wallet-web3.component.ts
new file mode 100644
index 00000000000..24755d34f08
--- /dev/null
+++ b/frontend/src/app/wallet-web3/wallet-web3.component.ts
@@ -0,0 +1,160 @@
+import { Component, OnInit, ChangeDetectorRef } from '@angular/core'
+import { KeysService } from '../Services/keys.service'
+import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
+import { web3WalletABI } from '../../assets/public/ContractABIs'
+import { getDefaultProvider, ethers, BigNumber } from 'ethers'
+import {
+  createClient,
+  connect,
+  disconnect,
+  getAccount,
+  signMessage,
+  InjectedConnector
+} from '@wagmi/core'
+const { ethereum } = window
+const BankAddress = '0x413744D59d31AFDC2889aeE602636177805Bd7b0'
+const client = createClient({
+  autoConnect: true,
+  provider: getDefaultProvider()
+})
+
+@Component({
+  selector: 'app-wallet-web3',
+  templateUrl: './wallet-web3.component.html',
+  styleUrls: ['./wallet-web3.component.scss']
+})
+export class WalletWeb3Component {
+  constructor (
+    private readonly keysService: KeysService,
+    private readonly snackBarHelperService: SnackBarHelperService,
+    private readonly changeDetectorRef: ChangeDetectorRef
+  ) {}
+
+  userData: object
+  session = false
+  walletBalance = '0'
+  myBEEBalance = 0
+  inputAmount: number = null
+  successResponse = false
+  mintButtonDisabled = true
+  challengeSolved = false
+  errorMessage = ''
+  metamaskAddress = ''
+  ngOnInit (): void {
+    this.handleAuth()
+    window.ethereum.on('chainChanged', this.handleChainChanged.bind(this))
+  }
+
+  async handleChainChanged (chainId: string) {
+    await this.handleAuth()
+  }
+
+  async depositETH () {
+    try {
+      const provider = new ethers.providers.Web3Provider(window.ethereum)
+      const signer = provider.getSigner()
+
+      const contract = new ethers.Contract(BankAddress, web3WalletABI, signer)
+      const depositAmount = this.inputAmount.toString()
+      const transaction = await contract.ethdeposit(this.metamaskAddress, {
+        value: ethers.utils.parseEther(depositAmount)
+      })
+      const txConfirmation = await transaction.wait()
+      this.getUserEthBalance()
+    } catch (error) {
+      this.errorMessage = error.message
+    }
+  }
+
+  async withdrawETH () {
+    try {
+      const provider = new ethers.providers.Web3Provider(window.ethereum)
+      const signer = provider.getSigner()
+
+      const contract = new ethers.Contract(BankAddress, web3WalletABI, signer)
+      const withdrawalAmount = this.inputAmount.toString()
+      const transaction = await contract.withdraw(
+        ethers.utils.parseEther(withdrawalAmount)
+      )
+      const txConfirmation = await transaction.wait()
+      this.getUserEthBalance()
+    } catch (error) {
+      this.errorMessage = error.message
+    }
+  }
+
+  async getUserEthBalance () {
+    try {
+      const provider = new ethers.providers.Web3Provider(window.ethereum)
+      const signer = provider.getSigner()
+      const contract = new ethers.Contract(BankAddress, web3WalletABI, signer)
+      const userBalance = await contract.balanceOf(this.metamaskAddress)
+      const formattedBalance = ethers.utils.formatEther(userBalance)
+      this.walletBalance = formattedBalance
+    } catch (error) {
+      this.errorMessage = error.message
+    }
+  }
+
+  async handleAuth () {
+    try {
+      const { isConnected } = getAccount()
+
+      if (isConnected) {
+        await disconnect()
+      }
+      if (!window.ethereum) {
+        this.snackBarHelperService.open('PLEASE_INSTALL_WEB3_WALLET', 'errorBar')
+        return
+      }
+
+      const provider = await connect({ connector: new InjectedConnector() })
+      this.metamaskAddress = provider.account
+      this.keysService.walletAddressSend(this.metamaskAddress).subscribe(
+        (response) => {
+          if (response.success) {
+            this.successResponse = response.status
+            this.mintButtonDisabled = true
+          }
+        },
+        (error) => {
+          console.error(error)
+        }
+      )
+      this.userData = {
+        address: provider.account,
+        chain: provider.chain.id,
+        network: 'evm'
+      }
+      await ethereum.request({
+        method: 'wallet_addEthereumChain',
+        params: [
+          {
+            chainId: '0xaa36a7',
+            chainName: 'Sepolia Test Network',
+            nativeCurrency: {
+              name: 'SepoliaETH',
+              symbol: 'ETH',
+              decimals: 18
+            },
+            rpcUrls: ['https://ethereum-sepolia.blockpi.network/v1/rpc/public'],
+            blockExplorerUrls: ['https://sepolia.etherscan.io/']
+          }
+        ]
+      })
+      const targetChainId = '11155111'
+      const currentChainId = String(provider.chain?.id)
+
+      if (provider && currentChainId !== targetChainId) {
+        this.session = false
+        this.snackBarHelperService.open('PLEASE_CONNECT_TO_SEPOLIA_NETWORK', 'errorBar')
+      } else {
+        this.session = true
+        this.getUserEthBalance()
+      }
+      this.changeDetectorRef.detectChanges()
+    } catch (err) {
+      console.log(err)
+    }
+  }
+}
diff --git a/frontend/src/app/wallet-web3/wallet-web3.module.ts b/frontend/src/app/wallet-web3/wallet-web3.module.ts
new file mode 100644
index 00000000000..806c89ebabc
--- /dev/null
+++ b/frontend/src/app/wallet-web3/wallet-web3.module.ts
@@ -0,0 +1,48 @@
+import { NgModule, CUSTOM_ELEMENTS_SCHEMA } from '@angular/core'
+import { CommonModule } from '@angular/common'
+import { ReactiveFormsModule, FormsModule } from '@angular/forms'
+import { RouterModule, type Routes } from '@angular/router'
+import { ConfigurationService } from '../Services/configuration.service'
+import { OverlayContainer } from '@angular/cdk/overlay'
+import { MatCardModule } from '@angular/material/card'
+import { MatInputModule } from '@angular/material/input'
+import { MatButtonModule } from '@angular/material/button'
+import { MatSnackBarModule } from '@angular/material/snack-bar'
+
+import { WalletWeb3Component } from './wallet-web3.component'
+import { TranslateModule } from '@ngx-translate/core'
+
+const routes: Routes = [
+  {
+    path: '',
+    component: WalletWeb3Component
+  }
+]
+
+@NgModule({
+  declarations: [WalletWeb3Component],
+  imports: [
+    CommonModule,
+    RouterModule.forChild(routes),
+    TranslateModule,
+    FormsModule,
+    ReactiveFormsModule,
+    MatButtonModule,
+    MatCardModule,
+    MatInputModule,
+    MatSnackBarModule
+  ],
+  schemas: [CUSTOM_ELEMENTS_SCHEMA]
+})
+export class WalletWeb3Module {
+  constructor (
+    public configurationService: ConfigurationService,
+    public overlayContainer: OverlayContainer
+  ) {
+    configurationService.getApplicationConfiguration().subscribe((conf) => {
+      overlayContainer
+        .getContainerElement()
+        .classList.add(conf.application.theme + '-theme')
+    })
+  }
+}
diff --git a/frontend/src/app/wallet/wallet.component.html b/frontend/src/app/wallet/wallet.component.html
index 08fdd957edd..8961b5236d2 100644
--- a/frontend/src/app/wallet/wallet.component.html
+++ b/frontend/src/app/wallet/wallet.component.html
@@ -5,9 +5,10 @@
 
 <mat-card class="mat-elevation-z6">
 
-    <h1>
-      <div>{{"DIGITAL_WALLET" | translate}}</div>
-    </h1>
+    <div class="header_container">
+      <h1>{{"DIGITAL_WALLET" | translate}}</h1>
+      <a href="/#/wallet-web3" translate>LINK_TRY_OUT_NEW_CRYPTO_WALLET</a>
+    </div>
 
     <h3 translate>LABEL_ADD_MONEY</h3>
     <p>
@@ -30,8 +31,8 @@ <h3 translate>LABEL_ADD_MONEY</h3>
     <button type="submit" id="submitButton" (click)="continue()" [disabled]="balanceControl.invalid"
             mat-raised-button color="primary" aria-label="Button to continue to payment">
       <i class="material-icons">
-        send
+        monetization_on
       </i>
-      {{'LABEL_CONTINUE' | translate}}
+      {{'BTN_DEPOSIT' | translate}}
     </button>
 </mat-card>
diff --git a/frontend/src/app/wallet/wallet.component.scss b/frontend/src/app/wallet/wallet.component.scss
index 8f52473438d..48401582d21 100644
--- a/frontend/src/app/wallet/wallet.component.scss
+++ b/frontend/src/app/wallet/wallet.component.scss
@@ -30,3 +30,25 @@ mat-form-field {
   justify-content: center;
   padding: 12px 20px;
 }
+
+.header_container {
+  display: flex;
+  justify-content: space-between;
+}
+@media (max-width: 1100px) {
+  mat-card {
+    margin-left: 20%;
+    margin-right: 20%;
+  }
+}
+@media (max-width: 580px) {
+  mat-card {
+    margin-left: 10%;
+    margin-right: 10%;
+  }
+
+  .header_container {
+    flex-direction: column;
+    margin-bottom: 16px;
+  }
+}
diff --git a/frontend/src/app/wallet/wallet.component.spec.ts b/frontend/src/app/wallet/wallet.component.spec.ts
index d244bbe123a..dffc9f6d823 100644
--- a/frontend/src/app/wallet/wallet.component.spec.ts
+++ b/frontend/src/app/wallet/wallet.component.spec.ts
@@ -7,7 +7,7 @@ import { TranslateModule, TranslateService } from '@ngx-translate/core'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { MatCardModule } from '@angular/material/card'
 import { MatFormFieldModule } from '@angular/material/form-field'
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 import { MatInputModule } from '@angular/material/input'
 import { ReactiveFormsModule } from '@angular/forms'
 import { BrowserAnimationsModule } from '@angular/platform-browser/animations'
diff --git a/frontend/src/app/wallet/wallet.component.ts b/frontend/src/app/wallet/wallet.component.ts
index d517236fe4c..0e7ff3443e4 100644
--- a/frontend/src/app/wallet/wallet.component.ts
+++ b/frontend/src/app/wallet/wallet.component.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, NgZone, OnInit } from '@angular/core'
+import { Component, NgZone, type OnInit } from '@angular/core'
 import { WalletService } from '../Services/wallet.service'
 import { UntypedFormControl, Validators } from '@angular/forms'
 import { Router } from '@angular/router'
@@ -12,7 +12,7 @@ import { Router } from '@angular/router'
   selector: 'app-wallet',
   templateUrl: './wallet.component.html',
   styleUrls: ['./wallet.component.scss']
-  })
+})
 export class WalletComponent implements OnInit {
   public balance: string
   public balanceControl: UntypedFormControl = new UntypedFormControl('', [Validators.required, Validators.min(10), Validators.max(1000)])
diff --git a/frontend/src/app/web3-sandbox/web3-sandbox.component.html b/frontend/src/app/web3-sandbox/web3-sandbox.component.html
new file mode 100644
index 00000000000..696bd7b0291
--- /dev/null
+++ b/frontend/src/app/web3-sandbox/web3-sandbox.component.html
@@ -0,0 +1,155 @@
+<div class="sandbox-container mat-elevation-z6">
+  <div class="sandbox-container_body">
+    <div class="sandbox-container_body_left">
+      <div class="editor-title">{{"TITLE_CONTRACT_EDITOR" | translate}}</div>
+      <ngx-codemirror
+        [(ngModel)]="code"
+        [options]="editorOptions"
+      ></ngx-codemirror>
+    </div>
+    <div class="sandbox-container_body_right">
+      <div class="playground-wallet">
+        <div class="metamask-button">
+          <button
+            mat-raised-button
+            color="accent"
+            type="button"
+            (click)="handleAuth()"
+          >
+            <span *ngIf="!session">{{"BTN_CONNECT_METAMASK" | translate}}</span>
+            <span *ngIf="session"
+              >{{ userData.address.substring(0, 6) }}...{{
+                userData.address.slice(-6)
+              }}</span
+            >
+          </button>
+        </div>
+      </div>
+      <h2 translate>TITLE_WEB3_SANDBOX</h2>
+      <ul>
+        <li translate>EXPLANATION_SMART_CONTRACT_DEPLOYMENT</li>
+        <li translate>EXPLANATION_GWEI_VALUE_POST_COMPILATION</li>
+      </ul>
+      <mat-form-field appearance="outline" color="accent">
+        <mat-label>{{ "LABEL_SELECT_COMPILER_VERSION" | translate}}</mat-label>
+        <select matNativeControl [(ngModel)]="selectedCompilerVersion">
+          <option *ngFor="let version of compilerVersions" [value]="version">
+            {{ version }}
+          </option>
+        </select>
+      </mat-form-field>
+      <button
+        type="button"
+        mat-raised-button
+        (click)="compileAndFetchContracts(code)"
+      >
+        <i class="material-icons">
+          build
+        </i>
+        {{ "BTN_COMPILE_CONTRACT" | translate}}
+      </button>
+      <div *ngIf="compilerErrors.length > 0" class="error-container mat-elevation-z6">
+        <h4>Compiler Errors:</h4>
+        <ul>
+          <li class="error" *ngFor="let error of compilerErrors">
+            {{ error.formattedMessage }}
+          </li>
+        </ul>
+      </div>
+      <div *ngIf="compiledContracts">
+        <h3 class="contracts-title">{{ "TITLE_CONTRACT_DEPLOYMENT" | translate}}</h3>
+        <mat-form-field
+          style="width: 45%; margin-right: 10%"
+          appearance="outline"
+          color="accent"
+        >
+          <mat-label>{{ "LABEL_COMPILED_CONTRACTS" | translate}}</mat-label>
+          <select matNativeControl [(ngModel)]="selectedContractName">
+            <option
+              *ngFor="let contractName of contractNames"
+              [value]="contractName"
+            >
+              {{ contractName }}
+            </option>
+          </select>
+        </mat-form-field>
+        <mat-form-field>
+          <input
+            matInput
+            type="number"
+            [placeholder]="'GWEI_VALUE_FOR_SENDING_ETH' | translate"
+            [(ngModel)]="commonGweiValue"
+          />
+        </mat-form-field>
+        <button
+          mat-raised-button
+          type="button"
+          (click)="deploySelectedContract()"
+        >
+          <i class="material-icons">
+            link
+          </i>
+          {{ "BTN_DEPLOY_SELECTED_CONTRACT" | translate}}
+        </button>
+      </div>
+      <div class="deployedaddresstext" *ngIf="deployedContractAddress">
+        {{ "LABEL_CONTRACT_ADDRESS" | translate }} {{ deployedContractAddress }}
+      </div>
+      <div class="invokecontainer mat-elevation-z6" *ngIf="deployedContractAddress">
+        <h3 translate>TITLE_INTERACT_WITH_CONTRACT</h3>
+        <div *ngFor="let func of contractFunctions">
+          <div class="function-container">
+            <ng-container *ngIf="func.inputs.length > 0; else noInputs">
+              <div class="functionwtext-container">
+                <button
+                  mat-raised-button
+                  type="button"
+                  (click)="invokeFunction(func)"
+                >
+                  <i class="material-icons">
+                    call_to_action
+                  </i>
+                  {{ "BTN_INVOKE" | translate}} {{ func.name }}
+                </button>
+                <mat-form-field appearance="outline" color="accent">
+                  <textarea
+                    matAutosizeMinRows="4"
+                    matAutosizeMaxRows="4"
+                    matTextareaAutosize
+                    matInput
+                    placeholder="({{ func.inputHints }})"
+                    [(ngModel)]="func.inputValues"
+                  ></textarea>
+                </mat-form-field>
+              </div>
+              <div class="invoke-output" *ngIf="func.outputValue !== ''">
+                {{ "LABEL_OUTPUT_FOR" | translate }} {{ func.name }}: {{ func.outputValue }}
+              </div>
+            </ng-container>
+            <ng-template #noInputs>
+              <div>
+                <button
+                  mat-raised-button
+                  type="button"
+                  (click)="invokeFunction(func)"
+                >
+                  <i class="material-icons">
+                    call_to_action
+                  </i>
+                  {{ "BTN_INVOKE" | translate}} {{ func.name }}
+                </button>
+                <div class="invoke-output" *ngIf="func.outputValue !== ''">
+                  {{ "LABEL_OUTPUT_FOR" | translate }} {{ func.name }}: {{ func.outputValue }}
+                </div>
+              </div>
+            </ng-template>
+          </div>
+        </div>
+        <div class="output-container mat-elevation-z6">
+          <div *ngIf="invokeOutput !== ''">{{ "LABEL_OUTPUT" | translate}}: {{ invokeOutput }}</div>
+        </div>
+      </div>
+    </div>
+  </div>
+  <img src="assets/public/images/padding/11px.png"/>
+</div>
diff --git a/frontend/src/app/web3-sandbox/web3-sandbox.component.scss b/frontend/src/app/web3-sandbox/web3-sandbox.component.scss
new file mode 100644
index 00000000000..bd73130b40d
--- /dev/null
+++ b/frontend/src/app/web3-sandbox/web3-sandbox.component.scss
@@ -0,0 +1,120 @@
+.playground-wallet {
+  display: flex;
+  justify-content: center;
+  margin-bottom: 18px;
+}
+
+.sandbox-container {
+  margin: 32px;
+
+  &_body {
+    display: flex;
+    flex-direction: row;
+    gap: 32px;
+    padding: 40px;
+  }
+
+  &_body_left {
+    display: flex;
+    flex-direction: column;
+    width: 70%;
+  }
+
+  &_body_right {
+    align-items: flex-start;
+    display: flex;
+    flex-direction: column;
+    width: 30%;
+  }
+}
+@media (max-width: 840px) {
+  .sandbox-container_body {
+    flex-direction: column;
+  }
+
+  .sandbox-container_body_left,
+  .sandbox-container_body_right {
+    width: 100%;
+  }
+}
+
+.deployedaddresstext {
+  color: rgb(45, 151, 45);
+  font-weight: 600;
+  margin: 10px 0;
+  word-break: break-all;
+}
+
+.invokecontainer {
+  display: flex;
+  flex-direction: column;
+  margin-top: 16px;
+  max-height: 200px;
+  overflow: scroll;
+  padding: 16px;
+  width: 100%;
+}
+
+.error-container {
+  display: flex;
+  flex-direction: column;
+  margin: 16px 0;
+  max-height: 300px;
+  overflow: scroll;
+  padding: 16px;
+
+  ul {
+    font-size: 12px;
+    padding-left: 16px;
+  }
+}
+
+.editor-title {
+  font-size: 20px;
+  font-weight: 500;
+  margin-bottom: 16px;
+  padding: 0 8px;
+  width: 100%;
+}
+
+.function-container {
+  display: flex;
+  flex-direction: column;
+  margin-top: 8px;
+}
+
+.functionwtext-container {
+  align-items: flex-start;
+  display: flex;
+  justify-content: space-between;
+  margin-top: 8px;
+}
+
+.output-container {
+  display: flex;
+  width: 100%;
+  word-break: break-all;
+}
+
+.invoke-btncontainer {
+  display: flex;
+  justify-content: space-between;
+}
+
+.invoke-output {
+  font-size: 12px;
+  padding: 4px;
+}
+
+h2 {
+  margin: 0;
+}
+
+ul {
+  padding-left: 16px;
+}
+
+.contracts-title {
+  font-weight: 500;
+  margin-top: 16px;
+}
diff --git a/frontend/src/app/web3-sandbox/web3-sandbox.component.ts b/frontend/src/app/web3-sandbox/web3-sandbox.component.ts
new file mode 100644
index 00000000000..8d83ab010df
--- /dev/null
+++ b/frontend/src/app/web3-sandbox/web3-sandbox.component.ts
@@ -0,0 +1,308 @@
+import { Component, OnInit, ChangeDetectorRef } from '@angular/core'
+import { KeysService } from '../Services/keys.service'
+import { SnackBarHelperService } from '../Services/snack-bar-helper.service'
+import { getDefaultProvider, ethers, BigNumber } from 'ethers'
+import {
+  createClient,
+  connect,
+  disconnect,
+  getAccount,
+  signMessage,
+  InjectedConnector
+} from '@wagmi/core'
+import {
+  solidityCompiler,
+  getCompilerVersions
+} from 'solidity-browser-compiler'
+
+const client = createClient({
+  autoConnect: true,
+  provider: getDefaultProvider()
+})
+const { ethereum } = window
+const compilerReleases = {
+  '0.8.21': 'soljson-v0.8.21+commit.d9974bed.js',
+  '0.8.9': 'soljson-v0.8.9+commit.e5eed63a.js',
+  '0.7.6': 'soljson-v0.7.6+commit.7338295f.js',
+  '0.6.12': 'soljson-v0.6.12+commit.27d51765.js',
+  '0.5.17': 'soljson-v0.5.17+commit.d19bba13.js',
+  '0.4.26': 'soljson-v0.4.26+commit.4563c3fc.js',
+  '0.3.6': 'soljson-v0.3.6+commit.3fc68da5.js',
+  '0.2.2': 'soljson-v0.2.2+commit.ef92f566.js',
+  '0.1.7': 'soljson-v0.1.7+commit.b4e666cc.js'
+}
+@Component({
+  selector: 'app-web3-sandbox',
+  templateUrl: './web3-sandbox.component.html',
+  styleUrls: ['./web3-sandbox.component.scss']
+})
+export class Web3SandboxComponent {
+  constructor (
+    private readonly keysService: KeysService,
+    private readonly snackBarHelperService: SnackBarHelperService,
+    private readonly changeDetectorRef: ChangeDetectorRef
+  ) {}
+
+  ngOnInit (): void {
+    this.handleAuth()
+    window.ethereum.on('chainChanged', this.handleChainChanged.bind(this))
+  }
+
+  userData: object
+  session = false
+  metamaskAddress = ''
+  selectedContractName: string
+  compiledContracts = []
+  deployedContractAddress = ''
+  contractNames = []
+  commonGweiValue: number = 0
+  contractFunctions = []
+  invokeOutput = ''
+  selectedCompilerVersion: string = '0.8.21'
+  compilerVersions: string[] = Object.keys(compilerReleases)
+  compilerErrors = []
+
+  code: string = `// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.14;
+
+contract HelloWorld {
+    function get()public pure returns (string memory){
+        return 'Hello Contracts';
+    }
+}`
+  editorOptions = {
+    mode: 'text/x-solidity',
+    theme: 'dracula',
+    lineNumbers: true,
+    lineWrapping: true
+  }
+
+  async compileAndFetchContracts (code: string) {
+    try {
+      this.deployedContractAddress = ''
+      const selectedVersion = compilerReleases[
+        this.selectedCompilerVersion
+      ] as string
+
+      if (!selectedVersion) {
+        console.error('Selected compiler version not found.')
+        return
+      }
+
+      const compilerInput = {
+        version: `https://binaries.soliditylang.org/bin/${selectedVersion}`,
+        contractBody: code
+      }
+      const output = await solidityCompiler(compilerInput)
+      if (output.errors && output.errors.length > 0 && !output.contracts) {
+        this.compiledContracts = null
+        console.log(output.errors)
+        this.compilerErrors.push(...output.errors)
+      } else {
+        this.compilerErrors = []
+        console.log('output', output)
+        this.compiledContracts = output.contracts.Compiled_Contracts
+        this.contractNames = Object.keys(this.compiledContracts)
+        this.selectedContractName = this.contractNames[0]
+      }
+    } catch (error) {
+      console.error('Error compiling contracts:', error)
+    }
+  }
+
+  async deploySelectedContract () {
+    if (!this.session) {
+      this.snackBarHelperService.open('PLEASE_CONNECT_WEB3_WALLET', 'errorBar')
+      return
+    }
+    try {
+      const selectedContractName = this.selectedContractName
+      const selectedContract = this.compiledContracts[selectedContractName]
+
+      if (!selectedContract) {
+        console.error('Selected contract not found.')
+        return
+      }
+
+      const provider = new ethers.providers.Web3Provider(window.ethereum)
+      const signer = provider.getSigner()
+
+      const contractBytecode = selectedContract.evm.bytecode.object
+      const contractAbi = selectedContract.abi
+
+      const factory = new ethers.ContractFactory(
+        contractAbi,
+        contractBytecode,
+        signer
+      )
+      const transactionOptions: ethers.PayableOverrides = {}
+      if (this.commonGweiValue > 0) {
+        transactionOptions.value = ethers.utils.parseUnits(
+          this.commonGweiValue.toString(),
+          'gwei'
+        )
+      }
+      const contract = await factory.deploy(transactionOptions)
+      await contract.deployed()
+      this.deployedContractAddress = contract.address
+
+      this.contractFunctions = contractAbi
+        .filter((item) => item.type === 'function')
+        .map((func) => {
+          const inputHints =
+            func.inputs.length > 0
+              ? this.getInputHints(func.inputs)
+              : 'No inputs'
+          return {
+            ...func,
+            inputValues: '',
+            outputValue: '',
+            inputHints
+          }
+        })
+
+      console.log(this.contractFunctions)
+    } catch (error) {
+      console.error('Error deploying contract:', error)
+    }
+  }
+
+  getInputHints (inputs: Array<{ name: string, type: string }>): string {
+    return inputs.map((input) => `${input.name}: ${input.type}`).join(', ')
+  }
+
+  parseInputValue (value: string, type: string) {
+    if (type === 'bool') {
+      return value.toLowerCase() === 'true'
+    } else {
+      return value
+    }
+  }
+
+  async invokeFunction (func) {
+    if (!this.session) {
+      this.snackBarHelperService.open('PLEASE_CONNECT_WEB3_WALLET', 'errorBar')
+      return
+    }
+    try {
+      const selectedContract =
+        this.compiledContracts[this.selectedContractName]
+
+      const provider = new ethers.providers.Web3Provider(window.ethereum)
+      const signer = provider.getSigner()
+      const contract = new ethers.Contract(
+        this.deployedContractAddress,
+        selectedContract.abi,
+        signer
+      )
+
+      const inputs =
+        func.inputValues.trim() !== ''
+          ? func.inputValues.split(',').map((value, index) => {
+            const inputType = func.inputs[index].type
+            return this.parseInputValue(value.trim(), inputType)
+          })
+          : []
+      const transactionOptions: ethers.PayableOverrides = {}
+      if (this.commonGweiValue > 0) {
+        transactionOptions.value = ethers.utils.parseUnits(
+          this.commonGweiValue.toString(),
+          'gwei'
+        )
+      }
+      const transaction = await contract.functions[func.name](
+        ...inputs,
+        transactionOptions
+      )
+      console.log(transaction)
+
+      if (
+        func.outputs.length > 0 &&
+        (func.stateMutability === 'view' || func.stateMutability === 'pure')
+      ) {
+        console.log('hello')
+        const outputValue = transaction[0].toString()
+        const updatedFunc = this.contractFunctions.find(
+          (f) => f.name === func.name
+        )
+        if (updatedFunc) {
+          updatedFunc.outputValue = outputValue
+          const index = this.contractFunctions.indexOf(func)
+          if (index !== -1) {
+            this.contractFunctions[index] = updatedFunc
+          }
+        }
+        console.log(func.outputValue)
+      }
+      console.log('Invoked:', transaction)
+    } catch (error) {
+      console.error('Error invoking function', error)
+      const updatedFunc = this.contractFunctions.find(
+        (f) => f.name === func.name
+      )
+      if (updatedFunc) {
+        updatedFunc.outputValue = error.message
+        const index = this.contractFunctions.indexOf(func)
+        if (index !== -1) {
+          this.contractFunctions[index] = updatedFunc
+        }
+      }
+    }
+  }
+
+  async handleChainChanged (chainId: string) {
+    await this.handleAuth()
+  }
+
+  async handleAuth () {
+    try {
+      const { isConnected } = getAccount()
+
+      if (isConnected) {
+        await disconnect()
+      }
+      if (!window.ethereum) {
+        this.snackBarHelperService.open('PLEASE_INSTALL_WEB3_WALLET', 'errorBar')
+        return
+      }
+
+      const provider = await connect({ connector: new InjectedConnector() })
+      this.metamaskAddress = provider.account
+      this.userData = {
+        address: provider.account,
+        chain: provider.chain.id,
+        network: 'evm'
+      }
+      await ethereum.request({
+        method: 'wallet_addEthereumChain',
+        params: [
+          {
+            chainId: '0xaa36a7',
+            chainName: 'Sepolia Test Network',
+            nativeCurrency: {
+              name: 'SepoliaETH',
+              symbol: 'ETH',
+              decimals: 18
+            },
+            rpcUrls: ['https://ethereum-sepolia.blockpi.network/v1/rpc/public'],
+            blockExplorerUrls: ['https://sepolia.etherscan.io/']
+          }
+        ]
+      })
+      const targetChainId = '11155111'
+      const currentChainId = String(provider.chain?.id)
+
+      if (provider && currentChainId !== targetChainId) {
+        this.session = false
+        this.snackBarHelperService.open('PLEASE_CONNECT_TO_SEPOLIA_NETWORK', 'errorBar')
+      } else {
+        console.log('Should show ethereum chain now')
+        this.session = true
+      }
+      console.log('session', this.session)
+      this.changeDetectorRef.detectChanges()
+    } catch (err) {
+      console.log('An error occured')
+    }
+  }
+}
diff --git a/frontend/src/app/web3-sandbox/web3-sandbox.module.ts b/frontend/src/app/web3-sandbox/web3-sandbox.module.ts
new file mode 100644
index 00000000000..2e9ce3d6f2f
--- /dev/null
+++ b/frontend/src/app/web3-sandbox/web3-sandbox.module.ts
@@ -0,0 +1,53 @@
+import { NgModule, CUSTOM_ELEMENTS_SCHEMA } from '@angular/core'
+import { CommonModule } from '@angular/common'
+import { ReactiveFormsModule, FormsModule } from '@angular/forms'
+import { RouterModule, type Routes } from '@angular/router'
+import { ConfigurationService } from '../Services/configuration.service'
+import { OverlayContainer } from '@angular/cdk/overlay'
+import { MatCardModule } from '@angular/material/card'
+import { MatInputModule } from '@angular/material/input'
+import { MatButtonModule } from '@angular/material/button'
+import { MatSnackBarModule } from '@angular/material/snack-bar'
+
+import { Web3SandboxComponent } from './web3-sandbox.component'
+import { CodemirrorModule } from '@ctrl/ngx-codemirror'
+import 'codemirror/mode/javascript/javascript'
+import 'codemirror/mode/markdown/markdown'
+import 'codemirror-solidity/solidity'
+import { TranslateModule } from '@ngx-translate/core'
+
+const routes: Routes = [
+  {
+    path: '',
+    component: Web3SandboxComponent
+  }
+]
+
+@NgModule({
+  declarations: [Web3SandboxComponent],
+  imports: [
+    CodemirrorModule,
+    CommonModule,
+    RouterModule.forChild(routes),
+    TranslateModule,
+    FormsModule,
+    ReactiveFormsModule,
+    MatButtonModule,
+    MatCardModule,
+    MatInputModule,
+    MatSnackBarModule
+  ],
+  schemas: [CUSTOM_ELEMENTS_SCHEMA]
+})
+export class FaucetModule {
+  constructor (
+    public configurationService: ConfigurationService,
+    public overlayContainer: OverlayContainer
+  ) {
+    configurationService.getApplicationConfiguration().subscribe((conf) => {
+      overlayContainer
+        .getContainerElement()
+        .classList.add(conf.application.theme + '-theme')
+    })
+  }
+}
diff --git a/frontend/src/app/welcome-banner/welcome-banner.component.spec.ts b/frontend/src/app/welcome-banner/welcome-banner.component.spec.ts
index 1eb24c5c1e0..6c0cea92570 100644
--- a/frontend/src/app/welcome-banner/welcome-banner.component.spec.ts
+++ b/frontend/src/app/welcome-banner/welcome-banner.component.spec.ts
@@ -7,7 +7,7 @@ import { TranslateModule } from '@ngx-translate/core'
 import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { CookieModule, CookieService } from 'ngx-cookie'
 
-import { ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
+import { type ComponentFixture, fakeAsync, TestBed, waitForAsync } from '@angular/core/testing'
 
 import { WelcomeBannerComponent } from './welcome-banner.component'
 import { MatDialogRef } from '@angular/material/dialog'
diff --git a/frontend/src/app/welcome-banner/welcome-banner.component.ts b/frontend/src/app/welcome-banner/welcome-banner.component.ts
index 2df875901a0..5723ac7563c 100644
--- a/frontend/src/app/welcome-banner/welcome-banner.component.ts
+++ b/frontend/src/app/welcome-banner/welcome-banner.component.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, OnInit } from '@angular/core'
+import { Component, type OnInit } from '@angular/core'
 import { ConfigurationService } from '../Services/configuration.service'
 import { MatDialogRef } from '@angular/material/dialog'
 import { CookieService } from 'ngx-cookie'
@@ -12,7 +12,7 @@ import { CookieService } from 'ngx-cookie'
   selector: 'app-welcome-banner',
   templateUrl: 'welcome-banner.component.html',
   styleUrls: ['./welcome-banner.component.scss']
-  })
+})
 export class WelcomeBannerComponent implements OnInit {
   public title: string = 'Welcome to OWASP Juice Shop'
   public message: string = "<p>Being a web application with a vast number of intended security vulnerabilities, the <strong>OWASP Juice Shop</strong> is supposed to be the opposite of a best practice or template application for web developers: It is an awareness, training, demonstration and exercise tool for security risks in modern web applications. The <strong>OWASP Juice Shop</strong> is an open-source project hosted by the non-profit <a href='https://owasp.org' target='_blank'>Open Web Application Security Project (OWASP)</a> and is developed and maintained by volunteers. Check out the link below for more information and documentation on the project.</p><h1><a href='https://owasp-juice.shop' target='_blank'>https://owasp-juice.shop</a></h1>"
@@ -38,7 +38,7 @@ export class WelcomeBannerComponent implements OnInit {
         this.dialogRef.disableClose = true
         this.showDismissBtn = false
       }
-    }, (err) => console.log(err))
+    }, (err) => { console.log(err) })
   }
 
   startHackingInstructor () {
diff --git a/frontend/src/app/welcome/welcome.component.spec.ts b/frontend/src/app/welcome/welcome.component.spec.ts
index 8ae5fe274f3..eb833b64ca4 100644
--- a/frontend/src/app/welcome/welcome.component.spec.ts
+++ b/frontend/src/app/welcome/welcome.component.spec.ts
@@ -8,7 +8,7 @@ import { HttpClientTestingModule } from '@angular/common/http/testing'
 import { MatDialog, MatDialogModule } from '@angular/material/dialog'
 import { CookieModule, CookieService } from 'ngx-cookie'
 
-import { ComponentFixture, TestBed } from '@angular/core/testing'
+import { type ComponentFixture, TestBed } from '@angular/core/testing'
 
 import { WelcomeComponent } from './welcome.component'
 import { of } from 'rxjs'
diff --git a/frontend/src/app/welcome/welcome.component.ts b/frontend/src/app/welcome/welcome.component.ts
index fee04049262..6bde1db9799 100644
--- a/frontend/src/app/welcome/welcome.component.ts
+++ b/frontend/src/app/welcome/welcome.component.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Component, OnInit } from '@angular/core'
+import { Component, type OnInit } from '@angular/core'
 import { ConfigurationService } from '../Services/configuration.service'
 import { MatDialog } from '@angular/material/dialog'
 import { WelcomeBannerComponent } from '../welcome-banner/welcome-banner.component'
@@ -13,7 +13,7 @@ import { CookieService } from 'ngx-cookie'
   selector: 'app-welcome',
   templateUrl: 'welcome.component.html',
   styleUrls: ['./welcome.component.scss']
-  })
+})
 
 export class WelcomeComponent implements OnInit {
   private readonly welcomeBannerStatusCookieKey = 'welcomebanner_status'
@@ -34,7 +34,7 @@ export class WelcomeComponent implements OnInit {
             top: '50px'
           }
         })
-      }, (err) => console.log(err))
+      }, (err) => { console.log(err) })
     }
   }
 }
diff --git a/frontend/src/assets/i18n/ar_SA.json b/frontend/src/assets/i18n/ar_SA.json
index c551a876641..7ce7df25492 100644
--- a/frontend/src/assets/i18n/ar_SA.json
+++ b/frontend/src/assets/i18n/ar_SA.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "الحالة",
   "STATUS_UNSOLVED": "لم يتم حله",
   "STATUS_SOLVED": "تم حله",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "غير متوفر",
-  "CALL_FOR_CONTRIBUTIONS": "عندك فكرة تحد جديد؟ وجدت ثغرة لا يتم تعقب هنا؟ اسمحوا لنا أن نعرف عن طريق الدردشة على <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> أو عن طريق فتح إشكال على <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a>!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "الرجاء مساعدتنا في جعل {{appname}} أفضل لك من خلال الإجابة على <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>استبيان المستخدم الخاص بنا!</a>",
   "CHALLENGE_SOLVED": "لقد حللت التحدي بنجاح: {{challenge}}",
   "INVALID_CONTINUE_CODE": "رمز الإكمال غير صحيح.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "أضف إلى السلة",
   "BTN_SHOW_ALL": "إظهار الكل",
   "BTN_SHOW_UNAVAILABLE": "العرض غير متوفر",
-  "INFO_DISABLED_CHALLENGES": "{{num}} التحديات غير متوفرة على {{env}}\nلأجل <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'> اهتمامات امنية</a>\nاو عدم توافق تقني!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "إخفاء الكل",
   "TYPE_THESE_LETTERS": "أدخل هذه الأحرف الـ{{length}}",
   "BTN_REQUEST": "تقدیم طلب",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/az_AZ.json b/frontend/src/assets/i18n/az_AZ.json
index d9f39efa6a8..66c6134c7b3 100644
--- a/frontend/src/assets/i18n/az_AZ.json
+++ b/frontend/src/assets/i18n/az_AZ.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Status",
   "STATUS_UNSOLVED": "həll edilməmiş",
   "STATUS_SOLVED": "həll edilmiş",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "mövcud deyil",
-  "CALL_FOR_CONTRIBUTIONS": "Yeni çağırış üçün bir ideyanız var? Burada izlənilməyən bir zəif nöqtə (boşluq) tapdınız?<a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> cəmiyyətində söhbət vasitəsilə və ya <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> problemi açaraq bizə bildirin!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Zəhmət olmasa <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>istifadəçi anketini</a> dolduraraq {{appname}} tətbiqini daha yaxşı vəziyyətə gətirməyimizdə bizə kömək edin!",
   "CHALLENGE_SOLVED": "Bir çağırışı uğurla həll etdiniz: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Etibarsız davam kodu.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Səbətə əlavə et",
   "BTN_SHOW_ALL": "Hamısını göstər",
   "BTN_SHOW_UNAVAILABLE": "Əlçatmaz olanları göstər",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Hamısını gizlət",
   "TYPE_THESE_LETTERS": "{{length}} hərf yazın",
   "BTN_REQUEST": "Tələb",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Növbəti çətinlik səviyyəsini açmaq üçün {{tier}} dərslik çağırışlarını tamamlayın!",
   "SHOW_COMMENT": "Rəyi göstər",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Oxşar zəif nöqtələri (boşluqları) necə aradan qaldıracağınızı və azaldacağınızı öyrənmək üçün klikləyin!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Çağırış irəliləyişini və tətbiq tənzimləmələrini faylda saxlayın.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Çağırış irəliləyişini və tətbiq tənzimləmələrini fayldan bərpa edin.",
   "TAG_DANGER_ZONE": "Təhlükəli zona",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Zəif nöqtələr haqqında daha az, ancaq yaxşı (təhlükəsizlik) məşqlərini təşviq edən çağırışları vurğulayır.",
   "TAG_CODE_ANALYSIS": "Kod təhlili",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Tətbiqetmənin və ya üçüncü tərəfin bəzi mənbə kodlarını qarışdırmağın faydalı ola biləcəyi çağırışları işarələyir.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Zədəli müraciət nəzarəti",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Zədəli anti avtomatlaşdırma",
   "CATEGORY_BROKEN_AUTHENTICATION": "Zədəli kimlik təsdiqləmə",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/bg_BG.json b/frontend/src/assets/i18n/bg_BG.json
index 7fd8f25a882..f652f60aa2b 100644
--- a/frontend/src/assets/i18n/bg_BG.json
+++ b/frontend/src/assets/i18n/bg_BG.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Състояние",
   "STATUS_UNSOLVED": "Нерешени",
   "STATUS_SOLVED": "Решени",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "недостъпно",
-  "CALL_FOR_CONTRIBUTIONS": "Имате идея за ново предизвикателство? Намерили сте уязвимост, която не е посочена тук? Уведомете ни чрез <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community чат или чрез отваряне на <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> уязвимост!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "Успешно решихте предизвикателство: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Невалиден код.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "Show all",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Hide all",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "Request",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/bn_BD.json b/frontend/src/assets/i18n/bn_BD.json
index a49568db787..5c3bba5743f 100644
--- a/frontend/src/assets/i18n/bn_BD.json
+++ b/frontend/src/assets/i18n/bn_BD.json
@@ -1,5 +1,5 @@
 {
-  "LANGUAGE": "English",
+  "LANGUAGE": "বাংলা",
   "NAV_SEARCH": "Search",
   "SEARCH_PLACEHOLDER": "Search...",
   "NAV_COMPLAIN": "Complaint",
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Status",
   "STATUS_UNSOLVED": "unsolved",
   "STATUS_SOLVED": "solved",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "unavailable",
-  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "You successfully solved a challenge: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Invalid continue code.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "Show all",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Hide all",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "Request",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/ca_ES.json b/frontend/src/assets/i18n/ca_ES.json
index a1201e0a80a..60a050b1c14 100644
--- a/frontend/src/assets/i18n/ca_ES.json
+++ b/frontend/src/assets/i18n/ca_ES.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Estat",
   "STATUS_UNSOLVED": "no resolt",
   "STATUS_SOLVED": "resolt",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "no disponible",
-  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "You successfully solved a challenge: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Invalid continue code.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "Mostrar tot",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Amagar tot",
   "TYPE_THESE_LETTERS": "Escriu aquests {{length}} caràcters",
   "BTN_REQUEST": "Sol·licitud",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/cs_CZ.json b/frontend/src/assets/i18n/cs_CZ.json
index 5534f870ace..43e1717ccb2 100644
--- a/frontend/src/assets/i18n/cs_CZ.json
+++ b/frontend/src/assets/i18n/cs_CZ.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Stav",
   "STATUS_UNSOLVED": "nevyřešeno",
   "STATUS_SOLVED": "vyřešeno",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "nedostupné",
-  "CALL_FOR_CONTRIBUTIONS": "Máte nápad na nový úkol? Nalezli jste bezpečnostní chybu, která není v úkolech? Dejte nám vědět prostřednictvím <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> komunitního chatu nebo otevřením chyby na <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a>!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Prosíme, pomozte nám udělat {{appname}} ještě lepší vyplněním našeho <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>uživatelského dotazníku</a>!",
   "CHALLENGE_SOLVED": "Úspešně jste vyřešili výzvu: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Kód pro pokračování není platný.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Přidat do Košíku",
   "BTN_SHOW_ALL": "Zobrazit vše",
   "BTN_SHOW_UNAVAILABLE": "Zobrazit nedostupné",
-  "INFO_DISABLED_CHALLENGES": "{{num}} výzvy nejsou k dispozici v {{env}} kvůli <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>bezpečnostním obavám</a> nebo technické nekompatibilitě!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Skrýt vše",
   "TYPE_THESE_LETTERS": "Napište {{length}} písmen",
   "BTN_REQUEST": "Žádost",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Dokončete {{tier}} výzvy z tutoriálu, abyste odhalili další obtížnostní tier!",
   "SHOW_COMMENT": "Zobrazit komentář",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Kliknutím se naučíte, jak se podobným zranitelnostem vyhnout nebo je zmírnit!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Uložte si do souboru svůj postup výzev a nastavení aplikace.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Obnovte ze souboru svůj postup výzev a nastavení aplikace.",
   "TAG_DANGER_ZONE": "Nebezpečná zóna",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Zvýrazňuje výzvy, které se méně týkají zranitelných míst, ale prosazují dobré (bezpečnostní) postupy.",
   "TAG_CODE_ANALYSIS": "Analýza kódu",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Označuje výzvy, kde může být užitečné prolouskat pomocí nějakého zdrojového kódu aplikace nebo třetí strany.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Prolomené řízení přístupu",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Prolomená Anti automatizace",
   "CATEGORY_BROKEN_AUTHENTICATION": "Prolomená autentizace",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Najít to",
   "TAB_FIX_IT": "Opravit",
   "TITLE_CODING_SCORE": "Programovací skóre",
-  "LABEL_FEEDBACK": "Zpětná vazba"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Zpětná vazba",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/da_DK.json b/frontend/src/assets/i18n/da_DK.json
index 653ae93421a..00adea87dc4 100644
--- a/frontend/src/assets/i18n/da_DK.json
+++ b/frontend/src/assets/i18n/da_DK.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Status",
   "STATUS_UNSOLVED": "ikke løst",
   "STATUS_SOLVED": "løst",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "utilgængelig",
-  "CALL_FOR_CONTRIBUTIONS": "Har du en idé til en ny udfordring? Har du fundet en sårbarhed, der ikke spores her? Lad os vide via <a ref='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i></a>Gitter.im</a> community chat eller ved at åbne en <a ref='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> problem!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Hjælp os med at gøre {{appname}} endnu bedre for dig ved at udfylde vores <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i> spørgeskema</a>!",
   "CHALLENGE_SOLVED": "Det lykkedes dig at løse en udfordring: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Ugyldig kode for fortsættelse.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Føj til kurv",
   "BTN_SHOW_ALL": "Vis alle",
   "BTN_SHOW_UNAVAILABLE": "Vis utilgængelige",
-  "INFO_DISABLED_CHALLENGES": "{{num}} udfordringer er utilgængelige på {{env}} på grund af <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>sikkerhedsproblemer</a> eller teknisk inkompatibilitet!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Skjul alle",
   "TYPE_THESE_LETTERS": "Skriv disse {{length}} bogstaver",
   "BTN_REQUEST": "Anmodning",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Færdiggør {{tier}} træningsudfordringer for at tilgå den næste sværhedsgrads!",
   "SHOW_COMMENT": "Vis kommentar",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Klik for at lære hvordan man undgår eller håndterer lignende sårbarheder!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Gem fremskridt og applikationsindstillinger til fil.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Gendan fremskridt og applikationsindstillinger fra fil.",
   "TAG_DANGER_ZONE": "Farezone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Fremhæver udfordringer som handler mindre om sårbarheder men fremmer god (sikkerheds) skik.",
   "TAG_CODE_ANALYSIS": "Kode Analyse",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Markerer udfordringer, hvor det kan være nyttigt at gennemrode noget af applikationens eller en tredjeparts kildekode.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Defekt Adgangskontrol",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Defekt Anti Automatisering",
   "CATEGORY_BROKEN_AUTHENTICATION": "Defekt Autentificering",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find det",
   "TAB_FIX_IT": "Ret det",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/de_CH.json b/frontend/src/assets/i18n/de_CH.json
index d4b7c3924e3..812811ff798 100644
--- a/frontend/src/assets/i18n/de_CH.json
+++ b/frontend/src/assets/i18n/de_CH.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Status",
   "STATUS_UNSOLVED": "unglöst",
   "STATUS_SOLVED": "glöst",
+  "STATUS_PARTIALLY_SOLVED": "teilweise gelöst",
   "STATUS_UNAVAILABLE": "nid verfügbar",
-  "CALL_FOR_CONTRIBUTIONS": "Hesch ä Idee für ne nöie Useforderig? Hesch ä Schwachsteu gfunge, wo hie nid ufgfüert isch? Gib nis Bscheid via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> Community-Chat oder ersteu ä <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> Issue!",
+  "STATUS_ALL": "alle",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Bitte hilf uns, {{appname}} für dich noch besser zu machen, indem du unseren <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>Anwenderfragebogen</a> beantwortest!",
   "CHALLENGE_SOLVED": "Guet gmacht! Du hesch erfougrich ä Useforderig glöst: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Ungüutige Code zum Witermache.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "I z Ichoufschörbli packe",
   "BTN_SHOW_ALL": "Aui zeige",
   "BTN_SHOW_UNAVAILABLE": "Nicht verfügbare anzeigen",
-  "INFO_DISABLED_CHALLENGES": "{{num}} Herausforderungen sind in einer {{env}}-Umgebung wegen <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>Sicherheitsbedenken</a> oder technischer Inkompatibilität nicht verfügbar!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} Herausforderungen sind in einer {{env}}-Umgebung wegen <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>Sicherheitsbedenken</a> oder technischer Inkompatibilität nicht verfügbar!",
+  "SHOW_DISABLED_CHALLENGES": "Trotzdem anzeigen",
+  "HIDE_DISABLED_CHALLENGES": "Deaktivierte Herausforderungen ausblenden",
   "BTN_HIDE_ALL": "Aui usblände",
   "TYPE_THESE_LETTERS": "Gib diese {{length}} Zeichen ein",
   "BTN_REQUEST": "Afrag",
@@ -315,7 +319,7 @@
   "IMAGE_UPLOAD_SUCCESS": "Dein Foto wurde erfolgreich hochgeladen.",
   "EMPTY_MEMORY_LIST": "Bisher wurden keine Erinnerungen geteilt.",
   "LABEL_DELUXE_MEMBERSHIP": "Deluxe-Mitgliedschaft",
-  "DESCRIPTION_DELUXE_MEMBERSHIP": "Enjoy amazing benefits as a deluxe customer of {{appname}}. Check out what is included with your membership.",
+  "DESCRIPTION_DELUXE_MEMBERSHIP": "Genieße erstaunliche Vorteile als Deluxe-Kunde von {{appname}}. Schau dir an, was in deiner Mitgliedschaft enthalten ist.",
   "LABEL_BECOME_MEMBER": "Mitglied werden",
   "LABEL_DEALS_OFFERS": "Schnäppchen und Angebote",
   "DESCRIPTION_DEALS_OFFERS": "Als Deluxe-Mitglied erhältst du Zugang zu exklusiven Schnäppchen und unwiderstehlichen Angeboten.",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Schließe die {{tier}} Tutorial-Herausforderungen ab, um die nächste Schwierigkeitsstufe zu enthüllen!",
   "SHOW_COMMENT": "Kommentar anzeigen",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Klicke, um zu lernen, wie man ähnliche Schwachstellen vermeidet oder abmildert!",
+  "BACKUP_HEADLINE": "Datei-Backups",
+  "BTN_SAVE_BACKUP": "Backup speichern",
   "SAVE_BACKUP_TOOLTIP": "Fortschritt bei Herausforderungen und Anwendungseinstellungen in Datei speichern.",
+  "BTN_RESTORE_BACKUP": "Backup wiederherstellen",
   "RESTORE_BACKUP_TOOLTIP": "Fortschritt bei Herausforderungen und Anwendungseinstellungen aus Datei wiederherstellen.",
   "TAG_DANGER_ZONE": "Gefahrenzone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Markiert potenziell gefährliche Herausforderungen, die bei Docker/Heroku/Gitpod standardmäßig aufgrund von RCE oder anderen Risiken deaktiviert werden.",
@@ -362,7 +369,7 @@
   "TAG_PREREQUISITE": "Voraussetzung",
   "TAG_PREREQUISITE_DESCRIPTION": "Markiert Herausforderungen, die gelöst werden müssen, bevor eine oder mehrere andere Herausforderungen (realistisch) gelöst werden können.",
   "TAG_OSINT": "OSINT",
-  "TAG_OSINT_DESCRIPTION": "Marks challenges which require some Internet research or \"social stalking\" activity outside the application.",
+  "TAG_OSINT_DESCRIPTION": "Markiert Herausforderungen, die ein gewisses Maß an Internet-Nachforschungen oder \"Social Stalking\"-Aktivität außerhalb der Anwendung erfordern.",
   "TAG_CONTRAPTION": "Apparatur",
   "TAG_CONTRAPTION_DESCRIPTION": "Zeigt an, dass eine Herausforderung nicht wirklich Teil eines realistischen Szenarios, sondern eher ein bisschen erzwungen oder konstruiert ist.",
   "TAG_SHENANIGANS": "Unfug",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Hebt Herausforderungen hervor, bei denen es weniger um Schwachstellen als um Förderung guter (Sicherheits-)Praktiken geht.",
   "TAG_CODE_ANALYSIS": "Code-Analyse",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Markiert Herausforderungen, bei denen es hilfreich sein kann, sich durch Quellcode der Anwendung oder eines Dritten zu wühlen.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Markiert Herausforderungen, die Web3-Konzepte oder -Technologien wie Blockchain, Kryptowährungen, Smart Contracts oder NFT einbinden.",
+  "TAG_INTERNET_TRAFFIC": "Internetverkehr",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Markiert Herausforderungen, die streng abhängig davon sind, dass der Server sich z.B. über WebSocket oder JSON-RPC mit dem Internet verbinden kann.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Fehler in der Zugriffskontrolle",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Fehlerhafte Anti-Automatisierung",
   "CATEGORY_BROKEN_AUTHENTICATION": "Fehler in der Authentifizierung",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Finde es",
   "TAB_FIX_IT": "Fixe es",
   "TITLE_CODING_SCORE": "Programmier-Punkte",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Progammierherausforderungen",
+  "TITLE_HACKING_CHALLENGES": "Hacking-Herausforderungen",
+  "TITLE_CHALLENGES_SOLVED": "Gelöste Herausforderungen",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Alle Filter zurücksetzen",
+  "NO_CHALLENGES_FOUND": "Keine Herausforderungen gefunden, die deinen Filtern entsprechen!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "Dies ist eine Vorschau auf die neue Punkteübersicht. Sie könnte noch einige Fehler enthalten.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "Dies ist eine Vorschau auf die neue Punkteübersicht. Wenn du Fehler bemerkst oder Feedback hast, lass es uns bitte wissen! Melde dich über  <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>Community-Kanäle</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Zurück zur alten Punkteübersicht",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Punkteübersicht zu langsam oder zu verwirrend?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Sieh dir die Vorschau unserer neuen Punkteübersicht an!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Zusätzliche Einstellungen der Punkteübersicht",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Standardmäßige Punkteübersicht",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Wähle die in der Seitenleiste zu verlinkende Punkteübersicht",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Alte Punkteübersicht",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Vorschau-Punkteübersicht",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Probiere unsere neue Krypto-Brieftasche aus",
+  "TITLE_CRYPTO_WALLET": "Krypto-Brieftasche",
+  "BTN_CONNECT_METAMASK": "Verbinde Deine MetaMask",
+  "BTN_DEPOSIT": "Einzahlen",
+  "BTN_WITHDRAW": "Abheben",
+  "ENTER_ETHER_AMOUNT": "Ether-Betrag für Einzahlung/Auszahlung eingeben",
+  "PLEASE_INSTALL_WEB3_WALLET": "Bitte installiere eine Web3-Wallet wie MetaMask um fortzufahren.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Bitte verbinde Dich mit dem Sepolia-Netzwerk.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Bitte verbinde zuerst deine Web3-Brieftasche.",
+  "TITLE_CONTRACT_EDITOR": "Vertragseditor",
+  "TITLE_WEB3_SANDBOX": "Web3-Code Sandkasten",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Einfach von unten Smart Contracts kompilieren/ausliefern",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "Du kannst ETH nach der Kompilierung gleichermaßen beim Aufrufen/Ausliefern durch Eingabe des GWEI-Werts an den Vertrag übergeben",
+  "LABEL_SELECT_COMPILER_VERSION": "Compiler-Version auswählen",
+  "BTN_COMPILE_CONTRACT": "Vertrag kompilieren",
+  "TITLE_CONTRACT_DEPLOYMENT": "Auszuliefernder Vertrag",
+  "LABEL_COMPILED_CONTRACTS": "Kompilierte Verträge",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI-Wert um ETH zu senden",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Ausgewählten Vertrag ausliefern",
+  "LABEL_CONTRACT_ADDRESS": "Vertragsadresse",
+  "TITLE_INTERACT_WITH_CONTRACT": "Mit Vertrag interagieren",
+  "BTN_INVOKE": "Aufrufen von",
+  "LABEL_OUTPUT_FOR": "Ausgabe für",
+  "LABEL_OUTPUT": "Ausgabe",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Hinweis: Verrate niemals jemandem deine privaten Schlüssel und Seed-Phrase",
+  "LABEL_PRIVATE_KEY": "Privaten Schlüssel eingeben",
+  "BTN_AUTHENTICATE": "Authentifizieren",
+  "LABEL_ACCOUNT_ADDRESS": "Konto-Adresse",
+  "OWNED_BY": "Im Besitz von",
+  "NFT_SBT_BOX_TEXT": "Hurra! Finde den Juice Shop SBT auf {{link}}. Dies ist ein nicht übertragbares Token und bleibt für immer hier.",
+  "FAUCET_BALANCE": "Faucet Saldo",
+  "BEE_BALANCE": "Dein BEE-Saldo",
+  "TITLE_BEE_HAVEN": "BEE-Oase",
+  "BEE_HAVEN_INTRO": "Willkommen in der Bienen-Oase, dem Bienenstock für BEE Tokens! Tauche ein in die Hektik, denn unser großzügiger Bienenbesitzer teilt die Freude an Bienen mit dir. Emfange ihre großzügige Großzügigkeit mit offenen Armen, aber bedenke, dass zu viele Bienen auf einmal zu nehmen, ihre harmonische Unterkunft in Unruhe versetzen könnte.",
+  "LABEL_NUMBER_OF_BEES": "Gib die Anz. BEEs ein:",
+  "BTN_CLAIM_BEES": "BEEs einfordern",
+  "BEE_HONEYPOT_TITLE": "Der verzauberte Honigtopf",
+  "BEE_HONEYPOT_DESCRIPTION": "Tief im magischen Reich wartet der verzauberte Honigtopf auf seinen rechtmäßigen Besitzer. Um seine Wunder freizuschalten, musst du die Essenz des blühenden Königreichs - BEE-Tokens - eintauschen. Sammle diese mystischen Tokens in der großzügigen Bienen-Oase ein.",
+  "NFT_MINT_TEXT_INTRO": "Präge den Topf - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Erfolgreich geprägt",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Warte auf Freigabe",
+  "NFT_MINT_TEXT_CONFIRM": "Prägung bestätigen...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Prägung in Arbeit..."
 }
diff --git a/frontend/src/assets/i18n/de_DE.json b/frontend/src/assets/i18n/de_DE.json
index b5c501df984..1fa274053ed 100644
--- a/frontend/src/assets/i18n/de_DE.json
+++ b/frontend/src/assets/i18n/de_DE.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Status",
   "STATUS_UNSOLVED": "ungelöst",
   "STATUS_SOLVED": "gelöst",
+  "STATUS_PARTIALLY_SOLVED": "teilweise gelöst",
   "STATUS_UNAVAILABLE": "nicht verfügbar",
-  "CALL_FOR_CONTRIBUTIONS": "Du hast eine Idee für eine neue Herausforderung? Du hast eine Schwachstelle gefunden, die hier nicht aufgeführt ist? Gib uns Bescheid via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> Community-Chat oder eröffne ein <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> Issue!",
+  "STATUS_ALL": "alle",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Bitte hilf uns, {{appname}} für dich noch besser zu machen, indem du unseren <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>Anwenderfragebogen</a> beantwortest!",
   "CHALLENGE_SOLVED": "Du hast erfolgreich eine Herausforderung gelöst: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Ungültiger Fortsetzungs-Code.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Zum Warenkorb hinzufügen",
   "BTN_SHOW_ALL": "Alle anzeigen",
   "BTN_SHOW_UNAVAILABLE": "Nicht verfügbare anzeigen",
-  "INFO_DISABLED_CHALLENGES": "{{num}} Herausforderungen sind in einer {{env}}-Umgebung wegen <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>Sicherheitsbedenken</a> oder technischer Inkompatibilität nicht verfügbar!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} Herausforderungen sind in einer {{env}}-Umgebung wegen <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>Sicherheitsbedenken</a> oder technischer Inkompatibilität nicht verfügbar!",
+  "SHOW_DISABLED_CHALLENGES": "Trotzdem anzeigen",
+  "HIDE_DISABLED_CHALLENGES": "Deaktivierte Herausforderungen ausblenden",
   "BTN_HIDE_ALL": "Alle ausblenden",
   "TYPE_THESE_LETTERS": "Gib diese {{length}} Zeichen ein",
   "BTN_REQUEST": "Anfordern",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Schließe die {{tier}} Tutorial-Herausforderungen ab, um die nächste Schwierigkeitsstufe zu enthüllen!",
   "SHOW_COMMENT": "Kommentar anzeigen",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Klicke, um zu lernen, wie man ähnliche Schwachstellen vermeidet oder abmildert!",
+  "BACKUP_HEADLINE": "Datei-Backups",
+  "BTN_SAVE_BACKUP": "Backup speichern",
   "SAVE_BACKUP_TOOLTIP": "Fortschritt bei Herausforderungen und Anwendungseinstellungen in Datei speichern.",
+  "BTN_RESTORE_BACKUP": "Backup wiederherstellen",
   "RESTORE_BACKUP_TOOLTIP": "Fortschritt bei Herausforderungen und Anwendungseinstellungen aus Datei wiederherstellen.",
   "TAG_DANGER_ZONE": "Gefahrenzone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Markiert potenziell gefährliche Herausforderungen, die bei Docker/Heroku/Gitpod standardmäßig aufgrund von RCE oder anderen Risiken deaktiviert werden.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Hebt Herausforderungen hervor, bei denen es weniger um Schwachstellen als um Förderung guter (Sicherheits-)Praktiken geht.",
   "TAG_CODE_ANALYSIS": "Code-Analyse",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Markiert Herausforderungen, bei denen es hilfreich sein kann, sich durch Quellcode der Anwendung oder eines Dritten zu wühlen.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Markiert Herausforderungen, die Web3-Konzepte oder -Technologien wie Blockchain, Kryptowährungen, Smart Contracts oder NFT einbinden.",
+  "TAG_INTERNET_TRAFFIC": "Internetverkehr",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Markiert Herausforderungen, die streng abhängig davon sind, dass der Server sich z.B. über WebSocket oder JSON-RPC mit dem Internet verbinden kann.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Fehler in der Zugriffskontrolle",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Fehlerhafte Anti-Automatisierung",
   "CATEGORY_BROKEN_AUTHENTICATION": "Fehler in der Authentifizierung",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Finde es",
   "TAB_FIX_IT": "Fixe es",
   "TITLE_CODING_SCORE": "Programmier-Punkte",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Progammierherausforderungen",
+  "TITLE_HACKING_CHALLENGES": "Hacking-Herausforderungen",
+  "TITLE_CHALLENGES_SOLVED": "Gelöste Herausforderungen",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Alle Filter zurücksetzen",
+  "NO_CHALLENGES_FOUND": "Keine Herausforderungen gefunden, die deinen Filtern entsprechen!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "Dies ist eine Vorschau auf die neue Punkteübersicht. Sie könnte noch einige Fehler enthalten.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "Dies ist eine Vorschau auf die neue Punkteübersicht. Wenn du Fehler bemerkst oder Feedback hast, lass es uns bitte wissen! Melde dich über  <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>Community-Kanäle</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Zurück zur alten Punkteübersicht",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Punkteübersicht zu langsam oder zu verwirrend?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Sieh dir die Vorschau unserer neuen Punkteübersicht an!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Zusätzliche Einstellungen der Punkteübersicht",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Standardmäßige Punkteübersicht",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Wähle die in der Seitenleiste zu verlinkende Punkteübersicht",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Alte Punkteübersicht",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Vorschau-Punkteübersicht",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Probiere unsere neue Krypto-Brieftasche aus",
+  "TITLE_CRYPTO_WALLET": "Krypto-Brieftasche",
+  "BTN_CONNECT_METAMASK": "Verbinde Deine MetaMask",
+  "BTN_DEPOSIT": "Einzahlen",
+  "BTN_WITHDRAW": "Abheben",
+  "ENTER_ETHER_AMOUNT": "Ether-Betrag für Einzahlung/Auszahlung eingeben",
+  "PLEASE_INSTALL_WEB3_WALLET": "Bitte installiere eine Web3-Wallet wie MetaMask um fortzufahren.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Bitte verbinde Dich mit dem Sepolia-Netzwerk.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Bitte verbinde zuerst deine Web3-Brieftasche.",
+  "TITLE_CONTRACT_EDITOR": "Vertragseditor",
+  "TITLE_WEB3_SANDBOX": "Web3-Code Sandkasten",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Einfach von unten Smart Contracts kompilieren/ausliefern",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "Du kannst ETH nach der Kompilierung gleichermaßen beim Aufrufen/Ausliefern durch Eingabe des GWEI-Werts an den Vertrag übergeben",
+  "LABEL_SELECT_COMPILER_VERSION": "Compiler-Version auswählen",
+  "BTN_COMPILE_CONTRACT": "Vertrag kompilieren",
+  "TITLE_CONTRACT_DEPLOYMENT": "Auszuliefernder Vertrag",
+  "LABEL_COMPILED_CONTRACTS": "Kompilierte Verträge",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI-Wert um ETH zu senden",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Ausgewählten Vertrag ausliefern",
+  "LABEL_CONTRACT_ADDRESS": "Vertragsadresse",
+  "TITLE_INTERACT_WITH_CONTRACT": "Mit Vertrag interagieren",
+  "BTN_INVOKE": "Aufrufen von",
+  "LABEL_OUTPUT_FOR": "Ausgabe für",
+  "LABEL_OUTPUT": "Ausgabe",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Hinweis: Verrate niemals jemandem deine privaten Schlüssel und Seed-Phrase",
+  "LABEL_PRIVATE_KEY": "Privaten Schlüssel eingeben",
+  "BTN_AUTHENTICATE": "Authentifizieren",
+  "LABEL_ACCOUNT_ADDRESS": "Konto-Adresse",
+  "OWNED_BY": "Im Besitz von",
+  "NFT_SBT_BOX_TEXT": "Hurra! Finde den Juice Shop SBT auf {{link}}. Dies ist ein nicht übertragbares Token und bleibt für immer hier.",
+  "FAUCET_BALANCE": "Faucet Saldo",
+  "BEE_BALANCE": "Dein BEE-Saldo",
+  "TITLE_BEE_HAVEN": "BEE-Oase",
+  "BEE_HAVEN_INTRO": "Willkommen in der Bienen-Oase, dem Bienenstock für BEE Tokens! Tauche ein in die Hektik, denn unser großzügiger Bienenbesitzer teilt die Freude an Bienen mit dir. Emfange ihre großzügige Großzügigkeit mit offenen Armen, aber bedenke, dass zu viele Bienen auf einmal zu nehmen, ihre harmonische Unterkunft in Unruhe versetzen könnte.",
+  "LABEL_NUMBER_OF_BEES": "Gib die Anz. BEEs ein:",
+  "BTN_CLAIM_BEES": "BEEs einfordern",
+  "BEE_HONEYPOT_TITLE": "Der verzauberte Honigtopf",
+  "BEE_HONEYPOT_DESCRIPTION": "Tief im magischen Reich wartet der verzauberte Honigtopf auf seinen rechtmäßigen Besitzer. Um seine Wunder freizuschalten, musst du die Essenz des blühenden Königreichs - BEE-Tokens - eintauschen. Sammle diese mystischen Tokens in der großzügigen Bienen-Oase ein.",
+  "NFT_MINT_TEXT_INTRO": "Präge den Topf - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Erfolgreich geprägt",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Warte auf Freigabe",
+  "NFT_MINT_TEXT_CONFIRM": "Prägung bestätigen...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Prägung in Arbeit..."
 }
diff --git a/frontend/src/assets/i18n/el_GR.json b/frontend/src/assets/i18n/el_GR.json
index 925b2536715..c3a67987810 100644
--- a/frontend/src/assets/i18n/el_GR.json
+++ b/frontend/src/assets/i18n/el_GR.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Κατάσταση",
   "STATUS_UNSOLVED": "Ανολοκλήρωτο",
   "STATUS_SOLVED": "Ολοκληρωμένο",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "Μη διαθέσιμο",
-  "CALL_FOR_CONTRIBUTIONS": "Έχετε να προτείνετε κάποια νέα Δοκιμασία; Βρήκατε κάποια ευπάθεια που δέν παρουσιάζεται; Ενημερώστε μας στο <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat ή καταχωρώντας ένα <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "Ολοκληρώσατε με επιτυχία μία Δοκιμασία: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Μή έγκυρος κώδικας συνέχειας (continue code).",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "Εμφάνιση όλων",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Aπόκρυψη όλων",
   "TYPE_THESE_LETTERS": "Πληκτρολογήστε τα παρακάτω {{length}} γράμματα",
   "BTN_REQUEST": "Αίτημα",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/en.json b/frontend/src/assets/i18n/en.json
index a49568db787..6ace158e3fa 100644
--- a/frontend/src/assets/i18n/en.json
+++ b/frontend/src/assets/i18n/en.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Status",
   "STATUS_UNSOLVED": "unsolved",
   "STATUS_SOLVED": "solved",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "unavailable",
-  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "You successfully solved a challenge: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Invalid continue code.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "Show all",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Hide all",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "Request",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/es_ES.json b/frontend/src/assets/i18n/es_ES.json
index 9ddab250b3d..6a8fdd7db12 100644
--- a/frontend/src/assets/i18n/es_ES.json
+++ b/frontend/src/assets/i18n/es_ES.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Estado",
   "STATUS_UNSOLVED": "no resuelto",
   "STATUS_SOLVED": "resuelto",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "no disponible",
-  "CALL_FOR_CONTRIBUTIONS": "¿Tiene alguna idea para un nuevo desafío? Ha encontrado alguna vulnerabilidad que no se encuentra aquí? Háganoslo saber en <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> o abriendo un nuevo issue en <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a>!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "¡Por favor, ayúdanos a mejorar {{appname}} respondiendo a nuestro <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>cuestionario</a>!",
   "CHALLENGE_SOLVED": "Ha resuelto correctamente el desafío: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Código de seguimiento no válido.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Agregar a Carrito de Compras",
   "BTN_SHOW_ALL": "Mostrar todo",
   "BTN_SHOW_UNAVAILABLE": "Mostrar no disponibles ",
-  "INFO_DISABLED_CHALLENGES": "¡{{num}} retos no están disponibles en {{env}} por <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>razones de seguridad</a> o incompatibilidad técnica!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Ocultar todo",
   "TYPE_THESE_LETTERS": "Introduzca las siguientes {{length}} letras",
   "BTN_REQUEST": "Solicitar",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Completa los desafíos del tutorial del {{tier}} para obtener acceso al siguiente nivel de dificultad",
   "SHOW_COMMENT": "Mostrar comentario",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Haz clic para aprender como evitar y mitigar vulnerabilidades similares!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Guardar el progreso del desafío y la configuración de la aplicación a un archivo.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restaurar el progreso del desafío y la configuración de la aplicación desde un archivo.",
   "TAG_DANGER_ZONE": "Zona de Peligro",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Destaca los desafíos que tienen menos que ver con las vulnerabilidades pero que promueven buenas prácticas (de seguridad).",
   "TAG_CODE_ANALYSIS": "Análisis de Código",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Control de acceso roto",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Anti automatización descompuesta",
   "CATEGORY_BROKEN_AUTHENTICATION": "Autenticación descompuesta",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/et_EE.json b/frontend/src/assets/i18n/et_EE.json
index 4b3e87f95a6..d0c38782fb8 100644
--- a/frontend/src/assets/i18n/et_EE.json
+++ b/frontend/src/assets/i18n/et_EE.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Olek",
   "STATUS_UNSOLVED": "lahendamata",
   "STATUS_SOLVED": "lahendatud",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "pole saadaval",
-  "CALL_FOR_CONTRIBUTIONS": "Sul on uue väljakutse idee? Leidsid turvavea, mida tulemuste tabelis ei ole? Anna meile teada <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a>'i vestluse kaudu või loo uus <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a>'i veateade!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Aidake meil muuta {{appname}} teie jaoks veelgi paremaks vastates meie <a href='{{questionnaire}}'><i class = 'fas fa-poll-h'></i>kasutajaküsimustikule</a>!",
   "CHALLENGE_SOLVED": "Sa lahendasid edukalt väljakutse: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Vigane jätkamis koos.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Lisa korvi",
   "BTN_SHOW_ALL": "Kuva kõik",
   "BTN_SHOW_UNAVAILABLE": "Kuba mitte saadaval",
-  "INFO_DISABLED_CHALLENGES": "{{num}} väljakutset pole {{env}} saidil saadaval seoses <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potential-dangerous-challenges'>turvaprobleemide</ a> või tehnilise sobimatuse tulemusel!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Peida kõik",
   "TYPE_THESE_LETTERS": "Tippige need {{length}} tähte",
   "BTN_REQUEST": "Päring",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Lõpeta {{tier}} õpetavad väljakutsed, et saada juurdepääs järgmisele raskusastmele",
   "SHOW_COMMENT": "Kuva kommentaar",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Kliki, et õppida kuidas ennetada või parandada taolisi vigu!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Salvesta väljakutse edenemine ja rakenduse sätted faili.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Taasta väljakutse edenemine ja rakenduse sätted failist.",
   "TAG_DANGER_ZONE": "Ohutsoon",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Toonitab väljakutsed, mis propageerivad häid (turva) tavasid ja vähem haavatavusi.",
   "TAG_CODE_ANALYSIS": "Koodianalüüs",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Märgistab väljakutsed, mille puhul võib olla kasulik uurida rakenduse või kolmanda osapoole lähtekoodi.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Katkine juurdepääsukontroll",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Katkine automaatika",
   "CATEGORY_BROKEN_AUTHENTICATION": "Katkine autentimine",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/fi_FI.json b/frontend/src/assets/i18n/fi_FI.json
index 214a14896b0..f89c6d36f04 100644
--- a/frontend/src/assets/i18n/fi_FI.json
+++ b/frontend/src/assets/i18n/fi_FI.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Tila",
   "STATUS_UNSOLVED": "ratkaisematta",
   "STATUS_SOLVED": "ratkaistu",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "ei saatavilla",
-  "CALL_FOR_CONTRIBUTIONS": "Onko sinulla idea uudesta tehtävästä ? Löysitkö haavoittuvuuden, jota ei ole täällä ? Vinkaa meille  <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitterissä</a> chatissa tai avaa  <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Auta meitä kehittämään {{appname}} sovellusta entistäkin paremmaksi vastaamalla href='{{questionnaire}}'><i class='fas fa-poll-h'></i>käyttäjäkyselyyn</a>!",
   "CHALLENGE_SOLVED": "Olet onnistuneesti ratkaissut tehtävän: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Koodi ei kelpaa",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Lisää ostoskoriin",
   "BTN_SHOW_ALL": "Näytä kaikki",
   "BTN_SHOW_UNAVAILABLE": "Näytä ei-saatavilla olevat",
-  "INFO_DISABLED_CHALLENGES": "{{num}} haastetta ei voida näyttää {{env}}  <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>tietoturvasyiden</a>  tai teknisten ongelmien takia !",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Piilota kaikki",
   "TYPE_THESE_LETTERS": "Kirjoita nämä  {{length}} kirjainta",
   "BTN_REQUEST": "Pyyntö",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Suorita {{tier}} tehtävät nähdäksesi seuraavan vaikeustason tehtävät !",
   "SHOW_COMMENT": "Näytä kommentti",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Klikkaa oppiaksesi kuinka välttyä samanlaisilta haavoittuvuuksilta tai kuinka voit pienentää niiden vaikutusta!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Tallenna haasteen edistyminen ja sovelluksen asetukset tiedostoon.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Lataa tehtävän edistyminen ja sovelluksen asetukset tiedostosta.",
   "TAG_DANGER_ZONE": "Vaaravyöhyke",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/fr_FR.json b/frontend/src/assets/i18n/fr_FR.json
index 997e632857f..a11f8e4dc62 100644
--- a/frontend/src/assets/i18n/fr_FR.json
+++ b/frontend/src/assets/i18n/fr_FR.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Statut",
   "STATUS_UNSOLVED": "non résolu",
   "STATUS_SOLVED": "résolu",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "indisponible",
-  "CALL_FOR_CONTRIBUTIONS": "Une idée de challenge ? Vous avez trouvé une faille non répertorié ? Faites le nous savoir via le chat de communauté <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> ou en ouvrant une issue <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> !",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Aidez-nous à rendre {{appname}} encore meilleur pour vous en répondant à notre  <a href='{{questionnaire}}'><i class='fas fa-poll-h'>questionnaire utilisateur</i></a>!",
   "CHALLENGE_SOLVED": "Vous avez résolu avec succès un challenge : {{challenge}}",
   "INVALID_CONTINUE_CODE": "Code invalide.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Ajouter au panier",
   "BTN_SHOW_ALL": "Tout afficher",
   "BTN_SHOW_UNAVAILABLE": "Afficher indisponible",
-  "INFO_DISABLED_CHALLENGES": "{{num}} défis sont indisponibles sur {{env}} en raison de <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>problèmes de sécurité</a>ou d'incompatibilité technique!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Tout cacher",
   "TYPE_THESE_LETTERS": "Tapez ces {{length}} lettres",
   "BTN_REQUEST": "Demander",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "achevez les défis du tutoriel {{tier}} pour dévoiler le niveau de difficulté suivant!",
   "SHOW_COMMENT": "Afficher le commentaire",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Cliquez pour apprendre comment éviter ou atténuer les vulnérabilités similaires!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Enregistrer la progression du défi et les paramètres de l'application dans un fichier.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restaurer la progression du défi et les paramètres de l'application à partir du fichier.",
   "TAG_DANGER_ZONE": "Zone à risque",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marque les défis potentiellement dangereux qui sont désactivés sur Docker/Heroku par défaut en raison de RCE ou d'autres risques.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Souligne les défis qui sont moins en ce qui concerne les vulnérabilités mais la promotion de bonnes pratiques (sécurité).",
   "TAG_CODE_ANALYSIS": "Analyse de code",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marque les défis où il peut être utile de fouiller à travers un code source de l'application ou un tiers.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Contrôle d'accès rompu",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Anti-automatisation brisée",
   "CATEGORY_BROKEN_AUTHENTICATION": "Authentification rompue",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Trouvez-le!",
   "TAB_FIX_IT": "Réparez-le !",
   "TITLE_CODING_SCORE": "Score de codage",
-  "LABEL_FEEDBACK": "Commentaires"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Commentaires",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/ga_IE.json b/frontend/src/assets/i18n/ga_IE.json
index 16925281e23..a25037ed4dd 100644
--- a/frontend/src/assets/i18n/ga_IE.json
+++ b/frontend/src/assets/i18n/ga_IE.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Status",
   "STATUS_UNSOLVED": "unsolved",
   "STATUS_SOLVED": "solved",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "unavailable",
-  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "You successfully solved a challenge: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Invalid continue code.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "Show all",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Hide all",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "Request",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/he_IL.json b/frontend/src/assets/i18n/he_IL.json
index 1cf5b338ae3..cc7938e37de 100644
--- a/frontend/src/assets/i18n/he_IL.json
+++ b/frontend/src/assets/i18n/he_IL.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "סטטוס",
   "STATUS_UNSOLVED": "לא נפתר",
   "STATUS_SOLVED": "נפתר",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "לא זמין",
-  "CALL_FOR_CONTRIBUTIONS": "יש לך רעיון לאתגר חדש? מצאת חשיפה שלא נמצאת ברשימה? אפשר ליידע אותנו באמצעות צ'אט הקהילה <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> או על-ידי פתיחת באג ב<a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a>!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "אנא עזרו לנו להפוך את {{appname}} לטוב אפילו יותר עבורכם על ידי מענה על <a href='{{questionnaire}}'>שאלון המשתמש שלנו</a>! ",
   "CHALLENGE_SOLVED": "פתרת בהצלחה אתגר: {{challenge}}",
   "INVALID_CONTINUE_CODE": "קוד המשך לא תקין.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "הוסף לסל",
   "BTN_SHOW_ALL": "הצג הכל",
   "BTN_SHOW_UNAVAILABLE": "הצג לא זמינים",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "הסתר הכל",
   "TYPE_THESE_LETTERS": "נא להקליד {{length}} אותיות אלו",
   "BTN_REQUEST": "בקשה",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/hi_IN.json b/frontend/src/assets/i18n/hi_IN.json
index 9b0152fe153..9324f5bb402 100644
--- a/frontend/src/assets/i18n/hi_IN.json
+++ b/frontend/src/assets/i18n/hi_IN.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "स्थिति",
   "STATUS_UNSOLVED": "न सुलझा हुआ",
   "STATUS_SOLVED": "सुलझा हुआ",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "unavailable",
-  "CALL_FOR_CONTRIBUTIONS": "एक नई चुनौती के लिए एक विचार है? एक भेद्यता पाया जो यहां नज़र नहीं आई है? हमें <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> सामुदायिक चैट के माध्यम से या <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> समस्या को खोलकर पता करें!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "आपने सफलतापूर्वक एक चुनौती का समाधान किया: {{challenge}}",
   "INVALID_CONTINUE_CODE": "अमान्य जारी कोड।",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "सभी दिखाएँ",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "सभी छुपाएँ",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "Request",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/hu_HU.json b/frontend/src/assets/i18n/hu_HU.json
index e2ab5fc0825..32c519369d6 100644
--- a/frontend/src/assets/i18n/hu_HU.json
+++ b/frontend/src/assets/i18n/hu_HU.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Állapot",
   "STATUS_UNSOLVED": "megoldatlan",
   "STATUS_SOLVED": "megoldott",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "unavailable",
-  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "You successfully solved a challenge: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Invalid continue code.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "Show all",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Hide all",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "Kérés",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/id_ID.json b/frontend/src/assets/i18n/id_ID.json
index f05e0435f94..990c72c46f9 100644
--- a/frontend/src/assets/i18n/id_ID.json
+++ b/frontend/src/assets/i18n/id_ID.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Status",
   "STATUS_UNSOLVED": "belum terpecahkan",
   "STATUS_SOLVED": "diselesaikan",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "tidak tersedia",
-  "CALL_FOR_CONTRIBUTIONS": "Punya ide untuk tantangan baru? Menemukan kerentanan yang belum dilacak di sini? Beri tahu kami melalui <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> komunitas chat atau dengan membuka pokok persoalan di <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a>!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "Anda berhasil memecahkan tantangan: {{challenge}}",
   "INVALID_CONTINUE_CODE": "melanjutkan kode yang salah.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "Show all",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Hide all",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "Request",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/it_IT.json b/frontend/src/assets/i18n/it_IT.json
index 9eb96e07632..cac3544dc12 100644
--- a/frontend/src/assets/i18n/it_IT.json
+++ b/frontend/src/assets/i18n/it_IT.json
@@ -8,17 +8,17 @@
   "MANDATORY_PASSWORD": "Inserisci una password.",
   "LABEL_EMAIL": "Email",
   "LABEL_PASSWORD": "Password",
-  "SHOW_PASSWORD_ADVICE": "Show password advice",
-  "LOWER_CASE_CRITERIA_MSG": "contains at least one lower character",
-  "UPPER_CASE_CRITERIA_MSG": "contains at least one upper character",
-  "DIGITS_CRITERIA_MSG": "contains at least one digit",
-  "SPECIAL_CHARS_CRITERIA_MSG": "contains at least one special character",
-  "MIN_CHARS_CRITERIA_MSG": "contains at least {{value}} characters",
+  "SHOW_PASSWORD_ADVICE": "Mostra consigli password",
+  "LOWER_CASE_CRITERIA_MSG": "contiene almeno un carattere minuscolo",
+  "UPPER_CASE_CRITERIA_MSG": "contiene almeno un carattere maiuscolo",
+  "DIGITS_CRITERIA_MSG": "contiene almeno una cifra",
+  "SPECIAL_CHARS_CRITERIA_MSG": "contiene almeno un carattere speciale",
+  "MIN_CHARS_CRITERIA_MSG": "contiene almeno {{value}} caratteri",
   "BTN_LOGIN": "Accedi",
   "BTN_GOOGLE_LOGIN": "Accedi con Google",
   "REMEMBER_ME": "Ricordami",
   "NO_CUSTOMER": "Non sei ancora un cliente?",
-  "ALREADY_A_CUSTOMER": "Already a customer?",
+  "ALREADY_A_CUSTOMER": "Già cliente?",
   "TITLE_REGISTRATION": "Registrazione utente",
   "INVALID_EMAIL": "Indirizzo email non valido.",
   "SECURITY_ANSWER": "Risposta",
@@ -27,7 +27,7 @@
   "LABEL_PASSWORD_REPEAT": "Ripeti password",
   "PASSWORDS_NOT_MATCHING": "Le password non corrispondono",
   "BTN_REGISTER": "Registrati",
-  "CONFIRM_REGISTER": "Registration completed successfully. You can now log in.",
+  "CONFIRM_REGISTER": "Registrazione completata con successo. Ora puoi accedere.",
   "TITLE_LOGOUT": "Disconnettiti",
   "CONFIRM_LOGGED_OUT": "Ti sei disconnesso.",
   "TITLE_CONTACT": "Contatto",
@@ -40,14 +40,14 @@
   "LABEL_AUTHOR": "Autore",
   "LABEL_COMMENT": "Commento",
   "LABEL_RATING": "Valutazione",
-  "LABEL_WHAT_IS": "What is",
+  "LABEL_WHAT_IS": "Cos'è",
   "BTN_SUBMIT": "Invia",
   "TITLE_ABOUT": "Chi Siamo",
   "SECTION_CORPORATE_HISTORY": "Storia della Corporazione e Politiche",
   "SECTION_CUSTOMER_FEEDBACK": "Feedback clienti",
-  "SECTION_SUPPORT_CHAT": "Support Chat",
-  "LABEL_POWERED_BY_CHATBOT": "powered by {{chatbot}}",
-  "ASK_ME_ANYTHING_PLACEHOLDER": "Ask me anything in English",
+  "SECTION_SUPPORT_CHAT": "Chat di supporto",
+  "LABEL_POWERED_BY_CHATBOT": "offerto da {{chatbot}}",
+  "ASK_ME_ANYTHING_PLACEHOLDER": "Chiedimi qualsiasi cosa in inglese",
   "SECTION_SOCIAL_MEDIA": "Seguici sui Social Media",
   "LINK_TERMS_OF_USE": "Dai un'occhiata ai nostri termini d'uso se sei interessato a roba così noiosa.",
   "TITLE_ADMINISTRATION": "Amministrazione",
@@ -72,7 +72,7 @@
   "TITLE_BASKET": "Il tuo Carrello",
   "LABEL_QUANTITY": "Quatità",
   "LABEL_TOTAL_PRICE": "Prezzo Totale",
-  "CHECKOUT_FOR_BONUS_POINTS": "You will gain {{bonus}} Bonus Points from this order!",
+  "CHECKOUT_FOR_BONUS_POINTS": "Guadagnerai {{bonus}} Punti Bonus da questo ordine!",
   "BTN_CHECKOUT": "Procedi all'acquisto",
   "BTN_CREDIT_CARD": "Carta di Credito",
   "INVALID_COUPON_LENGTH": "Il coupon deve contenere almeno {{length}} caratteri.",
@@ -113,9 +113,11 @@
   "LABEL_STATUS": "Stato",
   "STATUS_UNSOLVED": "non risolto",
   "STATUS_SOLVED": "risolto",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "non disponibile",
-  "CALL_FOR_CONTRIBUTIONS": "Hai un'idea per una nuova sfida? Hai trovato una vulnerabilità che non viene rilevata qui? Fateci sapere tramite la chat della community <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> o aprendo un problema su <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a>!",
-  "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
+  "CALL_FOR_FEEDBACK": "Aiutaci a rendere {{appname}} ancora megliore per te rispondendo al nostro  <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>questionario utente</a>!",
   "CHALLENGE_SOLVED": "Hai risolto con successo una sfida: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Codice continuato invalido.",
   "CONFIRM_LOGGED_IN_VIA_OAUTH2": "Ti sei connesso tramite OAuth 2.0.",
@@ -170,102 +172,104 @@
   "TITLE_TRACK_ORDERS": "Traccia Ordini",
   "LABEL_ORDER_ID": "ID dell'ordine",
   "BTN_TRACK": "Traccia",
-  "LAST_LOGIN_IP": "Last Login IP",
+  "LAST_LOGIN_IP": "Ultimo Login IP",
   "BTN_EDIT": "Modifica",
-  "INVALID_DATE": "Please provide a valid date.",
-  "SECURITY_ANSWER_PLACEHOLDER": "Answer to your security question",
-  "MANDATORY_ORDER_ID": "Please provide an Order ID.",
-  "BTN_SHOW_SOLVED": "Show solved",
-  "TITLE_TWO_FACTOR_AUTH_ENTER": "Enter the 6 digit token from your 2FA app",
-  "LABEL_TWO_FACTOR_AUTH_TOKEN": "2FA Token",
-  "CONFIRM_2FA_SETUP": "Setup of Two-Factor Authentication successfully completed.",
-  "CONFIRM_2FA_DISABLE": "Two-Factor Authentication has been removed.",
-  "INVALID_TWO_FACTOR_AUTH_TOKEN": "The token appears to be invalid.",
-  "UNAUTHORIZED_PAGE_ACCESS_ERROR": "You are not allowed to access this page!",
+  "INVALID_DATE": "Inserisci una data valida.",
+  "SECURITY_ANSWER_PLACEHOLDER": "Rispondi alla tua domanda di sicurezza",
+  "MANDATORY_ORDER_ID": "Si prega di fornire un ID ordine.",
+  "BTN_SHOW_SOLVED": "Mostra risolti",
+  "TITLE_TWO_FACTOR_AUTH_ENTER": "Inserisci il token a 6 cifre dalla tua app 2FA",
+  "LABEL_TWO_FACTOR_AUTH_TOKEN": "Token 2FA",
+  "CONFIRM_2FA_SETUP": "Configurazione dell'autenticazione a due fattori completata con successo.",
+  "CONFIRM_2FA_DISABLE": "L'autenticazione a due fattori è stata rimossa.",
+  "INVALID_TWO_FACTOR_AUTH_TOKEN": "Il token sembra non essere valido.",
+  "UNAUTHORIZED_PAGE_ACCESS_ERROR": "Non sei autorizzato ad accedere a questa pagina!",
   "TITLE_PRIVACY_POLICY": "Informativa sulla privacy",
-  "TITLE_TWO_FACTOR_AUTHENTICATION": "Two Factor Authentication",
-  "TITLE_REQUEST_DATA_EXPORT": "Request Data Export",
-  "PRIVACY_AND_SECURITY": "Privacy & Security",
+  "TITLE_TWO_FACTOR_AUTHENTICATION": "Autenticazione a due fattori",
+  "TITLE_REQUEST_DATA_EXPORT": "Richiedi esportazione dati",
+  "PRIVACY_AND_SECURITY": "Privacy e sicurezza",
   "MENU": "Menu",
   "LABEL_OR": "o",
   "COMPANY": "Azienda",
   "ADD_BASKET": "Aggiungi al carrello",
-  "BTN_SHOW_ALL": "Show all",
-  "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
-  "BTN_HIDE_ALL": "Hide all",
-  "TYPE_THESE_LETTERS": "Type these {{length}} letters",
+  "BTN_SHOW_ALL": "Mostra tutto",
+  "BTN_SHOW_UNAVAILABLE": "Mostra non disponibili",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
+  "BTN_HIDE_ALL": "Nascondi tutto",
+  "TYPE_THESE_LETTERS": "Digita queste {{length}} lettere",
   "BTN_REQUEST": "Richiesta",
-  "EXPORT_LABEL": "Export Format",
+  "EXPORT_LABEL": "Formato di esportazione",
   "ACCOUNT": "Account",
-  "TITLE_TWO_FACTOR_AUTH_CONFIG": "2FA Configuration",
-  "LABEL_CONFIRM_CURRENT_PASSWORD": "Confirm your current password",
-  "LABEL_INITIAL_2FA_TOKEN": "Initial token from your authenticator",
-  "INITIAL_CODE": "Initial Token",
-  "INITIAL_TOKEN_TOOLTIP": "The token to be entered from the authenticator must have 6 digits.",
-  "2FA_ENTER_CODE_PLACEHOLDER": "Please enter your 2FA token",
-  "INITIAL_CODE_PLACEHOLDER": "Please enter your initial token",
-  "2FA_AUTH_SETUP_INSTRUCTIONS": "Secure your account with an additional factor. Scan the QR code into an authenticator app supporting TOTP (e.g. Google Authenticator) to get started.",
-  "2FA_SETUP_ERROR": "Failed to change 2FA setup. Check if you entered your password (and token) correctly.",
+  "TITLE_TWO_FACTOR_AUTH_CONFIG": "Configurazione 2FA",
+  "LABEL_CONFIRM_CURRENT_PASSWORD": "Confermare la password corrente",
+  "LABEL_INITIAL_2FA_TOKEN": "Token iniziale dal tuo autenticatore",
+  "INITIAL_CODE": "Token Iniziale",
+  "INITIAL_TOKEN_TOOLTIP": "Il token da inserire dall'autenticatore deve avere 6 cifre.",
+  "2FA_ENTER_CODE_PLACEHOLDER": "Inserisci il tuo token 2FA",
+  "INITIAL_CODE_PLACEHOLDER": "Inserisci il tuo token iniziale",
+  "2FA_AUTH_SETUP_INSTRUCTIONS": "Proteggi il tuo account con un fattore aggiuntivo. Scansiona il codice QR in un'app di autenticazione che supporta TOTP (ad esempio Google Authenticator) per iniziare.",
+  "2FA_SETUP_ERROR": "Impossibile modificare la configurazione di 2FA. Controlla se hai inserito correttamente la password (e il token).",
   "2FA_SUCCESSFUL_SETUP": "You have enabled 2FA for your account. Thank you for taking the time to keep your juices safe!",
   "REMOVE_TWO_FACTOR_AUTH": "Remove 2FA from your account",
   "BTN_REMOVE": "Remove",
   "MANDATORY_REVIEW": "Please provide a review text.",
   "WRITE_REVIEW": "Write a review",
-  "WRITE_REVIEW_PLACEHOLDER": "What did you like or dislike?",
+  "WRITE_REVIEW_PLACEHOLDER": "Cosa ti è piaciuto o non ti è piaciuto?",
   "EMPTY_REVIEW_LIST": "There is no review for this product yet.",
-  "EMPTY_SEARCH_RESULT": "Try adjusting your search to find what you're looking for.",
-  "NO_SEARCH_RESULT": "No results found",
-  "DATA_SUBJECT_TITLE": "Request Data Erasure",
-  "GDPR_HEADING": "Data Erasure Request (Art. 17 GDPR)",
-  "GDPR_MESSAGE": "We take data security, customer privacy, and legal compliance very serious. In accordance with GDPR we allow you to request complete erasure of your account and any associated data.",
-  "DELETE_DATA_LABEL": "Delete User Data",
-  "ADD_NEW_ADDRESS": "Add New Address",
-  "LABEL_COUNTRY": "Country",
-  "LABEL_MOBILE_NUMBER": "Mobile Number",
-  "LABEL_ZIP_CODE": "ZIP Code",
-  "LABEL_CITY": "City",
-  "LABEL_STATE": "State",
-  "STATE_PLACEHOLDER": "Please provide a state.",
-  "LABEL_GO_BACK": "Go Back",
-  "LABEL_BACK": "Back",
-  "TITLE_SELECT_ADDRESS": "Select an address",
-  "USE_THIS_ADDRESS": "Use this address",
-  "BTN_DELETE": "Delete",
-  "MANDATORY_COUNTRY": "Please provide a country.",
-  "MANDATORY_NAME": "Please provide a name.",
-  "MANDATORY_NUMBER": "Please provide a mobile number.",
-  "MANDATORY_ZIP": "Please provide a ZIP code.",
-  "MANDATORY_CITY": "Please provide a city.",
-  "INVALID_MOBILE_NUMBER": "Mobile number must match {{range}} format.",
-  "UNAUTHORIZED_ACCESS_ERROR": "Please login to view this page.",
-  "SEARCH_PROCESSING": "Searching for products",
+  "EMPTY_SEARCH_RESULT": "Prova a modificare la tua ricerca per trovare quello che stai cercando.",
+  "NO_SEARCH_RESULT": "Nessun risultato trovato",
+  "DATA_SUBJECT_TITLE": "Richiedi la cancellazione dei dati",
+  "GDPR_HEADING": "Richiesta Cancellazione Dati (Art. 17 GDPR)",
+  "GDPR_MESSAGE": "Prendiamo molto sul serio la sicurezza dei dati, la privacy dei clienti e la conformità legale. In ottemperanza al GDPR è possibile richiedere la cancellazione completa del tuo account e di qualsiasi dato a esso associato.",
+  "DELETE_DATA_LABEL": "Cancella dati utente",
+  "ADD_NEW_ADDRESS": "Aggiungi nuovo indirizzo",
+  "LABEL_COUNTRY": "Nazione",
+  "LABEL_MOBILE_NUMBER": "Numero di cellulare",
+  "LABEL_ZIP_CODE": "CAP",
+  "LABEL_CITY": "Città",
+  "LABEL_STATE": "Stato",
+  "STATE_PLACEHOLDER": "Si prega d''inserire uno stato",
+  "LABEL_GO_BACK": "Torna indietro",
+  "LABEL_BACK": "Indietro",
+  "TITLE_SELECT_ADDRESS": "Seleziona un indirizzo",
+  "USE_THIS_ADDRESS": "Usa questo indirizzo",
+  "BTN_DELETE": "Cancella",
+  "MANDATORY_COUNTRY": "Si prega d'inserire una nazione.",
+  "MANDATORY_NAME": "Si prega d''inserire un nome.",
+  "MANDATORY_NUMBER": "Si prega d'inserire un numero di cellulare.",
+  "MANDATORY_ZIP": "Si prega d'inserire un CAP.",
+  "MANDATORY_CITY": "Si prega d'inserire una città.",
+  "INVALID_MOBILE_NUMBER": "Il numero di cellulare deve rispettare il formato {{range}}",
+  "UNAUTHORIZED_ACCESS_ERROR": "Effettua il login per visualizzare questa pagina.",
+  "SEARCH_PROCESSING": "Ricerca prodotti in corso",
   "STOCK": "Stock",
-  "UNITS": "units",
-  "ACCOUNTING": "Accounting",
-  "CONFIRM_ERASURE_REQUEST": "Sorry to see you leave! Your erasure request will be processed shortly.",
-  "INFO_HACKING_INSTRUCTOR": "Start an interactive hacking tutorial for this challenge.",
-  "SCORE_BOARD_HACKING_INSTRUCTOR": "Launch a tutorial to get you started hacking the Juice Shop.",
-  "BTN_GETTING_STARTED": "Help getting started",
-  "BTN_DISMISS": "Dismiss",
+  "UNITS": "unità",
+  "ACCOUNTING": "Contabilità",
+  "CONFIRM_ERASURE_REQUEST": "Siamo spiacenti di vederti andare via! La tua richiesta di cancellazione verrà elaborata a breve.",
+  "INFO_HACKING_INSTRUCTOR": "Inizia un tutorial interattivo di hacking per questa sfida.",
+  "SCORE_BOARD_HACKING_INSTRUCTOR": "Avvia un tutorial per iniziare ad attaccare il Juice Shop.",
+  "BTN_GETTING_STARTED": "Come iniziare",
+  "BTN_DISMISS": "Ignora",
   "SIDENAV_HINT": "Apri menu laterale",
   "LANGUAGE_SEL_HINT": "Scegli la lingua",
-  "PLACE_ORDER_AND_PAY": "Place your order and pay",
-  "ORDER_SUMMARY": "Order Summary",
-  "ITEMS": "Items",
-  "DELIVERY": "Delivery",
-  "PROMOTION": "Promotion",
-  "MY_SAVED_ADRESSES": "My saved addresses",
-  "BTN_HIDE": "Hide",
-  "YOUR_SAVED_CARDS": "Your saved cards",
-  "LABEL_CARD_NUMBER": "Card Number",
-  "LABEL_EXPIRES_ON": "Expires On",
-  "ADD_NEW_CARD": "Add new card",
-  "ADD_NEW_CARD_DESCRIPTION": "Add a credit or debit card",
-  "ADD_A_COUPON": "Add a coupon",
-  "OTHER_PAYMENT_OPTIONS": "Other payment options",
-  "VOUCHERS_AND_PROMOTIONAL_CODE": "Add a coupon code to receive discounts",
-  "LABEL_EXPIRY_MONTH": "Expiry Month",
+  "PLACE_ORDER_AND_PAY": "Effettua l'ordine e paga",
+  "ORDER_SUMMARY": "Riepilogo dell'ordine",
+  "ITEMS": "Articoli",
+  "DELIVERY": "Consegna",
+  "PROMOTION": "Promozione",
+  "MY_SAVED_ADRESSES": "Indirizzi salvati",
+  "BTN_HIDE": "Nascondi",
+  "YOUR_SAVED_CARDS": "Carte salvate",
+  "LABEL_CARD_NUMBER": "Numero carta",
+  "LABEL_EXPIRES_ON": "Scade il",
+  "ADD_NEW_CARD": "Aggiungi nuova carta",
+  "ADD_NEW_CARD_DESCRIPTION": "Aggiungi carta di credito/debito",
+  "ADD_A_COUPON": "Aggiungi coupon",
+  "OTHER_PAYMENT_OPTIONS": "Altre opzioni di pagamento",
+  "VOUCHERS_AND_PROMOTIONAL_CODE": "Aggiungi un coupon per ricevere sconti",
+  "LABEL_EXPIRY_MONTH": "Mese di scadenza",
   "LABEL_EXPIRY_YEAR": "Expiry Year",
   "MANDATORY_CARD_NUMBER": "Please enter your card number.",
   "MANDATORY_EXPIRY_MONTH": "Please enter an expiry month.",
@@ -318,26 +322,26 @@
   "DESCRIPTION_DELUXE_MEMBERSHIP": "Enjoy amazing benefits as a deluxe customer of {{appname}}. Check out what is included with your membership.",
   "LABEL_BECOME_MEMBER": "Become a member",
   "LABEL_DEALS_OFFERS": "Deals and Offers",
-  "DESCRIPTION_DEALS_OFFERS": "As a deluxe member, you get access to exclusive deals and irresistible offers.",
-  "LABEL_FREE_FAST_DELIVERY": "Free Fast Delivery",
-  "DESCRIPTION_FREE_FAST_DELIVERY": "Get unlimited free Fast Delivery for all products in the shop.",
-  "LABEL_UNLIMITED_PURCHASE": "Unlimited Purchase",
-  "DESCRIPTION_UNLIMITED_PURCHASE": "Enjoy unrestricted purchase of your favourite products.",
+  "DESCRIPTION_DEALS_OFFERS": "Come membro deluxe, puoi accedere a offerte esclusive e irresistibili.",
+  "LABEL_FREE_FAST_DELIVERY": "Consegna veloce gratuita",
+  "DESCRIPTION_FREE_FAST_DELIVERY": "Ottieni consegne veloci gratuite e illimitate per tutti i prodotti.",
+  "LABEL_UNLIMITED_PURCHASE": "Acquisto Illimitato",
+  "DESCRIPTION_UNLIMITED_PURCHASE": "Goditi l'acquisto illimitato dei tuoi prodotti preferiti.",
   "LABEL_PAY_USING_WALLET": "Pay using wallet",
-  "LABEL_PAY": "Pay",
-  "LABEL_ADD": "Add",
-  "REVIEW_WALLET": "You will be redirected back to your wallet.",
-  "ORDERS_AND_PAYMENT": "Orders & Payment",
-  "ADDRESS_REMOVED": "Your address has been removed.",
-  "ADDRESS_UPDATED": "The address at {{city}} has been successfully updated.",
-  "ADDRESS_ADDED": "The address at {{city}} has been successfully added to your addresses.",
-  "PASSWORD_SUCCESSFULLY_CHANGED": "Your password was successfully changed.",
-  "CUSTOMER_SUPPORT_COMPLAINT_REPLY": "Customer support will get in touch with you soon! Your complaint reference is #{{ref}}",
-  "FEEDBACK_FIVE_STAR_THANK_YOU": "Thank you so much for your amazing 5-star feedback!",
-  "FEEDBACK_THANK_YOU": "Thank you for your feedback.",
-  "CREDIT_CARD_SAVED": "Your card ending with {{cardnumber}} has been saved for your convenience.",
-  "CONFIRM_REVIEW_SAVED": "You review has been saved.",
-  "CONFIRM_CHANGES_SAVED": "Your changes have been saved.",
+  "LABEL_PAY": "Paga",
+  "LABEL_ADD": "Aggiungi",
+  "REVIEW_WALLET": "Verrai reindirizzato al tuo wallet.",
+  "ORDERS_AND_PAYMENT": "Ordini & Pagamenti",
+  "ADDRESS_REMOVED": "Il tuo indirizzo è stato rimosso.",
+  "ADDRESS_UPDATED": "L'indirizzo a {{city}} è stato aggiornato con successo.",
+  "ADDRESS_ADDED": "L'indirizzo a {{city}} è stato aggiunto con successo ai tuoi indirizzi.",
+  "PASSWORD_SUCCESSFULLY_CHANGED": "La tua password è stata modificata con successo.",
+  "CUSTOMER_SUPPORT_COMPLAINT_REPLY": "Il servizio clienti ti contatterà presto! Il riferimento al tuo reclamo è #{{ref}}",
+  "FEEDBACK_FIVE_STAR_THANK_YOU": "Grazie mille per il tuo fantastico feedback di 5 stelle!",
+  "FEEDBACK_THANK_YOU": "Grazie per il tuo feedback.",
+  "CREDIT_CARD_SAVED": "La tua carta che termina con {{cardnumber}} è stata salvata per tua comodità.",
+  "CONFIRM_REVIEW_SAVED": "La tua recensione è stata salvata.",
+  "CONFIRM_CHANGES_SAVED": "Le modifiche sono state salvate.",
   "CONFIRM_RECYCLING_BOX": "Thank you for using our eco-friendly recycling self-service. We will send you a pomace recycling box asap.",
   "CONFIRM_RECYCLING_PICKUP": "Thank you for using our convenient recycling service. We will pick up your pomace on {{pickupdate}}.",
   "CHALLENGE_UNAVAILABLE": "This challenge is unavailable in a {{env}} environment!",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -386,8 +397,8 @@
   "CATEGORY_SECURITY_MISCONFIGURATION": "Security Misconfiguration",
   "CATEGORY_SECURITY_THROUGH_OBSCURITY": "Security through Obscurity",
   "CATEGORY_SENSITIVE_DATA_EXPOSURE": "Sensitive Data Exposure",
-  "CATEGORY_UNVALIDATED_REDIRECTS": "Unvalidated Redirects",
-  "CATEGORY_VULNERABLE_COMPONENTS": "Vulnerable Components",
+  "CATEGORY_UNVALIDATED_REDIRECTS": "Reindirizzamenti non validati",
+  "CATEGORY_VULNERABLE_COMPONENTS": "Componenti Vulnerabili",
   "CATEGORY_XSS": "XSS",
   "CATEGORY_XXE": "XXE",
   "CATEGORY_BROKEN_ACCESS_CONTROL_DESCRIPTION": "Restrictions on what authenticated users are allowed to do are often not properly enforced. Attackers can exploit these flaws to access unauthorized functionality and/or data, such as access other users’ accounts, view sensitive files, modify other users’ data, change access rights, etc.",
@@ -405,14 +416,73 @@
   "CATEGORY_VULNERABLE_COMPONENTS_DESCRIPTION": "Components, such as libraries, frameworks, and other software modules, run with the same privileges as the application. If a vulnerable component is exploited, such an attack can facilitate serious data loss or server takeover. Applications and APIs using components with known vulnerabilities may undermine application defenses and enable various attacks and impacts.",
   "CATEGORY_XSS_DESCRIPTION": "Cross-Site Scripting (XSS) flaws occur whenever an application includes untrusted data in a new web page without proper validation or escaping, or updates an existing web page with user-supplied data using a browser API that can create HTML or JavaScript. XSS allows attackers to execute scripts in the victim’s browser which can hijack user sessions, deface web sites, or redirect the user to malicious sites.",
   "CATEGORY_XXE_DESCRIPTION": "Many older or poorly configured XML processors evaluate external entity references within XML documents. External entities can be used to disclose internal files using the file URI handler, internal file shares, internal port scanning, remote code execution, and denial of service attacks.",
-  "INSUFFICIENT_WALLET_BALANCE": "Insufficient wallet balance.",
-  "LAUNCH_CODING_CHALLENGE": "Launch associated coding challenge.",
-  "LOADING_CODE_SNIPPET": "Loading code snippet...",
-  "SOLVE_HACKING_CHALLENGE": "Solve the hacking challenge to unlock the associated coding challenge.",
+  "INSUFFICIENT_WALLET_BALANCE": "Saldo del wallet insufficiente.",
+  "LAUNCH_CODING_CHALLENGE": "Avvia la sfida di programmazione associata.",
+  "LOADING_CODE_SNIPPET": "Caricamento del ritaglio di codice...",
+  "SOLVE_HACKING_CHALLENGE": "Risolvi la sfida di hacking per sbloccare la sfida di programmazione associata.",
   "LABEL_CORRECT_FIX": "Correct Fix",
-  "TITLE_CODING_CHALLENGE": "Coding Challenge",
+  "TITLE_CODING_CHALLENGE": "Sfida di programmazione",
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/ja_JP.json b/frontend/src/assets/i18n/ja_JP.json
index 97472f4584a..dbf2f9332aa 100644
--- a/frontend/src/assets/i18n/ja_JP.json
+++ b/frontend/src/assets/i18n/ja_JP.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "ステータス",
   "STATUS_UNSOLVED": "未解決",
   "STATUS_SOLVED": "解決済み",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "利用できません",
-  "CALL_FOR_CONTRIBUTIONS": "なにかやってみると良いアイデアがひらめきましたか？ここに記録されていない脆弱性を見つけましたか？<a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a>コミュニティチャットか、<a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>Github</a>issueから教えてください！",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "よりよい {{appname}} を提供するための<a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>アンケート</a>にお答えください！",
   "CHALLENGE_SOLVED": "チャレンジを解決しました: {{challenge}}",
   "INVALID_CONTINUE_CODE": "無効なコンティニューコード",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "買い物かごに追加",
   "BTN_SHOW_ALL": "すべてを表示",
   "BTN_SHOW_UNAVAILABLE": "在庫切れ商品も表示する",
-  "INFO_DISABLED_CHALLENGES": "<a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>セキュリティ上の問題</a>、または、互換性の問題により、{{env}} では {{num}} 個のチャレンジが提供されません。",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "すべてを非表示",
   "TYPE_THESE_LETTERS": "これらの {{length}} 文字を入力",
   "BTN_REQUEST": "リクエスト",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "{{tier}} チュートリアルチャレンジを完了すると、もう一つ上の難易度へアクセスできます。",
   "SHOW_COMMENT": "コメントを表示",
   "INFO_VULNERABILITY_MITIGATION_LINK": "類似の脆弱性を回避または軽減する方法については、こちらをクリックしてください!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "チャレンジの進行状況とアプリケーションの設定をファイルに保存します。",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "チャレンジの進行状況とアプリケーションの設定をファイルから復元します。",
   "TAG_DANGER_ZONE": "危険区域",
   "TAG_DANGER_ZONE_DESCRIPTION": "RCE などのリスクがあるため Docker/Heroku/Gitpod 上ではデフォルト無効とされている、危険なチャレンジであることを示します。",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "脆弱性対応よりもセキュリティ的なベストプラクティス普及を意図したチャレンジであることを示します。",
   "TAG_CODE_ANALYSIS": "コード分析",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "アプリケーションやサードパーティのソースコードの読解が効果的なチャレンジであることを示します。",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "アクセス制御の不備 (Broken Access Control)",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "自動化された攻撃に対する防御の不備 (Broken Anti Automation)",
   "CATEGORY_BROKEN_AUTHENTICATION": "認証の失敗 (Broken Authentication)",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "特定",
   "TAB_FIX_IT": "修正",
   "TITLE_CODING_SCORE": "コーディングスコア",
-  "LABEL_FEEDBACK": "ご意見"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "ご意見",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/ka_GE.json b/frontend/src/assets/i18n/ka_GE.json
index 0abd960c51a..54bd85fc1cc 100644
--- a/frontend/src/assets/i18n/ka_GE.json
+++ b/frontend/src/assets/i18n/ka_GE.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "სტატუსი",
   "STATUS_UNSOLVED": "ამოუხსნელი",
   "STATUS_SOLVED": "ამოხსნილი",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "არ არის ხელმისაწვდომი",
-  "CALL_FOR_CONTRIBUTIONS": "გაქვთ იდეა ახალი დავალებისთვის?იპოვეთ შეცდომა რომელიც აქ არ არის განხილული?გაგვაგებინეთ <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> ჩათის მეშვეობით ან საკითხის <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> -ზე გახსნით!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "თქვენი წარმატებით ამოხსენით დავალება:{{challenge}}",
   "INVALID_CONTINUE_CODE": "არავალიდური გაგრძელების კოდი.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "Show all",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Hide all",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "Request",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/ko_KR.json b/frontend/src/assets/i18n/ko_KR.json
index 49c8ff25f88..b13d68dec38 100644
--- a/frontend/src/assets/i18n/ko_KR.json
+++ b/frontend/src/assets/i18n/ko_KR.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "상태",
   "STATUS_UNSOLVED": "미해결",
   "STATUS_SOLVED": "해결",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "사용 불가",
-  "CALL_FOR_CONTRIBUTIONS": "새로운 도전 과제 아이디어가 있으신가요? 여기에 등록되지 않은 취약점을 찾으셨나요? <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> 커뮤니티 채팅이나 <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a>에 티켓을 만들어주세요!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "성공적으로 도전과제를 풀었습니다: {{challenge}}",
   "INVALID_CONTINUE_CODE": "잘못된 코드입니다.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "바구니에 담기",
   "BTN_SHOW_ALL": "모두 보기",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "모두 숨기기",
   "TYPE_THESE_LETTERS": "보이는 {{length}} 자의 글자를 입력해주세요.",
   "BTN_REQUEST": "요청",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/lv_LV.json b/frontend/src/assets/i18n/lv_LV.json
index bfc169dcf42..cb48cce08e2 100644
--- a/frontend/src/assets/i18n/lv_LV.json
+++ b/frontend/src/assets/i18n/lv_LV.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Statuss",
   "STATUS_UNSOLVED": "neatrisināts",
   "STATUS_SOLVED": "atrisināts",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "nav pieejams",
-  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "You successfully solved a challenge: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Invalid continue code.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Pievienot grozam",
   "BTN_SHOW_ALL": "Rādīt visu",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Paslēpt visu",
   "TYPE_THESE_LETTERS": "Ievadiet šos {{length}} burtus",
   "BTN_REQUEST": "Pieprasījums",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/my_MM.json b/frontend/src/assets/i18n/my_MM.json
index 0b6379a8bce..817204deffb 100644
--- a/frontend/src/assets/i18n/my_MM.json
+++ b/frontend/src/assets/i18n/my_MM.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "မှတ်ချက်",
   "STATUS_UNSOLVED": "မဖြေရသေးပါ",
   "STATUS_SOLVED": "ဖြေပြီးပါပြီ",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "unavailable",
-  "CALL_FOR_CONTRIBUTIONS": "Challenge အသစ်များ ထည့်သွင်းရန် အကြံညဏ်ရှိပါသလား? ဒီမှာ မပါဝင်တဲ့ အားနည်းချက် တစ်မျိုးမျိုးကို တွေ့ထားပါသလား? <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> သို့မဟုတ် <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issues မှ တစ်ဆင့် ဆွေးနွေးနိုင်ပါသည်",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "Challenge တစ်ခု အား သင် ဖြေဆိုပြီးပါပြီ : {{challenge}}",
   "INVALID_CONTINUE_CODE": "ဆက်လက်အသုံးပြုမည့် code မှာ မှားယွင်းနေပါသည်",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "Show all",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Hide all",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "Request",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/nl_NL.json b/frontend/src/assets/i18n/nl_NL.json
index d2e11e29d84..abd4acf5019 100644
--- a/frontend/src/assets/i18n/nl_NL.json
+++ b/frontend/src/assets/i18n/nl_NL.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Status",
   "STATUS_UNSOLVED": "onopgelost",
   "STATUS_SOLVED": "opgelost",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "onbeschikbaar",
-  "CALL_FOR_CONTRIBUTIONS": "Heb jij een idee voor een nieuwe uitdaging? Misschien heb je een kwetsbaarheid ontdekt die wij nog niet meetellen hier? Laat het ons weten via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> de community chat of door op <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> een issue aan te maken!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Help ons {{appname}} te verbeteren door onze <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>vragenlijst</a> in te vullen!",
   "CHALLENGE_SOLVED": "Je hebt succesvol een challenge opgelost: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Incorrecte vervolgcode.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Voeg toe aan winkelwagen",
   "BTN_SHOW_ALL": "Toon alles",
   "BTN_SHOW_UNAVAILABLE": "Laat niet beschikbaar zien",
-  "INFO_DISABLED_CHALLENGES": "{{num}} uitdagingen zijn niet beschikbaar op {{env}} vanwege <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>beveiligingsproblemen</a> of technische incompatibiliteit!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Verberg alles",
   "TYPE_THESE_LETTERS": "Typ deze {{length}} letters",
   "BTN_REQUEST": "Verzoek",
@@ -315,7 +319,7 @@
   "IMAGE_UPLOAD_SUCCESS": "De foto is succesvol ge-upload!",
   "EMPTY_MEMORY_LIST": "Er zijn nog geen ervaringen gedeeld.",
   "LABEL_DELUXE_MEMBERSHIP": "Luxe lidmaatschap",
-  "DESCRIPTION_DELUXE_MEMBERSHIP": "Enjoy amazing benefits as a deluxe customer of {{appname}}. Check out what is included with your membership.",
+  "DESCRIPTION_DELUXE_MEMBERSHIP": "Geniet van geweldige voordelen als deluxe-gebruiker van {{appname}}. Kijk wat je krijgt bij jouw lidmaatschap.",
   "LABEL_BECOME_MEMBER": "Word lid",
   "LABEL_DEALS_OFFERS": "Aanbiedingen",
   "DESCRIPTION_DEALS_OFFERS": "Als luxe lid krijg je toegang tot exclusieve en onweerstaanbare aanbiedingen.",
@@ -353,16 +357,19 @@
   "INFO_NEXT_TUTORIAL_TIER": "Voltooi de {{tier}} tutorial uitdagingen om de volgende moeilijkheidsgraad te onthullen!",
   "SHOW_COMMENT": "Opmerkingen weergeven",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Klik om te leren hoe je vergelijkbare kwetsbaarheden kunt voorkomen of te mitigaten!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Bewaar challenge vooruitgang en toepassing instellingen in een bestand.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Herstel voortgang van uitdaging en applicatie-instellingen uit een bestand.",
   "TAG_DANGER_ZONE": "Gevaren zone",
-  "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
+  "TAG_DANGER_ZONE_DESCRIPTION": "Geeft aan dat een uitdaging mogelijk gevaarlijk is en standaard uitgeschakeld is op Docker/Heroku/Gitpod vanwege RCE en andere risico's.",
   "TAG_GOOD_FOR_DEMOS": "Goed voor demo's",
   "TAG_GOOD_FOR_DEMOS_DESCRIPTION": "Markeert uitdagingen die geschikt zijn voor live demos of bewustmakingsopleidingen.",
   "TAG_PREREQUISITE": "Randvoorwaarden",
   "TAG_PREREQUISITE_DESCRIPTION": "Markeert problemen die moeten worden opgelost voordat een of meer andere uitdagingen (realistisch) kunnen worden opgelost.",
   "TAG_OSINT": "OSINT",
-  "TAG_OSINT_DESCRIPTION": "Marks challenges which require some Internet research or \"social stalking\" activity outside the application.",
+  "TAG_OSINT_DESCRIPTION": "Geeft aan dat een uitdaging enig onderzoek op Internet of enige \"social stalking\"-activiteit buiten de applicatie vergt.",
   "TAG_CONTRAPTION": "Contraption",
   "TAG_CONTRAPTION_DESCRIPTION": "Geeft aan dat een uitdaging niet precies deel uitmaakt van een realistisch scenario maar misschien een beetje gedwongen of vervaardigd is.",
   "TAG_SHENANIGANS": "Shenanigans",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Benadrukt uitdagingen die minder over kwetsbaarheden gaan, maar die goede (veiligheid) praktijken bevorderen.",
   "TAG_CODE_ANALYSIS": "Code analyse",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Markeert de uitdagingen waar het nuttig kan zijn om door een of andere broncode van de aanvraag of een derde partij te gaan.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Kapotte Toegangscontrole",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Kapotte Anti Automatie",
   "CATEGORY_BROKEN_AUTHENTICATION": "Kapotte Authenticatie",
@@ -386,33 +397,92 @@
   "CATEGORY_SECURITY_MISCONFIGURATION": "Misgeconfigureerde beveiliging",
   "CATEGORY_SECURITY_THROUGH_OBSCURITY": "Beveiliging via Obscurity",
   "CATEGORY_SENSITIVE_DATA_EXPOSURE": "Gevoelige datablootstelling",
-  "CATEGORY_UNVALIDATED_REDIRECTS": "Unvalidated Redirects",
-  "CATEGORY_VULNERABLE_COMPONENTS": "Vulnerable Components",
+  "CATEGORY_UNVALIDATED_REDIRECTS": "Ongecontroleerde Doorverwijzing",
+  "CATEGORY_VULNERABLE_COMPONENTS": "Kwetsbare Componenten",
   "CATEGORY_XSS": "XSS",
   "CATEGORY_XXE": "XXE",
-  "CATEGORY_BROKEN_ACCESS_CONTROL_DESCRIPTION": "Restrictions on what authenticated users are allowed to do are often not properly enforced. Attackers can exploit these flaws to access unauthorized functionality and/or data, such as access other users’ accounts, view sensitive files, modify other users’ data, change access rights, etc.",
-  "CATEGORY_BROKEN_ANTI_AUTOMATION_DESCRIPTION": "Quite often, APIs do not impose any restrictions on the size or number of resources that can be requested by the client/user. Not only can this impact the API server performance, leading to Denial of Service (DoS), but also leaves the door open to authentication flaws such as brute force.",
-  "CATEGORY_BROKEN_AUTHENTICATION_DESCRIPTION": "Application functions related to authentication and session management are often implemented incorrectly, allowing attackers to compromise passwords, keys, or session tokens, or to exploit other implementation flaws to assume other users’ identities temporarily or permanently.",
-  "CATEGORY_CRYPTOGRAPHIC_ISSUES_DESCRIPTION": "A weak encryption scheme can be subjected to brute force attacks that have a reasonable chance of succeeding using current attack methods and resources. The use of a non-standard algorithm is dangerous because a determined attacker may be able to break the algorithm and compromise whatever data has been protected. Well-known techniques may exist to break the algorithm.",
-  "CATEGORY_IMPROPER_INPUT_VALIDATION_DESCRIPTION": "When software does not validate input properly, an attacker is able to craft the input in a form that is not expected by the rest of the application. This will lead to parts of the system receiving unintended input, which may result in altered control flow, arbitrary control of a resource, or arbitrary code execution.",
-  "CATEGORY_INJECTION_DESCRIPTION": "Injection flaws, such as SQL, NoSQL, OS, and LDAP injection, occur when untrusted data is sent to an interpreter as part of a command or query. The attacker’s hostile data can trick the interpreter into executing unintended commands or accessing data without proper authorization.",
-  "CATEGORY_INSECURE_DESERIALIZATION_DESCRIPTION": "Insecure deserialization often leads to remote code execution. Even if deserialization flaws do not result in remote code execution, they can be used to perform attacks, including replay attacks, injection attacks, and privilege escalation attacks.",
-  "CATEGORY_MISCELLANEOUS_DESCRIPTION": "Everything that does not match any of the other vulnerability categories or would not even be considered a security issue in a real world scenario.",
-  "CATEGORY_SECURITY_MISCONFIGURATION_DESCRIPTION": "Security misconfiguration is the most commonly seen issue. This is commonly a result of insecure default configurations, incomplete or ad hoc configurations, open cloud storage, misconfigured HTTP headers, and verbose error messages containing sensitive information. Not only must all operating systems, frameworks, libraries, and applications be securely configured, but they must be patched/upgraded in a timely fashion.",
-  "CATEGORY_SECURITY_THROUGH_OBSCURITY_DESCRIPTION": "The software uses a protection mechanism whose strength depends heavily on its obscurity, such that knowledge of its algorithms or key data is sufficient to defeat the mechanism.",
-  "CATEGORY_SENSITIVE_DATA_EXPOSURE_DESCRIPTION": "Many web applications and APIs do not properly protect sensitive data, such as financial, healthcare, and PII. Attackers may steal or modify such weakly protected data to conduct credit card fraud, identity theft, or other crimes. Sensitive data may be compromised without extra protection, such as encryption at rest or in transit, and requires special precautions when exchanged with the browser.",
-  "CATEGORY_UNVALIDATED_REDIRECTS_DESCRIPTION": "Web applications frequently redirect and forward users to other pages and websites, and use untrusted data to determine the destination pages. Without proper validation, attackers can redirect victims to phishing or malware sites, or use forwards to access unauthorized pages.",
-  "CATEGORY_VULNERABLE_COMPONENTS_DESCRIPTION": "Components, such as libraries, frameworks, and other software modules, run with the same privileges as the application. If a vulnerable component is exploited, such an attack can facilitate serious data loss or server takeover. Applications and APIs using components with known vulnerabilities may undermine application defenses and enable various attacks and impacts.",
-  "CATEGORY_XSS_DESCRIPTION": "Cross-Site Scripting (XSS) flaws occur whenever an application includes untrusted data in a new web page without proper validation or escaping, or updates an existing web page with user-supplied data using a browser API that can create HTML or JavaScript. XSS allows attackers to execute scripts in the victim’s browser which can hijack user sessions, deface web sites, or redirect the user to malicious sites.",
-  "CATEGORY_XXE_DESCRIPTION": "Many older or poorly configured XML processors evaluate external entity references within XML documents. External entities can be used to disclose internal files using the file URI handler, internal file shares, internal port scanning, remote code execution, and denial of service attacks.",
-  "INSUFFICIENT_WALLET_BALANCE": "Insufficient wallet balance.",
-  "LAUNCH_CODING_CHALLENGE": "Launch associated coding challenge.",
-  "LOADING_CODE_SNIPPET": "Loading code snippet...",
-  "SOLVE_HACKING_CHALLENGE": "Solve the hacking challenge to unlock the associated coding challenge.",
-  "LABEL_CORRECT_FIX": "Correct Fix",
-  "TITLE_CODING_CHALLENGE": "Coding Challenge",
-  "TAB_FIND_IT": "Find It",
-  "TAB_FIX_IT": "Fix It",
-  "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "CATEGORY_BROKEN_ACCESS_CONTROL_DESCRIPTION": "Beperkingen op wat geauthenticeerde gebruikers mogen doen worden vaak onvoldoende gehandhaafd. Aanvallers kunnen hier misbruik van maken door toegang te krijgen tot functies en/of gegevens waar ze geen rechten voor hebben. Voorbeelden zijn: toegang tot andermans account, toegang tot gevoelige bestanden, wijzigen van andermans gegevens, wijzigen van toegangsrechten, enz.",
+  "CATEGORY_BROKEN_ANTI_AUTOMATION_DESCRIPTION": "Vaak leggen APIs geen beperkingen op aan de grootte van resources die een client/gebruiker kan opvragen of het aantal resources dat een client/gebruiker kan opvragen. Dit kan niet alleen de performance van de API-server beïnvloeden en leiden tot een Denial of Service (DoS), het zet ook de deur open voor authenticatiefouten zoals brute force.",
+  "CATEGORY_BROKEN_AUTHENTICATION_DESCRIPTION": "Applicatiefuncties gerelateerd aan authenticatie and sessiemanagement worden vaak verkeerd geïmplementeerd, waardoor aanvallers wachtwoorden, sleutels of sessietokens in handen krijgen of waardoor zij de identiteit van andere gebruikers tijdelijk of permanent kunnen overnemen.",
+  "CATEGORY_CRYPTOGRAPHIC_ISSUES_DESCRIPTION": "Zwakker encryptie kan vaak met een brute force-aanval gebroken worden, dankzij bestaande aanvalsmethoden en -middelen. Het gebruik van een niet-standaard algoritme is gevaarlijk omdat een volhardende aanvaller in staat kan zijn het algoritme te breken en daarmee toegang krijgt tot alles wat ermee beschermd wordt. Er kunnen bekende technieken zijn om het algoritme te breken.",
+  "CATEGORY_IMPROPER_INPUT_VALIDATION_DESCRIPTION": "Wanneer software de invoer onvoldoende valideert kan een aanvaller in staat zijn de invoer zo te maken dat de applicatie er niet goed mee omgaat. Hierdoor zullen delen van het systeem onverwachte gegevens krijgen, waardoor het gedrag van de applicatie verandert of willekeurige code wordt uitgevoerd.",
+  "CATEGORY_INJECTION_DESCRIPTION": "Injectiefouten zoals SQL-, NoSQL-, OS- en LDAP-injectie, vind plaats wanneer onvertrouwde data in een commando of query wordt opgenomen, die vervolgens aan een interpreter wordt gegeven. De kwaadaardige data van een aanvaller kan er voor zorgen dat de interpreter onbedoelde commando's uitvoert of data benadert zonder de juiste autorisatie.",
+  "CATEGORY_INSECURE_DESERIALIZATION_DESCRIPTION": "Onveilige deserialisatie leidt vaak tot op afstand uitvoeren van code (remote code execution, RCE). Zelfs wanneer deserialisatiefouten niet resulteren in remote code execution, kunnen ze toch misbruikt worden voor aanvallen, waaronder aanvallen door eerdere handelingen te herhalen (replay), injectie-aanvallen en aanvallen voor het verkrijgen van hogere rechten.",
+  "CATEGORY_MISCELLANEOUS_DESCRIPTION": "Alles wat niet onder een van de andere kwetsbaarheidscategoriën valt of zelfs niet als een beveiligingsprobleem gezien zou worden in een 'real world scenario'.",
+  "CATEGORY_SECURITY_MISCONFIGURATION_DESCRIPTION": "Fouten in de beveiligingsconfiguratie is het meest voorkomende probleem. Heel vaak komt dit door een onveilige beginsituatie, onvolledige of ondoordachte configuraties, onbeveiligde cloud-opslag, verkeerd geconfigureerde HTTP-headers en breedsprakige foutmeldingen die gevoelige informatie prijsgeven. Niet alleen moeten besturingssyetemen, frameworks, (software)bibliotheken en applicaties veilig geconfigureerd worden, ze moeten ook tijdig geüpdatet/gepatcht worden.",
+  "CATEGORY_SECURITY_THROUGH_OBSCURITY_DESCRIPTION": "De software maakt gebruik van een beschermingsmechanisme dat berust op onduidelijkheid, waardoor het voldoende is de algoritmen of belangrijke data te kennen om de beveiliging te breken.",
+  "CATEGORY_SENSITIVE_DATA_EXPOSURE_DESCRIPTION": "Veel webapplicaties en APIs beschermen gevoelige data, zoals financiële, gezondheids- en persoonlijk identificerende gegevens, onvoldoende. Aanvallers stelen of wijzigen deze slecht beschermde gegevens om er creditcardfraude, identiteitsfraude of andere misdaden mee te plegen. Gevoelige gegevens kunnen in verkeerde handen vallen wanneer ze zowel tijdens transport als bij opslag niet beschermd worden door bijvoorbeeld encryptie toe te passen. Bijzondere voorzichtigheid is nodig wanneer deze gegevens via een browser worden uitgewisseld.",
+  "CATEGORY_UNVALIDATED_REDIRECTS_DESCRIPTION": "Webapplicaties verwijzen regelmatig door naar andere pagina's en websites. Ze gebruiken hiervoor onvertrouwde gegevens om de bestemming te bepalen. Bij gebrek aan goede validatie kunnen aanvallers hun slachtoffers   uit laten komen op phishing- of malwaresites. Ook kunnen ze toegang krijgen tot pagina's waarvoor ze geen autorisatie hebben.",
+  "CATEGORY_VULNERABLE_COMPONENTS_DESCRIPTION": "Componenten als (software)bibliotheken, frameworks en andere softwaremodules werken onder dezelfde rechten als de applicatie waarin ze gebruikt worden. Wanneer een kwetsbare component misbruikt wordt, kan die aanval leiden tot ernstig gegevensverlies of overname van de server door de aanvaller. Applicaties en APIs die gebruik maken van componenten met bekende kwetsbaarheden kunnen getroffen veiligheidsmaatregelen ondermijnen, verschillende soorten aanvallen mogelijk maken en vatbaar maken voor allerhande schade.",
+  "CATEGORY_XSS_DESCRIPTION": "Van Cross-Site Scripting (XSS)-fouten is sprake wanneer een applicatie onvertrouwde gegevens (a) in een nieuwe webpagina opneemt, zonder deze eerst te valideren of onschadelijk te maken of (b) een bestaande webpagina bijwerkt met gebruikersinvoer vanuit een browser-API waarmee HTML of JavaScript kan worden aangeleverd. XSS stelt een aanvaller in staat scripts in de browser van het slachtoffer uit te laten voeren, waardoor sessies van het slachtoffer overgenomen kunnen worden, websites gedefacet kunnen worden of de gebruiker naar kwaadaardige websites doorgeleid kan worden.",
+  "CATEGORY_XXE_DESCRIPTION": "Veel oudere of slecht geconfigureerde XML-verwerkende software accepteert referenties naar externe entiteiten in XML-documenten. Externe entiteiten kunnen gebruikt worden om interne bestanden te benaderen via de URI-handler voor file:///, via interne fileshares, voor interne portscanning, voor remote code execution en voor denial of service-aanvallen.",
+  "INSUFFICIENT_WALLET_BALANCE": "Onvoldoende portemonneesaldo.",
+  "LAUNCH_CODING_CHALLENGE": "Start bijbehorende codeeruitdaging.",
+  "LOADING_CODE_SNIPPET": "Laden codefragment...",
+  "SOLVE_HACKING_CHALLENGE": "Los de hackinguitdaging op om toegang te krijgen tot de bijbehorende codeeruitdaging.",
+  "LABEL_CORRECT_FIX": "Correcte Fix",
+  "TITLE_CODING_CHALLENGE": "Codeeruitdaging",
+  "TAB_FIND_IT": "Zoek Het",
+  "TAB_FIX_IT": "Fix Het",
+  "TITLE_CODING_SCORE": "Codeerscore",
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/no_NO.json b/frontend/src/assets/i18n/no_NO.json
index 02fe05f927b..9dd96030cb7 100644
--- a/frontend/src/assets/i18n/no_NO.json
+++ b/frontend/src/assets/i18n/no_NO.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Status",
   "STATUS_UNSOLVED": "uløste",
   "STATUS_SOLVED": "løst",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "utilgjengelig",
-  "CALL_FOR_CONTRIBUTIONS": "Har du en idé for en ny utfordring? Funnet et sikkerhetsproblem som ikke vises her? Gi oss beskjed via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> chat eller ved å åpne en <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> sak!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Hjelp oss å gjøre {{appname}} enda bedre for deg ved å svare på våre <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>brukerspørsmål</a>!",
   "CHALLENGE_SOLVED": "Du har løst en utfordring: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Ugyldig fortsettelseskode.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Legg til i handlevogn",
   "BTN_SHOW_ALL": "Vis alle",
   "BTN_SHOW_UNAVAILABLE": "Vis utilgjengelige",
-  "INFO_DISABLED_CHALLENGES": "{{num}} utfordringer er utilgjengelig på {{env}} på grunn av <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>sikkerhetsproblemer</a> eller teknisk inkompatibilitet!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Skjul alle",
   "TYPE_THESE_LETTERS": "Skriv inn følgende {{length}} bokstaver",
   "BTN_REQUEST": "Forespørsel",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Fullfør {{tier}} veiledningsutfordringene for å avdekke neste vanskelighetsgrad!",
   "SHOW_COMMENT": "Vis kommentar",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Gjenopprette fremdrift og programinnstillinger fra filen.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Gjenopprette fremdrift og programinnstillinger fra filen.",
   "TAG_DANGER_ZONE": "Faresone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Kodeanalyse",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/pl_PL.json b/frontend/src/assets/i18n/pl_PL.json
index 9b1bd07ddb7..7276f11748c 100644
--- a/frontend/src/assets/i18n/pl_PL.json
+++ b/frontend/src/assets/i18n/pl_PL.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Stan",
   "STATUS_UNSOLVED": "nierozwiązane",
   "STATUS_SOLVED": "rozwiązany",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "Niedostępne",
-  "CALL_FOR_CONTRIBUTIONS": "Masz pomysł na nowe wyzwanie?  Daj nam znać poprzez <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> społeczności czatu lub przez zgłoszenie nowego problemu <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a>!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "Pomyślnie rozwiązane wyzwanie: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Błędny kod zaproszenia",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Dodaj do koszyka",
   "BTN_SHOW_ALL": "Pokaż wszystko",
   "BTN_SHOW_UNAVAILABLE": "Pokaż niedostępne",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Hide all",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "Request",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/pt_BR.json b/frontend/src/assets/i18n/pt_BR.json
index db9052fcc62..b5c3e57f985 100644
--- a/frontend/src/assets/i18n/pt_BR.json
+++ b/frontend/src/assets/i18n/pt_BR.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Status",
   "STATUS_UNSOLVED": "não resolvido",
   "STATUS_SOLVED": "resolvido",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "indisponível",
-  "CALL_FOR_CONTRIBUTIONS": "Tem uma idéia para um novo desafio? Encontrou uma vulnerabilidade que não está listada aqui? Deixe-nos saber pelo chat da comunidade no <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> ou abrindo uma issue no <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a>!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Por favor, ajude-nos a tornar o {{appname}} ainda melhor para você respondendo o nosso <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>questionário</a>!",
   "CHALLENGE_SOLVED": "Você resolveu com sucesso o desafio: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Código inválido.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Adicionar ao carrinho",
   "BTN_SHOW_ALL": "Exibir tudo",
   "BTN_SHOW_UNAVAILABLE": "Exibir indisponíveis",
-  "INFO_DISABLED_CHALLENGES": "{{num}} desafios não estão disponíveis em {{env}} devido à  <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>questões de segurança</a>  ou incompatibilidade técnica!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Ocultar tudo",
   "TYPE_THESE_LETTERS": "Digite estas {{length}} letras",
   "BTN_REQUEST": "Solicitar",
@@ -315,7 +319,7 @@
   "IMAGE_UPLOAD_SUCCESS": "Sua imagem foi carregada com sucesso.",
   "EMPTY_MEMORY_LIST": "Nenhuma memória foi compartilhada ainda.",
   "LABEL_DELUXE_MEMBERSHIP": "Assinatura Deluxe",
-  "DESCRIPTION_DELUXE_MEMBERSHIP": "Enjoy amazing benefits as a deluxe customer of {{appname}}. Check out what is included with your membership.",
+  "DESCRIPTION_DELUXE_MEMBERSHIP": "Aproveite benefícios incríveis como cliente de luxo do {{appname}}. Confira o que está incluído na sua associação.",
   "LABEL_BECOME_MEMBER": "Torne-se um assinante",
   "LABEL_DEALS_OFFERS": "Ofertas e promoções",
   "DESCRIPTION_DEALS_OFFERS": "Como um membro deluxe, você terá acesso à ofertas exclusivas e promoções irresistíveis.",
@@ -353,16 +357,19 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete o tutorial do nível {{tier}} para revelar o próximo nível de dificuldade!",
   "SHOW_COMMENT": "Exibir comentário",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Clique para aprender como evitar ou mitigar vulnerabilidades semelhantes!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Salve o progresso do desafio e as configurações do aplicativo em um arquivo.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restaure seu progresso e configurações de um arquivo.",
   "TAG_DANGER_ZONE": "Zona de perigo",
-  "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
+  "TAG_DANGER_ZONE_DESCRIPTION": "Marque desafios potencialmente perigosos desativados por padrão no Docker/Heroku/Gitpod devido a RCE (Execução Remota de Código) ou outros riscos.",
   "TAG_GOOD_FOR_DEMOS": "Bom para demonstrações",
   "TAG_GOOD_FOR_DEMOS_DESCRIPTION": "Destaca desafios que são apropriados para demonstrações ao vivo ou para treinamentos de conscientização.",
   "TAG_PREREQUISITE": "Pré-requisito",
   "TAG_PREREQUISITE_DESCRIPTION": "Marca os desafios que precisam ser resolvidos antes que um ou mais desafios possam ser (realisticamente) resolvidos.",
   "TAG_OSINT": "OSINT",
-  "TAG_OSINT_DESCRIPTION": "Marks challenges which require some Internet research or \"social stalking\" activity outside the application.",
+  "TAG_OSINT_DESCRIPTION": "Marcar desafios que exigem pesquisa na Internet ou atividades de \"investigação social\" fora do aplicativo.",
   "TAG_CONTRAPTION": "Geringonça",
   "TAG_CONTRAPTION_DESCRIPTION": "Indica que um desafio não é exatamente parte de um cenário realista, mas pode ser um pouco forçado ou trabalhoso.",
   "TAG_SHENANIGANS": "Mutretas",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Destaca desafios menos relacionados com vulnerabilidades mas que promovem boas práticas (de segurança).",
   "TAG_CODE_ANALYSIS": "Análise de código",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marca os desafios onde pode ser útil analisar o código fonte da aplicação ou de terceiros.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Quebra de Controle Acesso",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Quebra de Anti-Automação",
   "CATEGORY_BROKEN_AUTHENTICATION": "Quebra de Autenticação",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Encontre",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Pontuação",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/pt_PT.json b/frontend/src/assets/i18n/pt_PT.json
index 2b120072f86..b196f968671 100644
--- a/frontend/src/assets/i18n/pt_PT.json
+++ b/frontend/src/assets/i18n/pt_PT.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Estado",
   "STATUS_UNSOLVED": "não resolvido",
   "STATUS_SOLVED": "resolvido",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "não disponível",
-  "CALL_FOR_CONTRIBUTIONS": "Tem uma ideia para um novo desafio ? Encontrou uma vulnerabilidade que não está listada aqui? Fale connosco  através do chat da comunidade no <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> ou abrindo um issue no <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a>!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Pro favor, ajuda-nos a tornar {{appname}} ainda melhor para si, ao responder à nossa pergunta de <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "Você resolveu com sucesso um desafio: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Código inválido. Para prosseguir insira um codigo correto",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Adicionar ao Cesto",
   "BTN_SHOW_ALL": "Ver tudo",
   "BTN_SHOW_UNAVAILABLE": "Mostrar indisponíveis  ",
-  "INFO_DISABLED_CHALLENGES": "Os desafios de {{num}} não estão disponíveis em {{env}} devido a <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>preocupações de segurança</a> ou incompatibilidade técnica!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Esconder tudo",
   "TYPE_THESE_LETTERS": "Escreva estas {{length}} letras",
   "BTN_REQUEST": "Pedido",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/ro_RO.json b/frontend/src/assets/i18n/ro_RO.json
index b44d180ffca..3e5c988ed7a 100644
--- a/frontend/src/assets/i18n/ro_RO.json
+++ b/frontend/src/assets/i18n/ro_RO.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Stare",
   "STATUS_UNSOLVED": "nerezolvat",
   "STATUS_SOLVED": "rezolvat",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "indisponibil",
-  "CALL_FOR_CONTRIBUTIONS": "Am o idee pentru o nouă provocare? Ai găsit o vulnerabilitate care nu este urmărită aici? Anunţaţi-ne prin intermediul chat-ul comunităţii <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> sau deschizând un issue pe <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a>!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Te rugăm să ne ajuți să facem {{appname}} și mai bun pentru tine răspunzând la întrebările noastre <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>de utilizator</a>!",
   "CHALLENGE_SOLVED": "Ai rezolvat cu succes o provocare: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Cod pentru continuare invalid.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Adaugă în coș",
   "BTN_SHOW_ALL": "Arată toate",
   "BTN_SHOW_UNAVAILABLE": "Arată nedisponibile",
-  "INFO_DISABLED_CHALLENGES": "{{num}} provocări nu sunt disponibile pe {{env}} din cauza <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>problemelor de securitate</a> sau incompatibilitate tehnică!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Ascunde toate",
   "TYPE_THESE_LETTERS": "Scrie aceste {{length}} litere",
   "BTN_REQUEST": "Solicitare",
@@ -315,7 +319,7 @@
   "IMAGE_UPLOAD_SUCCESS": "Imaginea ta a fost încărcată cu succes.",
   "EMPTY_MEMORY_LIST": "Încă nu au fost împărțite amintiri.",
   "LABEL_DELUXE_MEMBERSHIP": "Abonament premium",
-  "DESCRIPTION_DELUXE_MEMBERSHIP": "Enjoy amazing benefits as a deluxe customer of {{appname}}. Check out what is included with your membership.",
+  "DESCRIPTION_DELUXE_MEMBERSHIP": "Bucură-te de beneficii uimitoare ca client deluxe al {{appname}}. Vezi ce este inclus în abonamentul tău de membru.",
   "LABEL_BECOME_MEMBER": "Deveniți un membru",
   "LABEL_DEALS_OFFERS": "Oferte",
   "DESCRIPTION_DEALS_OFFERS": "Ca membru deluxe, ai acces la oferte exclusive şi irezistibile.",
@@ -353,16 +357,19 @@
   "INFO_NEXT_TUTORIAL_TIER": "Finalizați provocările tutorialului {{tier}} pentru a dezvălui următoarea dificultate de nivel !",
   "SHOW_COMMENT": "Arată Comentariu",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Da-ți clic pentru a afla cum să evitați sau să reduceți vulnerabilități similare!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Salvați progresul provocării și setările aplicației în fișier.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restabiliți din fișier progresul provocării și setările aplicației.",
   "TAG_DANGER_ZONE": "Zonă de pericol",
-  "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
+  "TAG_DANGER_ZONE_DESCRIPTION": "Marchează provocările potențial periculoase, care sunt dezactivate pe Docker/Heroku din cauza RCE sau a altor riscuri.",
   "TAG_GOOD_FOR_DEMOS": "Bun pentru demos",
   "TAG_GOOD_FOR_DEMOS_DESCRIPTION": "Evidențiază provocări care sunt adecvate pentru demonstrații live sau cursuri introducătoare.",
   "TAG_PREREQUISITE": "Cerințe",
   "TAG_PREREQUISITE_DESCRIPTION": "Marchează provocările care trebuie rezolvate înainte ca una sau mai multe alte provocări să poată fi (in mod realistic) rezolvate.",
   "TAG_OSINT": "OSINT",
-  "TAG_OSINT_DESCRIPTION": "Marks challenges which require some Internet research or \"social stalking\" activity outside the application.",
+  "TAG_OSINT_DESCRIPTION": "Marchează provocările care necesită căutări pe Internet sau o acțiune de „social stalking”, care se efectuează în afara aplicației.",
   "TAG_CONTRAPTION": "Invenție",
   "TAG_CONTRAPTION_DESCRIPTION": "Indică faptul că o provocare nu face parte tocmai dintr-un scenariu realist, ci poate fi puțin forțată sau meșteșugită.",
   "TAG_SHENANIGANS": "Prostii",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Evidențiază provocările care țin mai puțin de vulnerabilități, dar care promovează bunele practici (de securitate).",
   "TAG_CODE_ANALYSIS": "Analiză a codului",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marchează provocările acolo unde poate fi utilă investigarea codului sursă al aplicației sau al unei librării terțe.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marchează provocările care încorporează concepte sau tehnologii Web3, cum ar fi Blockchain, Moneda Cripto, Contractele inteligente sau NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Găsește-l",
   "TAB_FIX_IT": "Repară-l",
   "TITLE_CODING_SCORE": "Scorul obținut în urma codării",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/ru_RU.json b/frontend/src/assets/i18n/ru_RU.json
index dbbbcdc84f8..a076c0b1706 100644
--- a/frontend/src/assets/i18n/ru_RU.json
+++ b/frontend/src/assets/i18n/ru_RU.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Статус",
   "STATUS_UNSOLVED": "нерешено",
   "STATUS_SOLVED": "решено",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "недоступный",
-  "CALL_FOR_CONTRIBUTIONS": "Есть идея для нового задания? Нашёл уязвимость, которая здесь не отслеживается? Дай нам знать через <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> чат или открой новую проблему на <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a>!",
+  "STATUS_ALL": "все",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Помогите нам сделать {{appname}} лучше, ответив на <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>несколько вопросов</a>!",
   "CHALLENGE_SOLVED": "Ты успешно решил задачу: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Неправильный код.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Добавить в корзину",
   "BTN_SHOW_ALL": "Показать все",
   "BTN_SHOW_UNAVAILABLE": "Показать недоступные",
-  "INFO_DISABLED_CHALLENGES": "{{num}} заданий недоступно для {{env}} из-за <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>проблем в безопасности</a> или невозможности запуска этих заданий в силу специфики платформы {{env}}!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Cкрыть все",
   "TYPE_THESE_LETTERS": "Введите {{length}} букв",
   "BTN_REQUEST": "Запрос",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Пройдите {{tier}} тренировочных испытания, чтобы открыть следующий уровень сложности!",
   "SHOW_COMMENT": "Показать комментарий",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Нажмите, чтобы узнать, как предотвратить или смягчить подобные уязвимости!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Сохранить резервную копию",
   "SAVE_BACKUP_TOOLTIP": "Сохранить прогресс заданий и настройки приложения в файл.",
+  "BTN_RESTORE_BACKUP": "Восстановить резервную копию",
   "RESTORE_BACKUP_TOOLTIP": "Восстановить прогресс заданий и настройки приложения из файла.",
   "TAG_DANGER_ZONE": "Опасная зона",
   "TAG_DANGER_ZONE_DESCRIPTION": "Помечает потенциально опасные задания, которые по умолчанию отключены в Docker/Heroku/Gitpod из-за RCE или других рисков.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Выделяет задания, которые меньше связаны с уязвимостями, а скорее продвигают хорошие (в плане безопасности) практики.",
   "TAG_CODE_ANALYSIS": "Анализ кода",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Отмечает задания, для которых может быть полезным покопаться в исходном коде данного приложения или стороннего разработчика.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Недостатки контроля доступа",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Недостатки антиавтоматизации",
   "CATEGORY_BROKEN_AUTHENTICATION": "Недостатки аутентификации",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Найди",
   "TAB_FIX_IT": "Исправь",
   "TITLE_CODING_SCORE": "Программирование",
-  "LABEL_FEEDBACK": "Отзыв"
+  "TITLE_CODING_CHALLENGES": "Задание на программирование",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Отзыв",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/si_LK.json b/frontend/src/assets/i18n/si_LK.json
index 9e3d5be77e8..6d8a0f25f0b 100644
--- a/frontend/src/assets/i18n/si_LK.json
+++ b/frontend/src/assets/i18n/si_LK.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Status",
   "STATUS_UNSOLVED": "unsolved",
   "STATUS_SOLVED": "solved",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "unavailable",
-  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "You successfully solved a challenge: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Invalid continue code.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "Show all",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Hide all",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "Request",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/sv_SE.json b/frontend/src/assets/i18n/sv_SE.json
index fbda890cb32..43ad4bd229c 100644
--- a/frontend/src/assets/i18n/sv_SE.json
+++ b/frontend/src/assets/i18n/sv_SE.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Status",
   "STATUS_UNSOLVED": "olösta",
   "STATUS_SOLVED": "löst",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "inte tillgänglig",
-  "CALL_FOR_CONTRIBUTIONS": "Har du en idé för en ny utmaning? Har du hittat en sårbarhet som inte visas här? Meddela via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat eller genom att öppna en <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "Du har löst en utmaning: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Felaktig fortsättningskod.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Lägg till i korg",
   "BTN_SHOW_ALL": "Visa alla",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Dölj alla",
   "TYPE_THESE_LETTERS": "Skriv dessa {{length}} bokstäver",
   "BTN_REQUEST": "Förfrågan",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/th_TH.json b/frontend/src/assets/i18n/th_TH.json
index 5489b68215b..969bef77552 100644
--- a/frontend/src/assets/i18n/th_TH.json
+++ b/frontend/src/assets/i18n/th_TH.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "สถานะ",
   "STATUS_UNSOLVED": "รอการเฉลย",
   "STATUS_SOLVED": "พบคำตอบ",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "ไม่พร้อมใช้",
-  "CALL_FOR_CONTRIBUTIONS": "อยากเสนอไอเดียหรือไม่ ? พบช่องโหว่ที่ไม่มีมาก่อนหรือไม่ ? บอกให้เรารู้ทาง <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> แชทคุยกับเรา หรือ เปิด <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "ช่วยเราสร้าง {{appname}} ให้ดีขึ้นด้วยการตอบแบบสอบถาม  <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>แบบสอบถามผู้ใช้งาน</a>!",
   "CHALLENGE_SOLVED": "สำเร็จ คุณพบคำตอบ: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Invalid continue code.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "เพิ่มใส่ตะกร้า",
   "BTN_SHOW_ALL": "แสดงทั้งหมด",
   "BTN_SHOW_UNAVAILABLE": "แสดงเฉพาะข้อที่ยังรอผลเฉลย",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "ซ่อนทั้งหมด",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "ร้องขอ",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "แสดงความคิดเห็น",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "โซนอันตราย",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/tlh_AA.json b/frontend/src/assets/i18n/tlh_AA.json
index cf27f8a47ba..4b07c216348 100644
--- a/frontend/src/assets/i18n/tlh_AA.json
+++ b/frontend/src/assets/i18n/tlh_AA.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Dotlh",
   "STATUS_UNSOLVED": "poS",
   "STATUS_SOLVED": "rIn",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "tu'HomI'rup",
-  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "You successfully solved a challenge: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Invalid continue code.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "cha' Hoch",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Hoch So'",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "lIS",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/tr_TR.json b/frontend/src/assets/i18n/tr_TR.json
index 03151d5856a..0a5be51e41b 100644
--- a/frontend/src/assets/i18n/tr_TR.json
+++ b/frontend/src/assets/i18n/tr_TR.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Durumu",
   "STATUS_UNSOLVED": "çözülmemiş",
   "STATUS_SOLVED": "çözülmüş",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "kullanım dışı",
-  "CALL_FOR_CONTRIBUTIONS": "Yeni bir soru fikriniz mi var? Burada geçmeyen bir zafiyet mi buldunuz? <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> topluluğunda sohbet yoluyla veya bir <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> sorunu açarak bize bildirin!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Lütfen <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>kullanıcı anketini</a> cevaplayarak {{appname}} uygulamasını daha iyi yapmamıza  yardım edin!",
   "CHALLENGE_SOLVED": "Başarılı bir şekilde soruyu çözdünüz: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Geçersiz devam kodu.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Sepete ekle",
   "BTN_SHOW_ALL": "Tümünü göster",
   "BTN_SHOW_UNAVAILABLE": "Olmayanları göster",
-  "INFO_DISABLED_CHALLENGES": "{{env}} labindaki {{num}}  <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>güvenlik endişeleri</a> veya teknik uyumsuzluk nedeniyle kullanılamıyor!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Tümünü gizle",
   "TYPE_THESE_LETTERS": "Harfleri giriniz {{length}}",
   "BTN_REQUEST": "İstek",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Bir sonraki zorluk seviyesini ortaya çıkarmak için {{tier}} eğitim zorluklarını tamamlayın!",
   "SHOW_COMMENT": "Yorumu Göster",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Benzer güvenlik açıklarını nasıl önleyeceğinizi veya azaltacağınızı öğrenmek için tıklayın!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Görev ilerlemesini ve uygulama ayarlarını dosyaya kaydedin.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Görev ilerleme durumunu ve uygulama ayarlarını dosyadan geri yükleyin.",
   "TAG_DANGER_ZONE": "Tehlikeli Bölge",
   "TAG_DANGER_ZONE_DESCRIPTION": "RCE veya diğer riskler nedeniyle Docker/Heroku/Gitpod'da varsayılan olarak devre dışı bırakılan potansiyel zorlukları işaretler.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Güvenlik açıklarıyla ilgili olmayan, ancak iyi uygulamaları (güvenlik) destekleyen zorlukları vurgular.",
   "TAG_CODE_ANALYSIS": "Kod Analizi",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Uygulamanın bazı kaynak kodlarını veya bir üçüncü taraf kodlarını karıştırmanın yararlı olabileceği zorlukları işaretler.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Hatali Erişim Kontrolü",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Bozuk Anti Otomasyon",
   "CATEGORY_BROKEN_AUTHENTICATION": "Bozuk Kimlik Doğrulaması",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Bulun",
   "TAB_FIX_IT": "Düzelt",
   "TITLE_CODING_SCORE": "Kodlama Puanı",
-  "LABEL_FEEDBACK": "Geri Bildirim"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Geri Bildirim",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/uk_UA.json b/frontend/src/assets/i18n/uk_UA.json
index 6153ee43d19..da25fee5bcf 100644
--- a/frontend/src/assets/i18n/uk_UA.json
+++ b/frontend/src/assets/i18n/uk_UA.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "Status",
   "STATUS_UNSOLVED": "unsolved",
   "STATUS_SOLVED": "solved",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "unavailable",
-  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "You successfully solved a challenge: {{challenge}}",
   "INVALID_CONTINUE_CODE": "Invalid continue code.",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "Show all",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Hide all",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "Request",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/zh_CN.json b/frontend/src/assets/i18n/zh_CN.json
index ac4821813f6..8a0120cbb9a 100644
--- a/frontend/src/assets/i18n/zh_CN.json
+++ b/frontend/src/assets/i18n/zh_CN.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "状态",
   "STATUS_UNSOLVED": "未解决",
   "STATUS_SOLVED": "已解决",
+  "STATUS_PARTIALLY_SOLVED": "部分解决",
   "STATUS_UNAVAILABLE": "不可用",
-  "CALL_FOR_CONTRIBUTIONS": "对挑战有新主意吗？发现一个没跟进的漏洞？让我们知道通过 <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> 社区聊天或通过新建一个 <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> 的帖子 ！",
+  "STATUS_ALL": "所有",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "请通过填写 <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>用户问卷</a>来帮助我们让 {{appname}} 变得更好!",
   "CHALLENGE_SOLVED": "你成功地解决了一项挑战︰ {{challenge}}",
   "INVALID_CONTINUE_CODE": "无效继续代码。",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "添加到购物车",
   "BTN_SHOW_ALL": "显示全部",
   "BTN_SHOW_UNAVAILABLE": "显示不可用",
-  "INFO_DISABLED_CHALLENGES": "{{num}} 个挑战在 {{env}} 中不可用，因为 <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>安全问题</a>或技术上不兼容！",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "仍然显示",
+  "HIDE_DISABLED_CHALLENGES": "隐藏禁用的挑战",
   "BTN_HIDE_ALL": "隐藏全部",
   "TYPE_THESE_LETTERS": "键入 {{length}} 长度的字符",
   "BTN_REQUEST": "请求",
@@ -315,7 +319,7 @@
   "IMAGE_UPLOAD_SUCCESS": "你的图片已经成功上传.",
   "EMPTY_MEMORY_LIST": "尚未分享任何内容。",
   "LABEL_DELUXE_MEMBERSHIP": "高级成员",
-  "DESCRIPTION_DELUXE_MEMBERSHIP": "Enjoy amazing benefits as a deluxe customer of {{appname}}. Check out what is included with your membership.",
+  "DESCRIPTION_DELUXE_MEMBERSHIP": "作为一个 {{appname}} 的高级会员享受惊人的好处。看看您的会员身份包含了什么内容。",
   "LABEL_BECOME_MEMBER": "成为会员",
   "LABEL_DEALS_OFFERS": "交易和报价",
   "DESCRIPTION_DEALS_OFFERS": "作为高级会员，你可以获得独家交易和不可抗拒的价格。",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "完成 {{tier}} 含教程挑战来解锁下一个难度等级！",
   "SHOW_COMMENT": "显示评论",
   "INFO_VULNERABILITY_MITIGATION_LINK": "点击学习如何避免或缓解类似的漏洞！",
+  "BACKUP_HEADLINE": "基于文件的备份",
+  "BTN_SAVE_BACKUP": "保存备份",
   "SAVE_BACKUP_TOOLTIP": "将挑战进度和应用程序设置保存到文件。",
+  "BTN_RESTORE_BACKUP": "恢复备份",
   "RESTORE_BACKUP_TOOLTIP": "从文件恢复挑战进度和应用程序设置。",
   "TAG_DANGER_ZONE": "危险选项",
   "TAG_DANGER_ZONE_DESCRIPTION": "标记在Docker/Heroku/Gitpod中由于RCE或其他风险被禁用的潜在危险挑战",
@@ -362,7 +369,7 @@
   "TAG_PREREQUISITE": "前置要求",
   "TAG_PREREQUISITE_DESCRIPTION": "标记需要解决后才能继续完成其他一项或多项的挑战。",
   "TAG_OSINT": "开源网络情报",
-  "TAG_OSINT_DESCRIPTION": "Marks challenges which require some Internet research or \"social stalking\" activity outside the application.",
+  "TAG_OSINT_DESCRIPTION": "标记需要在应用之外进行一些互联网搜索或“社交跟踪”活动的挑战。",
   "TAG_CONTRAPTION": "新奇玩意",
   "TAG_CONTRAPTION_DESCRIPTION": "表示挑战并不完全是现实情景的一部分，而是可能刻意或精心设计的。",
   "TAG_SHENANIGANS": "恶作剧",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "高亮更多涉及安全最佳实践而不是漏洞的挑战。",
   "TAG_CODE_ANALYSIS": "代码分析",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "标记可能需要翻阅应用程序或第三方程序源码的挑战。",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "包含Web3概念或技术的标记挑战，例如区块链、加密货币、智能合约或 NFT。",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "失效的访问控制",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "失效的反自动化",
   "CATEGORY_BROKEN_AUTHENTICATION": "失效的认证",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "找到它",
   "TAB_FIX_IT": "修复它",
   "TITLE_CODING_SCORE": "编码得分",
-  "LABEL_FEEDBACK": "反馈"
+  "TITLE_CODING_CHALLENGES": "编程挑战",
+  "TITLE_HACKING_CHALLENGES": "黑客挑战",
+  "TITLE_CHALLENGES_SOLVED": "挑战已解决",
+  "LABEL_FEEDBACK": "反馈",
+  "LABEL_RESET_ALL_FILTERS": "重置所有筛选条件",
+  "NO_CHALLENGES_FOUND": "没有找到匹配筛选的挑战！",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "这是新的得分板的预览。它可能仍然存在一些问题。",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "这是新得分板的预览。如果你发现任何问题或者想反馈，请告诉我们！可以通过 <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>社区频道</a>联系我们",
+  "SCORE_BOARD_PREVIEW_BACK": "回到旧的得分板",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "得分板太慢或太令人困惑？",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "看看我们新的得分板的预览！",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "额外得分板设置",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "默认得分板",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "选择要在侧边栏链接的得分板版本",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "旧得分板",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "得分板预览",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/zh_HK.json b/frontend/src/assets/i18n/zh_HK.json
index 5c6250ec3af..e9957b3f529 100644
--- a/frontend/src/assets/i18n/zh_HK.json
+++ b/frontend/src/assets/i18n/zh_HK.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "狀態",
   "STATUS_UNSOLVED": "未解決",
   "STATUS_SOLVED": "已解決",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "unavailable",
-  "CALL_FOR_CONTRIBUTIONS": "對挑戰有新主意嗎？發現一個沒跟進的漏洞？讓我們知道通過 <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> 社區聊天或新建一個 <a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> 的問題帖子 ！",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "Please help us to make {{appname}} even better for you by answering our <a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>user questionaire</a>!",
   "CHALLENGE_SOLVED": "您成功地解決了一項挑戰︰ {{challenge}}",
   "INVALID_CONTINUE_CODE": "無效接續代碼。",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "Add to Basket",
   "BTN_SHOW_ALL": "Show all",
   "BTN_SHOW_UNAVAILABLE": "Show unavailable",
-  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>security concerns</a> or technical incompatibility!",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "Hide all",
   "TYPE_THESE_LETTERS": "Type these {{length}} letters",
   "BTN_REQUEST": "Request",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "Complete the {{tier}} tutorial challenges to unveil the next difficulty tier!",
   "SHOW_COMMENT": "Show Comment",
   "INFO_VULNERABILITY_MITIGATION_LINK": "Click to learn how to avoid or mitigate similar vulnerabilities!",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "Save challenge progress and application settings to file.",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "Restore challenge progress and application settings from file.",
   "TAG_DANGER_ZONE": "Danger Zone",
   "TAG_DANGER_ZONE_DESCRIPTION": "Marks potentially dangerous challenges which are disabled on Docker/Heroku/Gitpod by default due to RCE or other risks.",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "Highlights challenges which are less about vulnerabilities but promoting good (security) practices.",
   "TAG_CODE_ANALYSIS": "Code Analysis",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "Marks challenges where it can be helpful to rummage through some source code of the application or a third party.",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "Broken Access Control",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "Broken Anti Automation",
   "CATEGORY_BROKEN_AUTHENTICATION": "Broken Authentication",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "Find It",
   "TAB_FIX_IT": "Fix It",
   "TITLE_CODING_SCORE": "Coding Score",
-  "LABEL_FEEDBACK": "Feedback"
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "Feedback",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/i18n/zh_TW.json b/frontend/src/assets/i18n/zh_TW.json
index d0ef1b78e6b..180379e3923 100644
--- a/frontend/src/assets/i18n/zh_TW.json
+++ b/frontend/src/assets/i18n/zh_TW.json
@@ -113,8 +113,10 @@
   "LABEL_STATUS": "狀態",
   "STATUS_UNSOLVED": "尚未解決",
   "STATUS_SOLVED": "已解決",
+  "STATUS_PARTIALLY_SOLVED": "partially solved",
   "STATUS_UNAVAILABLE": "無法使用",
-  "CALL_FOR_CONTRIBUTIONS": "想到新挑戰嗎?找到沒有紀錄的新弱點嗎?在<a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'>Gitter.im</a>社群討論或新增一個<a href='https://github.com/bkimminich/juice-shop/issues'><i class='fab fa-github'>GitHub</a>議題。",
+  "STATUS_ALL": "all",
+  "CALL_FOR_CONTRIBUTIONS": "Got an idea for a new challenge? Found a vulnerability that is not tracked here? Let us know via <a href='http://gitter.im/bkimminich/juice-shop'><i class='fab fa-gitter'></i>Gitter.im</a> community chat or by opening a <a href='https://github.com/juice-shop/juice-shop/issues'><i class='fab fa-github'></i>GitHub</a> issue!",
   "CALL_FOR_FEEDBACK": "請回答<a href='{{questionnaire}}'><i class='fas fa-poll-h'></i>問卷</a>，改善{{appname}}並為您提供更好的服務",
   "CHALLENGE_SOLVED": "您成功地解決一個挑戰：{{challenge}}",
   "INVALID_CONTINUE_CODE": "無效的延續代碼",
@@ -192,7 +194,9 @@
   "ADD_BASKET": "加入購物車",
   "BTN_SHOW_ALL": "顯示全部",
   "BTN_SHOW_UNAVAILABLE": "顯示為不可用",
-  "INFO_DISABLED_CHALLENGES": "因為<a href='https://pwning.owasp-juice.shop/part1/challenges.html#potentially-dangerous-challenges'>安全考量</a>或相容性問題，在{{env}}環境中無法進行{{num}}挑戰",
+  "INFO_DISABLED_CHALLENGES": "{{num}} challenges are unavailable on {{env}} due to <a href='https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_potentially_dangerous_challenges'>security concerns</a> or technical incompatibility!",
+  "SHOW_DISABLED_CHALLENGES": "Show them anyways",
+  "HIDE_DISABLED_CHALLENGES": "Hide disabled challenges",
   "BTN_HIDE_ALL": "隱藏全部",
   "TYPE_THESE_LETTERS": "輸入這{{length}}個字",
   "BTN_REQUEST": "請求",
@@ -353,7 +357,10 @@
   "INFO_NEXT_TUTORIAL_TIER": "完成{{tier}}課程挑戰來顯示下一個更困難的層級",
   "SHOW_COMMENT": "顯示註解",
   "INFO_VULNERABILITY_MITIGATION_LINK": "點擊學習如何避免或減少類似漏洞",
+  "BACKUP_HEADLINE": "File Based Backups",
+  "BTN_SAVE_BACKUP": "Save Backup",
   "SAVE_BACKUP_TOOLTIP": "儲存挑戰進度及環境設定至檔案",
+  "BTN_RESTORE_BACKUP": "Restore Backup",
   "RESTORE_BACKUP_TOOLTIP": "從檔案中恢復挑戰進度與應用程式設定。",
   "TAG_DANGER_ZONE": "危險區域",
   "TAG_DANGER_ZONE_DESCRIPTION": "標示因RCE或其他風險因素而在Docker/Heroku/Gitpod上預設違停用之具潛在危險性挑戰\n",
@@ -375,6 +382,10 @@
   "TAG_GOOD_PRACTICE_DESCRIPTION": "重點介紹那些與漏洞無關的挑戰，但是是要提倡良好的（安全）實作。",
   "TAG_CODE_ANALYSIS": "程式碼分析",
   "TAG_CODE_ANALYSIS_DESCRIPTION": "標註出一些挑戰，這些挑戰幫你通過某些應用程序或第三方原始碼。",
+  "TAG_WEB3": "Web3",
+  "TAG_WEB3_DESCRIPTION": "Marks challenges which incorporate Web3 concepts or technology such as Blockchain, Crypto Currency, Smart Contracts, or NFT.",
+  "TAG_INTERNET_TRAFFIC": "Internet Traffic",
+  "TAG_INTERNET_TRAFFIC_DESCRIPTION": "Marks challenges strictly depending on the server being able to connect with the Internet via e.g. WebSocket or JSON-RPC.",
   "CATEGORY_BROKEN_ACCESS_CONTROL": "不適當的存取控制",
   "CATEGORY_BROKEN_ANTI_AUTOMATION": "不適當的反自動化",
   "CATEGORY_BROKEN_AUTHENTICATION": "不適當的驗證機制",
@@ -414,5 +425,64 @@
   "TAB_FIND_IT": "找出來",
   "TAB_FIX_IT": "修復它",
   "TITLE_CODING_SCORE": "編碼分數",
-  "LABEL_FEEDBACK": "回饋 "
+  "TITLE_CODING_CHALLENGES": "Coding Challenges",
+  "TITLE_HACKING_CHALLENGES": "Hacking Challenges",
+  "TITLE_CHALLENGES_SOLVED": "Challenges Solved",
+  "LABEL_FEEDBACK": "回饋 ",
+  "LABEL_RESET_ALL_FILTERS": "Reset All Filters",
+  "NO_CHALLENGES_FOUND": "No challenges found matching your filters!",
+  "SCORE_BOARD_PREVIEW_NOTICE_NO_CONTACT": "This is a preview of the new Score Board. It might still contain some bugs.",
+  "SCORE_BOARD_PREVIEW_NOTICE_WITH_CONTACT": "This is a preview of the new Score Board. If you notice any bugs or have any feedback, please let us know! Reach out via our <a href='https://owasp.org/www-project-juice-shop/' target='_blank' rel='noopener noreferrer'>community channels</a>",
+  "SCORE_BOARD_PREVIEW_BACK": "Back to the old Score Board",
+  "SCORE_BOARD_PREVIEW_CATCH_LINE": "Score Board too slow or too confusing?",
+  "SCORE_BOARD_PREVIEW_ACTION_BUTTON": "Check out the preview of our new Score Board!",
+  "SCOREBOARD_ADDITIONAL_SETTINGS": "Additional Score Board Settings",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_NAME": "Default Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_DESCRIPTION": "Choose Score Board version to be linked in the sidebar",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_OLD": "Old Score Board",
+  "FEATURE_FLAG_DEFAULT_SCORE_BOARD_VALUE_NEW": "Preview Score Board",
+  "LINK_TRY_OUT_NEW_CRYPTO_WALLET": "Try out our new Crypto Wallet",
+  "TITLE_CRYPTO_WALLET": "Crypto Wallet",
+  "BTN_CONNECT_METAMASK": "Connect your MetaMask",
+  "BTN_DEPOSIT": "Deposit",
+  "BTN_WITHDRAW": "Withdraw",
+  "ENTER_ETHER_AMOUNT": "Enter ether amount to deposit/withdraw",
+  "PLEASE_INSTALL_WEB3_WALLET": "Please install a Web3 wallet like MetaMask to proceed.",
+  "PLEASE_CONNECT_TO_SEPOLIA_NETWORK": "Please connect to the Sepolia Network.",
+  "PLEASE_CONNECT_WEB3_WALLET": "Please connect your Web3 wallet first.",
+  "TITLE_CONTRACT_EDITOR": "Contract Editor",
+  "TITLE_WEB3_SANDBOX": "Web3 Code Sandbox",
+  "EXPLANATION_SMART_CONTRACT_DEPLOYMENT": "Easily compile/deploy and invoke smart contracts from below",
+  "EXPLANATION_GWEI_VALUE_POST_COMPILATION": "You can pass ETH to the contract both while invoking/deploying by entering the GWEI Value post compilation",
+  "LABEL_SELECT_COMPILER_VERSION": "Select compiler version",
+  "BTN_COMPILE_CONTRACT": "Compile Contract",
+  "TITLE_CONTRACT_DEPLOYMENT": "Contract to deploy",
+  "LABEL_COMPILED_CONTRACTS": "Compiled Contracts",
+  "GWEI_VALUE_FOR_SENDING_ETH": "GWEI value for sending ETH",
+  "BTN_DEPLOY_SELECTED_CONTRACT": "Deploy selected Contract",
+  "LABEL_CONTRACT_ADDRESS": "Contract Address",
+  "TITLE_INTERACT_WITH_CONTRACT": "Interact with Contract",
+  "BTN_INVOKE": "Invoke",
+  "LABEL_OUTPUT_FOR": "Output for",
+  "LABEL_OUTPUT": "Output",
+  "TITLE_SBT": "Juicy Chatbot SBT",
+  "BTN_SBT_NOTE": "Note: Never reveal your personal private keys and seed phrase to anyone",
+  "LABEL_PRIVATE_KEY": "Enter Private Key",
+  "BTN_AUTHENTICATE": "Authenticate",
+  "LABEL_ACCOUNT_ADDRESS": "Account Address",
+  "OWNED_BY": "Owned by",
+  "NFT_SBT_BOX_TEXT": "Hurray! Find the Juice Shop SBT on {{link}}. This is a non-transferable token and is here to stay forever.",
+  "FAUCET_BALANCE": "Faucet Balance",
+  "BEE_BALANCE": "Your BEE Balance",
+  "TITLE_BEE_HAVEN": "BEE Haven",
+  "BEE_HAVEN_INTRO": "Welcome to Bee Haven, the hive of BEE tokens! Immerse yourself in the buzz as our generous Bee Owner shares the joy of bees with you. Embrace their bountiful generosity, but remember, taking too many bees at once may disrupt their harmonious abode.",
+  "LABEL_NUMBER_OF_BEES": "Enter no. of BEEs:",
+  "BTN_CLAIM_BEES": "Claim BEEs",
+  "BEE_HONEYPOT_TITLE": "The Enchanted Honey Pot",
+  "BEE_HONEYPOT_DESCRIPTION": "Deep within the magical realm, the Enchanted Honey Pot awaits its rightful owner. To unlock its wonders, you must trade the essence of the buzzing kingdom - BEE tokens. Gather these mystical tokens from the generous Bee Haven.",
+  "NFT_MINT_TEXT_INTRO": "Mint the Pot - 1000 BEE",
+  "NFT_MINT_TEXT_SUCCESS": "Minted Successfully",
+  "NFT_MINT_TEXT_AWAITING_APPROVAL": "Awaiting Approval",
+  "NFT_MINT_TEXT_CONFIRM": "Confirm Mint...",
+  "NFT_MINT_TEXT_IN_PROGRESS": "Mint in Process..."
 }
diff --git a/frontend/src/assets/public/ContractABIs.ts b/frontend/src/assets/public/ContractABIs.ts
new file mode 100644
index 00000000000..1888589f065
--- /dev/null
+++ b/frontend/src/assets/public/ContractABIs.ts
@@ -0,0 +1,1214 @@
+export const nftABI = [
+  {
+    inputs: [],
+    stateMutability: 'nonpayable',
+    type: 'constructor',
+  },
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'owner',
+        type: 'address',
+      },
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'approved',
+        type: 'address',
+      },
+      {
+        indexed: true,
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256',
+      },
+    ],
+    name: 'Approval',
+    type: 'event',
+  },
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'owner',
+        type: 'address',
+      },
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'operator',
+        type: 'address',
+      },
+      {
+        indexed: false,
+        internalType: 'bool',
+        name: 'approved',
+        type: 'bool',
+      },
+    ],
+    name: 'ApprovalForAll',
+    type: 'event',
+  },
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'owner',
+        type: 'address',
+      },
+      {
+        indexed: false,
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256',
+      },
+    ],
+    name: 'NFTMinted',
+    type: 'event',
+  },
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'previousOwner',
+        type: 'address',
+      },
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'newOwner',
+        type: 'address',
+      },
+    ],
+    name: 'OwnershipTransferred',
+    type: 'event',
+  },
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'from',
+        type: 'address',
+      },
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'to',
+        type: 'address',
+      },
+      {
+        indexed: true,
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256',
+      },
+    ],
+    name: 'Transfer',
+    type: 'event',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'to',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256',
+      },
+    ],
+    name: 'approve',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'owner',
+        type: 'address',
+      },
+    ],
+    name: 'balanceOf',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'fixedMetadataHash',
+    outputs: [
+      {
+        internalType: 'string',
+        name: '',
+        type: 'string',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256',
+      },
+    ],
+    name: 'getApproved',
+    outputs: [
+      {
+        internalType: 'address',
+        name: '',
+        type: 'address',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'owner',
+        type: 'address',
+      },
+      {
+        internalType: 'address',
+        name: 'operator',
+        type: 'address',
+      },
+    ],
+    name: 'isApprovedForAll',
+    outputs: [
+      {
+        internalType: 'bool',
+        name: '',
+        type: 'bool',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'mintNFT',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'mintPrice',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'name',
+    outputs: [
+      {
+        internalType: 'string',
+        name: '',
+        type: 'string',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'owner',
+    outputs: [
+      {
+        internalType: 'address',
+        name: '',
+        type: 'address',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256',
+      },
+    ],
+    name: 'ownerOf',
+    outputs: [
+      {
+        internalType: 'address',
+        name: '',
+        type: 'address',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'renounceOwnership',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'from',
+        type: 'address',
+      },
+      {
+        internalType: 'address',
+        name: 'to',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256',
+      },
+    ],
+    name: 'safeTransferFrom',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'from',
+        type: 'address',
+      },
+      {
+        internalType: 'address',
+        name: 'to',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256',
+      },
+      {
+        internalType: 'bytes',
+        name: 'data',
+        type: 'bytes',
+      },
+    ],
+    name: 'safeTransferFrom',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'operator',
+        type: 'address',
+      },
+      {
+        internalType: 'bool',
+        name: 'approved',
+        type: 'bool',
+      },
+    ],
+    name: 'setApprovalForAll',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'bytes4',
+        name: 'interfaceId',
+        type: 'bytes4',
+      },
+    ],
+    name: 'supportsInterface',
+    outputs: [
+      {
+        internalType: 'bool',
+        name: '',
+        type: 'bool',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'symbol',
+    outputs: [
+      {
+        internalType: 'string',
+        name: '',
+        type: 'string',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'token',
+    outputs: [
+      {
+        internalType: 'contract IERC20',
+        name: '',
+        type: 'address',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256',
+      },
+    ],
+    name: 'tokenURI',
+    outputs: [
+      {
+        internalType: 'string',
+        name: '',
+        type: 'string',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'totalSupply',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'from',
+        type: 'address',
+      },
+      {
+        internalType: 'address',
+        name: 'to',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'tokenId',
+        type: 'uint256',
+      },
+    ],
+    name: 'transferFrom',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'newOwner',
+        type: 'address',
+      },
+    ],
+    name: 'transferOwnership',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+];
+export const contractABI = [
+  {
+    inputs: [],
+    stateMutability: 'nonpayable',
+    type: 'constructor',
+  },
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'owner',
+        type: 'address',
+      },
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'spender',
+        type: 'address',
+      },
+      {
+        indexed: false,
+        internalType: 'uint256',
+        name: 'value',
+        type: 'uint256',
+      },
+    ],
+    name: 'Approval',
+    type: 'event',
+  },
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'from',
+        type: 'address',
+      },
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'to',
+        type: 'address',
+      },
+      {
+        indexed: false,
+        internalType: 'uint256',
+        name: 'value',
+        type: 'uint256',
+      },
+    ],
+    name: 'Transfer',
+    type: 'event',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'owner',
+        type: 'address',
+      },
+      {
+        internalType: 'address',
+        name: 'spender',
+        type: 'address',
+      },
+    ],
+    name: 'allowance',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'spender',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'amount',
+        type: 'uint256',
+      },
+    ],
+    name: 'approve',
+    outputs: [
+      {
+        internalType: 'bool',
+        name: '',
+        type: 'bool',
+      },
+    ],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'account',
+        type: 'address',
+      },
+    ],
+    name: 'balanceOf',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'decimals',
+    outputs: [
+      {
+        internalType: 'uint8',
+        name: '',
+        type: 'uint8',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'spender',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'subtractedValue',
+        type: 'uint256',
+      },
+    ],
+    name: 'decreaseAllowance',
+    outputs: [
+      {
+        internalType: 'bool',
+        name: '',
+        type: 'bool',
+      },
+    ],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'spender',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'addedValue',
+        type: 'uint256',
+      },
+    ],
+    name: 'increaseAllowance',
+    outputs: [
+      {
+        internalType: 'bool',
+        name: '',
+        type: 'bool',
+      },
+    ],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'recipient',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'amount',
+        type: 'uint256',
+      },
+    ],
+    name: 'mintTokens',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'name',
+    outputs: [
+      {
+        internalType: 'string',
+        name: '',
+        type: 'string',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'symbol',
+    outputs: [
+      {
+        internalType: 'string',
+        name: '',
+        type: 'string',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'totalSupply',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'recipient',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'amount',
+        type: 'uint256',
+      },
+    ],
+    name: 'transfer',
+    outputs: [
+      {
+        internalType: 'bool',
+        name: '',
+        type: 'bool',
+      },
+    ],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'sender',
+        type: 'address',
+      },
+      {
+        internalType: 'address',
+        name: 'recipient',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'amount',
+        type: 'uint256',
+      },
+    ],
+    name: 'transferFrom',
+    outputs: [
+      {
+        internalType: 'bool',
+        name: '',
+        type: 'bool',
+      },
+    ],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+];
+
+export const BeeTokenABI = [
+  {
+    inputs: [],
+    stateMutability: 'nonpayable',
+    type: 'constructor',
+  },
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'owner',
+        type: 'address',
+      },
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'spender',
+        type: 'address',
+      },
+      {
+        indexed: false,
+        internalType: 'uint256',
+        name: 'value',
+        type: 'uint256',
+      },
+    ],
+    name: 'Approval',
+    type: 'event',
+  },
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'from',
+        type: 'address',
+      },
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'to',
+        type: 'address',
+      },
+      {
+        indexed: false,
+        internalType: 'uint256',
+        name: 'value',
+        type: 'uint256',
+      },
+    ],
+    name: 'Transfer',
+    type: 'event',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'owner',
+        type: 'address',
+      },
+      {
+        internalType: 'address',
+        name: 'spender',
+        type: 'address',
+      },
+    ],
+    name: 'allowance',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'spender',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'amount',
+        type: 'uint256',
+      },
+    ],
+    name: 'approve',
+    outputs: [
+      {
+        internalType: 'bool',
+        name: '',
+        type: 'bool',
+      },
+    ],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'account',
+        type: 'address',
+      },
+    ],
+    name: 'balanceOf',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'decimals',
+    outputs: [
+      {
+        internalType: 'uint8',
+        name: '',
+        type: 'uint8',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'spender',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'subtractedValue',
+        type: 'uint256',
+      },
+    ],
+    name: 'decreaseAllowance',
+    outputs: [
+      {
+        internalType: 'bool',
+        name: '',
+        type: 'bool',
+      },
+    ],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'spender',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'addedValue',
+        type: 'uint256',
+      },
+    ],
+    name: 'increaseAllowance',
+    outputs: [
+      {
+        internalType: 'bool',
+        name: '',
+        type: 'bool',
+      },
+    ],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'recipient',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'amount',
+        type: 'uint256',
+      },
+    ],
+    name: 'mintTokens',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'name',
+    outputs: [
+      {
+        internalType: 'string',
+        name: '',
+        type: 'string',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'symbol',
+    outputs: [
+      {
+        internalType: 'string',
+        name: '',
+        type: 'string',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'totalSupply',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'recipient',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'amount',
+        type: 'uint256',
+      },
+    ],
+    name: 'transfer',
+    outputs: [
+      {
+        internalType: 'bool',
+        name: '',
+        type: 'bool',
+      },
+    ],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: 'sender',
+        type: 'address',
+      },
+      {
+        internalType: 'address',
+        name: 'recipient',
+        type: 'address',
+      },
+      {
+        internalType: 'uint256',
+        name: 'amount',
+        type: 'uint256',
+      },
+    ],
+    name: 'transferFrom',
+    outputs: [
+      {
+        internalType: 'bool',
+        name: '',
+        type: 'bool',
+      },
+    ],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+];
+export const BeeFaucetABI = [
+  {
+    inputs: [],
+    name: 'balance',
+    outputs: [
+      {
+        internalType: 'uint8',
+        name: '',
+        type: 'uint8',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'getBalance',
+    outputs: [
+      {
+        internalType: 'uint8',
+        name: '',
+        type: 'uint8',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [],
+    name: 'token',
+    outputs: [
+      {
+        internalType: 'contract Token',
+        name: '',
+        type: 'address',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'uint8',
+        name: 'amount',
+        type: 'uint8',
+      },
+    ],
+    name: 'withdraw',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+];
+export const web3WalletABI = [
+  {
+    anonymous: false,
+    inputs: [
+      {
+        indexed: true,
+        internalType: 'address',
+        name: 'culprit',
+        type: 'address',
+      },
+    ],
+    name: 'ContractExploited',
+    type: 'event',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: '_who',
+        type: 'address',
+      },
+    ],
+    name: 'balanceOf',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: 'balance',
+        type: 'uint256',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: '',
+        type: 'address',
+      },
+    ],
+    name: 'balances',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: '_to',
+        type: 'address',
+      },
+    ],
+    name: 'ethdeposit',
+    outputs: [],
+    stateMutability: 'payable',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'address',
+        name: '',
+        type: 'address',
+      },
+    ],
+    name: 'userWithdrawing',
+    outputs: [
+      {
+        internalType: 'uint256',
+        name: '',
+        type: 'uint256',
+      },
+    ],
+    stateMutability: 'view',
+    type: 'function',
+  },
+  {
+    inputs: [
+      {
+        internalType: 'uint256',
+        name: '_amount',
+        type: 'uint256',
+      },
+    ],
+    name: 'withdraw',
+    outputs: [],
+    stateMutability: 'nonpayable',
+    type: 'function',
+  },
+  {
+    stateMutability: 'payable',
+    type: 'receive',
+  },
+];
\ No newline at end of file
diff --git a/frontend/src/assets/public/images/BeeOwner.png b/frontend/src/assets/public/images/BeeOwner.png
new file mode 100644
index 00000000000..46f9af648be
Binary files /dev/null and b/frontend/src/assets/public/images/BeeOwner.png differ
diff --git a/frontend/src/assets/public/images/HoneyPot.png b/frontend/src/assets/public/images/HoneyPot.png
new file mode 100644
index 00000000000..1271cfd9b68
Binary files /dev/null and b/frontend/src/assets/public/images/HoneyPot.png differ
diff --git a/frontend/src/assets/public/images/padding/11px.png b/frontend/src/assets/public/images/padding/11px.png
new file mode 100644
index 00000000000..82d4a2836f0
Binary files /dev/null and b/frontend/src/assets/public/images/padding/11px.png differ
diff --git a/frontend/src/assets/public/images/products/juicy_chatbot.jpg b/frontend/src/assets/public/images/products/juicy_chatbot.jpg
new file mode 100644
index 00000000000..34f552ffbeb
Binary files /dev/null and b/frontend/src/assets/public/images/products/juicy_chatbot.jpg differ
diff --git a/frontend/src/assets/public/images/uploads/BeeHaven.png b/frontend/src/assets/public/images/uploads/BeeHaven.png
new file mode 100644
index 00000000000..cd22f8d2140
Binary files /dev/null and b/frontend/src/assets/public/images/uploads/BeeHaven.png differ
diff --git a/frontend/src/hacking-instructor/challenges/bonusPayload.ts b/frontend/src/hacking-instructor/challenges/bonusPayload.ts
index 383edb4a0dd..9019fb31862 100644
--- a/frontend/src/hacking-instructor/challenges/bonusPayload.ts
+++ b/frontend/src/hacking-instructor/challenges/bonusPayload.ts
@@ -8,7 +8,7 @@ import {
   waitForElementsInnerHtmlToBe,
   waitInMs
 } from '../helpers/helpers'
-import { ChallengeInstruction } from '../'
+import { type ChallengeInstruction } from '../'
 
 export const BonusPayloadInstruction: ChallengeInstruction = {
   name: 'Bonus Payload',
diff --git a/frontend/src/hacking-instructor/challenges/codingChallenges.ts b/frontend/src/hacking-instructor/challenges/codingChallenges.ts
index e9d8b6ab08f..fa35d07a103 100644
--- a/frontend/src/hacking-instructor/challenges/codingChallenges.ts
+++ b/frontend/src/hacking-instructor/challenges/codingChallenges.ts
@@ -6,7 +6,7 @@
 import {
   waitInMs, waitForElementToGetClicked, waitForAngularRouteToBeVisited
 } from '../helpers/helpers'
-import { ChallengeInstruction } from '../'
+import { type ChallengeInstruction } from '../'
 
 export const CodingChallengesInstruction: ChallengeInstruction = {
   name: 'Coding Challenges',
diff --git a/frontend/src/hacking-instructor/challenges/domXss.ts b/frontend/src/hacking-instructor/challenges/domXss.ts
index 262419238a0..8bb3ab021aa 100644
--- a/frontend/src/hacking-instructor/challenges/domXss.ts
+++ b/frontend/src/hacking-instructor/challenges/domXss.ts
@@ -8,7 +8,7 @@ import {
   waitForElementsInnerHtmlToBe,
   waitInMs
 } from '../helpers/helpers'
-import { ChallengeInstruction } from '../'
+import { type ChallengeInstruction } from '../'
 
 export const DomXssInstruction: ChallengeInstruction = {
   name: 'DOM XSS',
diff --git a/frontend/src/hacking-instructor/challenges/forgedFeedback.ts b/frontend/src/hacking-instructor/challenges/forgedFeedback.ts
index 735ea1b54c5..1db64624168 100644
--- a/frontend/src/hacking-instructor/challenges/forgedFeedback.ts
+++ b/frontend/src/hacking-instructor/challenges/forgedFeedback.ts
@@ -7,7 +7,7 @@ import {
   waitInMs,
   sleep, waitForAngularRouteToBeVisited, waitForElementToGetClicked, waitForDevTools
 } from '../helpers/helpers'
-import { ChallengeInstruction } from '../'
+import { type ChallengeInstruction } from '../'
 
 export const ForgedFeedbackInstruction: ChallengeInstruction = {
   name: 'Forged Feedback',
diff --git a/frontend/src/hacking-instructor/challenges/loginAdmin.ts b/frontend/src/hacking-instructor/challenges/loginAdmin.ts
index 7b70124b0c7..fa292597378 100644
--- a/frontend/src/hacking-instructor/challenges/loginAdmin.ts
+++ b/frontend/src/hacking-instructor/challenges/loginAdmin.ts
@@ -10,7 +10,7 @@ import {
   waitInMs,
   waitForAngularRouteToBeVisited, waitForLogOut
 } from '../helpers/helpers'
-import { ChallengeInstruction } from '../'
+import { type ChallengeInstruction } from '../'
 
 export const LoginAdminInstruction: ChallengeInstruction = {
   name: 'Login Admin',
diff --git a/frontend/src/hacking-instructor/challenges/loginBender.ts b/frontend/src/hacking-instructor/challenges/loginBender.ts
index 64f8ae450ad..9388ff25b12 100644
--- a/frontend/src/hacking-instructor/challenges/loginBender.ts
+++ b/frontend/src/hacking-instructor/challenges/loginBender.ts
@@ -9,7 +9,7 @@ import {
   waitInMs,
   waitForAngularRouteToBeVisited, waitForLogOut, waitForInputToNotHaveValueAndNotBeEmpty
 } from '../helpers/helpers'
-import { ChallengeInstruction } from '../'
+import { type ChallengeInstruction } from '../'
 
 export const LoginBenderInstruction: ChallengeInstruction = {
   name: 'Login Bender',
diff --git a/frontend/src/hacking-instructor/challenges/loginJim.ts b/frontend/src/hacking-instructor/challenges/loginJim.ts
index 5c2e600e962..b65656e9c7d 100644
--- a/frontend/src/hacking-instructor/challenges/loginJim.ts
+++ b/frontend/src/hacking-instructor/challenges/loginJim.ts
@@ -9,7 +9,7 @@ import {
   waitInMs,
   waitForAngularRouteToBeVisited, waitForLogOut, waitForInputToNotHaveValueAndNotBeEmpty
 } from '../helpers/helpers'
-import { ChallengeInstruction } from '../'
+import { type ChallengeInstruction } from '../'
 
 export const LoginJimInstruction: ChallengeInstruction = {
   name: 'Login Jim',
diff --git a/frontend/src/hacking-instructor/challenges/passwordStrength.ts b/frontend/src/hacking-instructor/challenges/passwordStrength.ts
index 7771606f084..f584c11f26b 100644
--- a/frontend/src/hacking-instructor/challenges/passwordStrength.ts
+++ b/frontend/src/hacking-instructor/challenges/passwordStrength.ts
@@ -10,7 +10,7 @@ import {
   waitInMs,
   waitForAngularRouteToBeVisited, waitForLogOut
 } from '../helpers/helpers'
-import { ChallengeInstruction } from '../'
+import { type ChallengeInstruction } from '../'
 
 export const PasswordStrengthInstruction: ChallengeInstruction = {
   name: 'Password Strength',
diff --git a/frontend/src/hacking-instructor/challenges/privacyPolicy.ts b/frontend/src/hacking-instructor/challenges/privacyPolicy.ts
index c913b93f852..d0936513957 100644
--- a/frontend/src/hacking-instructor/challenges/privacyPolicy.ts
+++ b/frontend/src/hacking-instructor/challenges/privacyPolicy.ts
@@ -6,7 +6,7 @@
 import {
   waitInMs, waitForAngularRouteToBeVisited, waitForElementToGetClicked, waitForLogIn
 } from '../helpers/helpers'
-import { ChallengeInstruction } from '../'
+import { type ChallengeInstruction } from '../'
 
 export const PrivacyPolicyInstruction: ChallengeInstruction = {
   name: 'Privacy Policy',
diff --git a/frontend/src/hacking-instructor/challenges/scoreBoard.ts b/frontend/src/hacking-instructor/challenges/scoreBoard.ts
index 00dcfe4a227..2cdf11734d5 100644
--- a/frontend/src/hacking-instructor/challenges/scoreBoard.ts
+++ b/frontend/src/hacking-instructor/challenges/scoreBoard.ts
@@ -6,7 +6,7 @@
 import {
   waitInMs, waitForAngularRouteToBeVisited, waitForDevTools
 } from '../helpers/helpers'
-import { ChallengeInstruction } from '../'
+import { type ChallengeInstruction } from '../'
 
 export const ScoreBoardInstruction: ChallengeInstruction = {
   name: 'Score Board',
diff --git a/frontend/src/hacking-instructor/challenges/viewBasket.ts b/frontend/src/hacking-instructor/challenges/viewBasket.ts
index 6866ed6294a..d0a57a5d07c 100644
--- a/frontend/src/hacking-instructor/challenges/viewBasket.ts
+++ b/frontend/src/hacking-instructor/challenges/viewBasket.ts
@@ -7,7 +7,7 @@ import {
   waitInMs,
   sleep, waitForAngularRouteToBeVisited, waitForLogIn, waitForDevTools
 } from '../helpers/helpers'
-import { ChallengeInstruction } from '../'
+import { type ChallengeInstruction } from '../'
 
 export const ViewBasketInstruction: ChallengeInstruction = {
   name: 'View Basket',
diff --git a/frontend/src/hacking-instructor/helpers/helpers.ts b/frontend/src/hacking-instructor/helpers/helpers.ts
index 12365b83f88..acca2ae3668 100644
--- a/frontend/src/hacking-instructor/helpers/helpers.ts
+++ b/frontend/src/hacking-instructor/helpers/helpers.ts
@@ -13,7 +13,7 @@ const playbackDelays = {
 }
 
 export async function sleep (timeInMs: number): Promise<void> {
-  return await new Promise((resolve) => {
+  await new Promise((resolve) => {
     setTimeout(resolve, timeInMs)
   })
 }
@@ -110,12 +110,12 @@ export function waitForElementToGetClicked (elementSelector: string) {
     }
 
     await new Promise<void>((resolve) => {
-      element.addEventListener('click', () => resolve())
+      element.addEventListener('click', () => { resolve() })
     })
   }
 }
 
-export function waitForElementsInnerHtmlToBe (elementSelector: string, value: String) {
+export function waitForElementsInnerHtmlToBe (elementSelector: string, value: string) {
   return async () => {
     while (true) {
       const element = document.querySelector(
diff --git a/frontend/src/hacking-instructor/index.ts b/frontend/src/hacking-instructor/index.ts
index e3c7899b82d..7e6283043cd 100644
--- a/frontend/src/hacking-instructor/index.ts
+++ b/frontend/src/hacking-instructor/index.ts
@@ -155,11 +155,11 @@ async function waitForCancel (element: HTMLElement) {
   })
 }
 
-export function hasInstructions (challengeName: String): boolean {
+export function hasInstructions (challengeName: string): boolean {
   return challengeInstructions.find(({ name }) => name === challengeName) !== undefined
 }
 
-export async function startHackingInstructorFor (challengeName: String): Promise<void> {
+export async function startHackingInstructorFor (challengeName: string): Promise<void> {
   const challengeInstruction = challengeInstructions.find(({ name }) => name === challengeName) || TutorialUnavailableInstruction
 
   for (const hint of challengeInstruction.hints) {
@@ -170,7 +170,7 @@ export async function startHackingInstructorFor (challengeName: String): Promise
     }
     element.scrollIntoView()
 
-    const continueConditions: Array<Promise<void | {}>> = [
+    const continueConditions: Array<Promise<void | unknown>> = [
       hint.resolved()
     ]
 
diff --git a/frontend/src/hacking-instructor/tutorialUnavailable.ts b/frontend/src/hacking-instructor/tutorialUnavailable.ts
index 60cf96812dc..6918c3d7f5c 100644
--- a/frontend/src/hacking-instructor/tutorialUnavailable.ts
+++ b/frontend/src/hacking-instructor/tutorialUnavailable.ts
@@ -6,7 +6,7 @@
 import {
   waitInMs
 } from './helpers/helpers'
-import { ChallengeInstruction } from './'
+import { type ChallengeInstruction } from './'
 
 export const TutorialUnavailableInstruction: ChallengeInstruction = {
   name: null,
diff --git a/frontend/src/index.html b/frontend/src/index.html
index 3e1e5166c45..e26360835e0 100644
--- a/frontend/src/index.html
+++ b/frontend/src/index.html
@@ -18,8 +18,8 @@
     window.addEventListener("load", function(){
       window.cookieconsent.initialise({
         "palette": {
-          "popup": { "background": "#37474f", "text": "#ffffff" },
-          "button": { "background": "#558b2f", "text": "#ffffff" }
+          "popup": { "background": "var(--theme-primary)", "text": "var(--theme-text)" },
+          "button": { "background": "var(--theme-accent)", "text": "var(--theme-text)" }
         },
         "theme": "classic",
         "position": "bottom-right",
diff --git a/frontend/src/karma.conf.js b/frontend/src/karma.conf.js
index e11179ed51e..ef06d8c37e3 100644
--- a/frontend/src/karma.conf.js
+++ b/frontend/src/karma.conf.js
@@ -22,9 +22,10 @@ module.exports = function (config) {
     },
     coverageReporter: {
       dir: require('path').join(__dirname, '../../build/reports/coverage/frontend-tests'),
+      subdir: '.',
       reporters: [
-        { type: 'html', subdir: '.' },
-        { type: 'lcovonly', subdir: '.' }
+        { type: 'html' },
+        { type: 'lcovonly' }
       ]
     },
     reporters: ['progress', 'kjhtml'],
@@ -33,6 +34,7 @@ module.exports = function (config) {
     logLevel: config.LOG_INFO,
     autoWatch: true,
     browsers: ['ChromeHeadless'],
-    singleRun: false
+    singleRun: false,
+    restartOnFileChange: true
   })
 }
diff --git a/frontend/src/styles.scss b/frontend/src/styles.scss
index 2b5fb47c82b..466836b720f 100644
--- a/frontend/src/styles.scss
+++ b/frontend/src/styles.scss
@@ -91,6 +91,63 @@
   }
 }
 
+// sets css variables to be used across components during runtime
+@mixin css-vars($theme) {
+  --theme-primary: #{mat.get-color-from-palette(map-get($theme, primary))};
+  --theme-primary-lighter: #{lighten(mat.get-color-from-palette(map-get($theme, primary)), 6%)};
+  --theme-primary-light: #{lighten(mat.get-color-from-palette(map-get($theme, primary)), 10%)};
+  --theme-primary-darker: #{darken(mat.get-color-from-palette(map-get($theme, primary)), 6%)};
+  --theme-primary-dark: #{darken(mat.get-color-from-palette(map-get($theme, primary)), 10%)};
+  --theme-primary-fade-10: #{fade-out(mat.get-color-from-palette(map-get($theme, primary)), 0.1)};
+  --theme-primary-fade-20: #{fade-out(mat.get-color-from-palette(map-get($theme, primary)), 0.2)};
+  --theme-primary-fade-30: #{fade-out(mat.get-color-from-palette(map-get($theme, primary)), 0.3)};
+  --theme-primary-fade-40: #{fade-out(mat.get-color-from-palette(map-get($theme, primary)), 0.4)};
+  --theme-primary-fade-50: #{fade-out(mat.get-color-from-palette(map-get($theme, primary)), 0.5)};
+
+  --theme-accent: #{mat.get-color-from-palette(map-get($theme, accent))};
+  --theme-accent-lighter: #{lighten(mat.get-color-from-palette(map-get($theme, accent)), 6%)};
+  --theme-accent-light: #{lighten(mat.get-color-from-palette(map-get($theme, accent)), 10%)};
+  --theme-accent-darker: #{darken(mat.get-color-from-palette(map-get($theme, accent)), 6%)};
+  --theme-accent-dark: #{darken(mat.get-color-from-palette(map-get($theme, accent)), 10%)};
+  --theme-accent-fade-10: #{fade-out(mat.get-color-from-palette(map-get($theme, accent)), 0.1)};
+  --theme-accent-fade-20: #{fade-out(mat.get-color-from-palette(map-get($theme, accent)), 0.2)};
+  --theme-accent-fade-30: #{fade-out(mat.get-color-from-palette(map-get($theme, accent)), 0.3)};
+  --theme-accent-fade-40: #{fade-out(mat.get-color-from-palette(map-get($theme, accent)), 0.4)};
+  --theme-accent-fade-50: #{fade-out(mat.get-color-from-palette(map-get($theme, accent)), 0.5)};
+
+  --theme-warn: #{mat.get-color-from-palette(map-get($theme, warn))};
+  --theme-warn-lighter: #{lighten(mat.get-color-from-palette(map-get($theme, warn)), 6%)};
+  --theme-warn-light: #{lighten(mat.get-color-from-palette(map-get($theme, warn)), 10%)};
+  --theme-warn-darker: #{darken(mat.get-color-from-palette(map-get($theme, warn)), 6%)};
+  --theme-warn-dark: #{darken(mat.get-color-from-palette(map-get($theme, warn)), 10%)};
+  --theme-warn-fade-10: #{fade-out(mat.get-color-from-palette(map-get($theme, warn)), 0.1)};
+  --theme-warn-fade-20: #{fade-out(mat.get-color-from-palette(map-get($theme, warn)), 0.2)};
+  --theme-warn-fade-30: #{fade-out(mat.get-color-from-palette(map-get($theme, warn)), 0.3)};
+  --theme-warn-fade-40: #{fade-out(mat.get-color-from-palette(map-get($theme, warn)), 0.4)};
+  --theme-warn-fade-50: #{fade-out(mat.get-color-from-palette(map-get($theme, warn)), 0.5)};
+
+  --theme-text: #{mat.get-color-from-palette(map-get($theme, foreground), text)};
+  --theme-text-lighter: #{lighten(mat.get-color-from-palette(map-get($theme, foreground), text,), 6%)};
+  --theme-text-light: #{lighten(mat.get-color-from-palette(map-get($theme, foreground), text,), 10%)};
+  --theme-text-darker: #{darken(mat.get-color-from-palette(map-get($theme, foreground), text,), 10%)};
+  --theme-text-dark: #{darken(mat.get-color-from-palette(map-get($theme, foreground), text,), 25%)};
+  --theme-text-fade-10: #{fade-out(mat.get-color-from-palette(map-get($theme, foreground), text,), 0.1)};
+  --theme-text-fade-20: #{fade-out(mat.get-color-from-palette(map-get($theme, foreground), text,), 0.2)};
+  --theme-text-fade-30: #{fade-out(mat.get-color-from-palette(map-get($theme, foreground), text,), 0.3)};
+  --theme-text-fade-40: #{fade-out(mat.get-color-from-palette(map-get($theme, foreground), text,), 0.4)};
+  --theme-text-fade-50: #{fade-out(mat.get-color-from-palette(map-get($theme, foreground), text,), 0.5)};
+  
+  --theme-text-invert-15: #{invert(mat.get-color-from-palette(map-get($theme, foreground), text,), 15%)};
+  --theme-text-invert-30: #{invert(mat.get-color-from-palette(map-get($theme, foreground), text,), 30%)};
+  
+  --theme-background: #{mat.get-color-from-palette(map-get($theme, background), card)};
+  --theme-background-lighter: #{lighten(mat.get-color-from-palette(map-get($theme, background), card), 6%)};
+  --theme-background-light: #{lighten(mat.get-color-from-palette(map-get($theme, background), card), 10%)};
+  --theme-background-darker: #{darken(mat.get-color-from-palette(map-get($theme, background), card), 6%)};
+  --theme-background-dark: #{darken(mat.get-color-from-palette(map-get($theme, background), card), 10%)};
+  --theme-background-darkest: #{darken(mat.get-color-from-palette(map-get($theme, background), card), 14%)};
+}
+
 @mixin snackbar($theme) {
   .mat-snack-bar-container {
     background-color: mat.get-color-from-palette(map-get($theme, background), card) !important;
@@ -134,36 +191,43 @@ $bg-hacking-instructor: rgba(0, 0, 0, 0.3);
 .deeppurple-amber-theme {
   @include mat.all-component-themes($deeppurple-amber-theme);
   @include custom-components-theme($deeppurple-amber-theme);
+  @include css-vars($deeppurple-amber-theme);
 }
 
 .indigo-pink-theme {
   @include mat.all-component-themes($indigo-pink-theme);
   @include custom-components-theme($indigo-pink-theme);
+  @include css-vars($indigo-pink-theme);
 }
 
 .pink-bluegrey-theme {
   @include mat.all-component-themes($pink-bluegrey-theme);
   @include custom-components-theme($pink-bluegrey-theme);
+  @include css-vars($pink-bluegrey-theme);
 }
 
 .purple-green-theme {
   @include mat.all-component-themes($purple-green-theme);
   @include custom-components-theme($purple-green-theme);
+  @include css-vars($purple-green-theme);
 }
 
 .bluegrey-lightgreen-theme {
   @include mat.all-component-themes($bluegrey-lightgreen-theme);
   @include custom-components-theme($bluegrey-lightgreen-theme);
+  @include css-vars($bluegrey-lightgreen-theme);
 }
 
 .blue-lightblue-theme {
   @include mat.all-component-themes($blue-lightblue-theme);
   @include custom-components-theme($blue-lightblue-theme);
+  @include css-vars($blue-lightblue-theme);
 }
 
 .deeporange-indigo-theme {
   @include mat.all-component-themes($deeporange-indigo-theme);
   @include custom-components-theme($deeporange-indigo-theme);
+  @include css-vars($deeporange-indigo-theme);
 }
 
 .close-dialog {
@@ -211,3 +275,8 @@ $bg-hacking-instructor: rgba(0, 0, 0, 0.3);
   font-family: monospace;
   padding: 0 4px;
 }
+
+.CodeMirror {
+  border-radius: 16px;
+  height: 600px !important;
+}
diff --git a/frontend/src/test.ts b/frontend/src/test.ts
index 052cc5bdbc8..60d15eaf31e 100644
--- a/frontend/src/test.ts
+++ b/frontend/src/test.ts
@@ -5,23 +5,23 @@
 
 // This file is required by karma.conf.js and loads recursively all the .spec and framework files
 
-import "zone.js/testing";
-import { getTestBed } from "@angular/core/testing";
+import 'zone.js/testing'
+import { getTestBed } from '@angular/core/testing'
 import {
   BrowserDynamicTestingModule,
   platformBrowserDynamicTesting,
-} from "@angular/platform-browser-dynamic/testing";
+} from '@angular/platform-browser-dynamic/testing'
 
-declare const require: any;
+declare const require: any
 
 // First, initialize the Angular testing environment.
 getTestBed().initTestEnvironment(
   BrowserDynamicTestingModule,
   platformBrowserDynamicTesting(),
   {
-    teardown: { destroyAfterEach: false },
+    teardown: { destroyAfterEach: false }
   }
-);
+)
 // Then we find all the tests.
 // const context = require.context('./', true, /\.spec\.ts$/)
 // // And load the modules.
diff --git a/frontend/src/tsconfig.app.json b/frontend/src/tsconfig.app.json
index 03d68c7500c..ce18150bc0c 100644
--- a/frontend/src/tsconfig.app.json
+++ b/frontend/src/tsconfig.app.json
@@ -3,6 +3,7 @@
   "compilerOptions": {
     "outDir": "../out-tsc/app",
     "module": "es2020",
+    "allowSyntheticDefaultImports": true,
     "types": []
   },
   "files": [
diff --git a/frontend/src/tsconfig.spec.json b/frontend/src/tsconfig.spec.json
index b25dac917b8..cc9f1d85f88 100644
--- a/frontend/src/tsconfig.spec.json
+++ b/frontend/src/tsconfig.spec.json
@@ -3,6 +3,7 @@
   "compilerOptions": {
     "outDir": "../out-tsc/spec",
     "module": "es2020",
+    "allowSyntheticDefaultImports": true,
     "types": [
       "jasmine",
       "node"
diff --git a/frontend/tsconfig.base.json b/frontend/tsconfig.base.json
index 92e36dbdf82..a0d58003395 100644
--- a/frontend/tsconfig.base.json
+++ b/frontend/tsconfig.base.json
@@ -8,12 +8,12 @@
     "moduleResolution": "node",
     "emitDecoratorMetadata": true,
     "experimentalDecorators": true,
-    "target": "es2018",
+    "target": "es2020",
     "typeRoots": [
       "node_modules/@types"
     ],
     "lib": [
-      "es2018",
+      "es2020",
       "dom"
     ]
   }
diff --git a/frontend/webpack.angular.js b/frontend/webpack.angular.js
new file mode 100644
index 00000000000..c9eeb9bc455
--- /dev/null
+++ b/frontend/webpack.angular.js
@@ -0,0 +1,13 @@
+// this file contains extras that should override angular's default configs
+
+const { CycloneDxWebpackPlugin } = require('@cyclonedx/webpack-plugin')
+
+module.exports = {
+  plugins: [
+    // @see https://www.npmjs.com/package/@cyclonedx/webpack-plugin
+    new CycloneDxWebpackPlugin({
+      outputLocation: '../bom', // The path is relative to webpack's overall output path,
+      includeWellknown: false
+    })
+  ]
+}
diff --git a/lib/accuracy.ts b/lib/accuracy.ts
index 47444bc4bc4..78ff9a8ddff 100644
--- a/lib/accuracy.ts
+++ b/lib/accuracy.ts
@@ -5,7 +5,7 @@
 
 import logger from './logger'
 import colors from 'colors/safe'
-const solves: { [key: string]: { 'find it': boolean, 'fix it': boolean, attempts: { 'find it': number, 'fix it': number } } } = {}
+const solves: Record<string, { 'find it': boolean, 'fix it': boolean, attempts: { 'find it': number, 'fix it': number } }> = {}
 
 type Phase = 'find it' | 'fix it'
 
diff --git a/lib/antiCheat.ts b/lib/antiCheat.ts
index 59f6c99f116..7ea0f3ec8d9 100644
--- a/lib/antiCheat.ts
+++ b/lib/antiCheat.ts
@@ -7,7 +7,7 @@ import config from 'config'
 import colors from 'colors/safe'
 import { retrieveCodeSnippet } from '../routes/vulnCodeSnippet'
 import { readFixes } from '../routes/vulnCodeFixes'
-import { Challenge } from '../data/types'
+import { type Challenge } from '../data/types'
 import { getCodeChallenges } from './codingChallenges'
 import logger from './logger'
 
@@ -18,9 +18,9 @@ const coupledChallenges = { // TODO prevent also near-identical challenges (e.g.
   uploadSizeChallenge: ['uploadTypeChallenge', 'xxeFileDisclosureChallenge', 'xxeDosChallenge'],
   uploadTypeChallenge: ['uploadSizeChallenge', 'xxeFileDisclosureChallenge', 'xxeDosChallenge']
 }
-const trivialChallenges = ['errorHandlingChallenge', 'privacyPolicyChallenge']
+const trivialChallenges = ['errorHandlingChallenge', 'privacyPolicyChallenge', 'closeNotificationsChallenge']
 
-const solves: Array<{challenge: any, phase: string, timestamp: Date, cheatScore: number}> = [{ challenge: {}, phase: 'server start', timestamp: new Date(), cheatScore: 0 }] // seed with server start timestamp
+const solves: Array<{ challenge: any, phase: string, timestamp: Date, cheatScore: number }> = [{ challenge: {}, phase: 'server start', timestamp: new Date(), cheatScore: 0 }] // seed with server start timestamp
 
 export const calculateCheatScore = (challenge: Challenge) => {
   const timestamp = new Date()
@@ -48,7 +48,7 @@ export const calculateFindItCheatScore = async (challenge: Challenge) => {
   let cheatScore = 0
 
   const codeSnippet = await retrieveCodeSnippet(challenge.key)
-  if (!codeSnippet) {
+  if (codeSnippet == null) {
     return 0
   }
   const { snippet, vulnLines } = codeSnippet
@@ -71,7 +71,7 @@ export const calculateFixItCheatScore = async (challenge: Challenge) => {
   const timestamp = new Date()
   let cheatScore = 0
 
-  const { fixes } = await readFixes(challenge.key)
+  const { fixes } = readFixes(challenge.key)
   const minutesExpectedToSolve = Math.floor(fixes.length / 2)
   const minutesSincePreviousSolve = (timestamp.getTime() - previous().timestamp.getTime()) / 60000
   cheatScore += Math.max(0, 1 - (minutesSincePreviousSolve / minutesExpectedToSolve))
@@ -86,7 +86,7 @@ export const totalCheatScore = () => {
 }
 
 function areCoupled (challenge: Challenge, previousChallenge: Challenge) {
-  // @ts-expect-error
+  // @ts-expect-error FIXME any type issues
   return coupledChallenges[challenge.key]?.indexOf(previousChallenge.key) > -1 || coupledChallenges[previousChallenge.key]?.indexOf(challenge.key) > -1
 }
 
@@ -98,14 +98,14 @@ function previous () {
   return solves[solves.length - 1]
 }
 
-const checkForIdenticalSolvedChallenge = async (challenge: Challenge): Promise<Boolean> => {
+const checkForIdenticalSolvedChallenge = async (challenge: Challenge): Promise<boolean> => {
   const codingChallenges = await getCodeChallenges()
   if (!codingChallenges.has(challenge.key)) {
     return false
   }
 
   const codingChallengesToCompareTo = codingChallenges.get(challenge.key)
-  if (!codingChallengesToCompareTo || !codingChallengesToCompareTo.snippet) {
+  if (!codingChallengesToCompareTo?.snippet) {
     return false
   }
   const snippetToCompareTo = codingChallengesToCompareTo.snippet
diff --git a/lib/botUtils.ts b/lib/botUtils.ts
index 8dad7f39e73..e75afcb4519 100644
--- a/lib/botUtils.ts
+++ b/lib/botUtils.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 import models = require('../models/index')
-import { Product } from '../data/types'
+import { type Product } from '../data/types'
 import fuzz from 'fuzzball'
 const security = require('./insecurity')
 const challengeUtils = require('./challengeUtils')
diff --git a/lib/challengeUtils.ts b/lib/challengeUtils.ts
index 03af3de3618..e56ca105ebf 100644
--- a/lib/challengeUtils.ts
+++ b/lib/challengeUtils.ts
@@ -8,12 +8,17 @@ import * as utils from './utils'
 import { calculateCheatScore, calculateFindItCheatScore, calculateFixItCheatScore } from './antiCheat'
 import * as webhook from './webhook'
 import * as accuracy from './accuracy'
+import { type Server } from 'socket.io'
 
 const challenges = require('../data/datacache').challenges
 const notifications = require('../data/datacache').notifications
 const Entities = require('html-entities').AllHtmlEntities
 const entities = new Entities()
 
+const globalWithSocketIO = global as typeof globalThis & {
+  io: SocketIOClientStatic & Server
+}
+
 export const solveIf = function (challenge: any, criteria: () => any, isRestore: boolean = false) {
   if (notSolved(challenge) && criteria()) {
     solve(challenge, isRestore)
@@ -43,16 +48,27 @@ export const sendNotification = function (challenge: { difficulty?: number, key:
       key: challenge.key,
       name: challenge.name,
       challenge: challenge.name + ' (' + entities.decode(sanitizeHtml(challenge.description, { allowedTags: [], allowedAttributes: {} })) + ')',
-      flag: flag,
+      flag,
       hidden: !config.get('challenges.showSolvedNotifications'),
-      isRestore: isRestore
+      isRestore
     }
     const wasPreviouslyShown = notifications.find(({ key }: { key: string }) => key === challenge.key) !== undefined
     notifications.push(notification)
 
-    if (global.io && (isRestore || !wasPreviouslyShown)) {
-      // @ts-expect-error
-      global.io.emit('challenge solved', notification)
+    if (globalWithSocketIO.io && (isRestore || !wasPreviouslyShown)) {
+      globalWithSocketIO.io.emit('challenge solved', notification)
+    }
+  }
+}
+
+export const sendCodingChallengeNotification = function (challenge: { key: string, codingChallengeStatus: 0 | 1 | 2 }) {
+  if (challenge.codingChallengeStatus > 0) {
+    const notification = {
+      key: challenge.key,
+      codingChallengeStatus: challenge.codingChallengeStatus
+    }
+    if (globalWithSocketIO.io) {
+      globalWithSocketIO.io.emit('code challenge solved', notification)
     }
   }
 }
@@ -89,6 +105,7 @@ export const solveFindIt = async function (key: string, isRestore: boolean) {
     accuracy.storeFindItVerdict(solvedChallenge.key, true)
     accuracy.calculateFindItAccuracy(solvedChallenge.key)
     await calculateFindItCheatScore(solvedChallenge)
+    sendCodingChallengeNotification({ key, codingChallengeStatus: 1 })
   }
 }
 
@@ -100,5 +117,6 @@ export const solveFixIt = async function (key: string, isRestore: boolean) {
     accuracy.storeFixItVerdict(solvedChallenge.key, true)
     accuracy.calculateFixItAccuracy(solvedChallenge.key)
     await calculateFixItCheatScore(solvedChallenge)
+    sendCodingChallengeNotification({ key, codingChallengeStatus: 2 })
   }
 }
diff --git a/lib/codingChallenges.ts b/lib/codingChallenges.ts
index 544e6e19bc5..7650cc28999 100644
--- a/lib/codingChallenges.ts
+++ b/lib/codingChallenges.ts
@@ -2,7 +2,7 @@ import fs from 'fs/promises'
 import path from 'path'
 import logger from './logger'
 
-export const SNIPPET_PATHS = Object.freeze(['./server.ts', './routes', './lib', './data', './frontend/src/app', './models'])
+export const SNIPPET_PATHS = Object.freeze(['./server.ts', './routes', './lib', './data', './data/static/web3-snippets', './frontend/src/app', './models'])
 
 interface FileMatch {
   path: string
diff --git a/lib/insecurity.ts b/lib/insecurity.ts
index 585ad31ae6a..e03ce5123bc 100644
--- a/lib/insecurity.ts
+++ b/lib/insecurity.ts
@@ -5,8 +5,8 @@
 
 import fs from 'fs'
 import crypto from 'crypto'
-import { Request, Response, NextFunction } from 'express'
-import { UserModel } from 'models/user'
+import { type Request, type Response, type NextFunction } from 'express'
+import { type UserModel } from 'models/user'
 import expressJwt from 'express-jwt'
 import jwt from 'jsonwebtoken'
 import jws from 'jws'
@@ -16,7 +16,7 @@ import * as utils from './utils'
 
 /* jslint node: true */
 // eslint-disable-next-line @typescript-eslint/prefer-ts-expect-error
-// @ts-ignore no typescript definitions for z85 :(
+// @ts-expect-error FIXME no typescript definitions for z85 :(
 import * as z85 from 'z85'
 
 export const publicKey = fs ? fs.readFileSync('encryptionkeys/jwt.pub', 'utf8') : 'placeholder-public-key'
@@ -31,8 +31,8 @@ interface ResponseWithUser {
 }
 
 interface IAuthenticatedUsers {
-  tokenMap: { [key: string]: ResponseWithUser }
-  idMap: {[key: string]: string}
+  tokenMap: Record<string, ResponseWithUser>
+  idMap: Record<string, string>
   put: (token: string, user: ResponseWithUser) => void
   get: (token: string) => ResponseWithUser | undefined
   tokenOf: (user: UserModel) => string | undefined
@@ -110,7 +110,7 @@ export const generateCoupon = (discount: number, date = new Date()) => {
 export const discountFromCoupon = (coupon: string) => {
   if (coupon) {
     const decoded = z85.decode(coupon)
-    if (decoded && hasValidFormat(decoded.toString())) {
+    if (decoded && (hasValidFormat(decoded.toString()) != null)) {
       const parts = decoded.toString().split('-')
       const validity = parts[0]
       if (utils.toMMMYY(new Date()) === validity) {
@@ -128,7 +128,7 @@ function hasValidFormat (coupon: string) {
 
 // vuln-code-snippet start redirectCryptoCurrencyChallenge redirectChallenge
 export const redirectAllowlist = new Set([
-  'https://github.com/bkimminich/juice-shop',
+  'https://github.com/juice-shop/juice-shop',
   'https://blockchain.info/address/1AbKfgvw9psQ41NbLi8kufDQTezwG8DRZm', // vuln-code-snippet vuln-line redirectCryptoCurrencyChallenge
   'https://explorer.dash.org/address/Xr556RzuwX6hg5EGpkybbv5RanJoZN17kW', // vuln-code-snippet vuln-line redirectCryptoCurrencyChallenge
   'https://etherscan.io/address/0x0f933ab9fcaaa782d0279c300d73750e1311eae6', // vuln-code-snippet vuln-line redirectCryptoCurrencyChallenge
diff --git a/lib/noUpdate.ts b/lib/noUpdate.ts
index d71b823ce65..ee26288ec8a 100644
--- a/lib/noUpdate.ts
+++ b/lib/noUpdate.ts
@@ -1,15 +1,15 @@
 // Credit for the implementation in JS: https://github.com/daviddossantos/sequelize-notupdate-attributes
-import { Model, ValidationErrorItemType } from 'sequelize/types'
-import { ValidationOptions } from 'sequelize/types/instance-validator'
+import { type Model, type ValidationErrorItemType } from 'sequelize/types'
+import { type ValidationOptions } from 'sequelize/types/instance-validator'
 
-interface ExtendedValidationOptions extends ValidationOptions{
+interface ExtendedValidationOptions extends ValidationOptions {
   validate: boolean
 }
 
-interface ExtendedModel extends Model{
+interface ExtendedModel extends Model {
   _changed: Iterable<string> | ArrayLike<string>
-  rawAttributes: { [x: string]: any }
-  _previousDataValues: { [x: string]: null }
+  rawAttributes: Record<string, any>
+  _previousDataValues: Record<string, null>
 }
 
 const {
@@ -29,7 +29,7 @@ export const makeKeyNonUpdatable = (model: Model, column: string) => {
 
     instanceChanged.forEach((value) => changedKeys.push(value))
 
-    if (!changedKeys.length) return
+    if (changedKeys.length === 0) return
 
     const validationErrors: ValidationErrorItemType[] = []
 
@@ -51,6 +51,6 @@ export const makeKeyNonUpdatable = (model: Model, column: string) => {
       }
     })
 
-    if (validationErrors.length) { throw new ValidationError(null, validationErrors) }
+    if (validationErrors.length > 0) { throw new ValidationError(null, validationErrors) }
   })
 }
diff --git a/lib/startup/customizeApplication.ts b/lib/startup/customizeApplication.ts
index 09d767638c8..81453845900 100644
--- a/lib/startup/customizeApplication.ts
+++ b/lib/startup/customizeApplication.ts
@@ -102,22 +102,6 @@ const customizeTheme = () => {
 }
 
 const customizeCookieConsentBanner = () => {
-  const popupProperty = '"popup": { "background": "' + config.get('application.cookieConsent.backgroundColor') + '", "text": "' + config.get('application.cookieConsent.textColor') + '" }'
-  replace({
-    regex: /"popup": { "background": ".*", "text": ".*" }/,
-    replacement: popupProperty,
-    paths: ['frontend/dist/frontend/index.html'],
-    recursive: false,
-    silent: true
-  })
-  const buttonProperty = '"button": { "background": "' + config.get('application.cookieConsent.buttonColor') + '", "text": "' + config.get('application.cookieConsent.buttonTextColor') + '" }'
-  replace({
-    regex: /"button": { "background": ".*", "text": ".*" }/,
-    replacement: buttonProperty,
-    paths: ['frontend/dist/frontend/index.html'],
-    recursive: false,
-    silent: true
-  })
   const contentProperty = '"content": { "message": "' + config.get('application.cookieConsent.message') + '", "dismiss": "' + config.get('application.cookieConsent.dismissText') + '", "link": "' + config.get('application.cookieConsent.linkText') + '", "href": "' + config.get('application.cookieConsent.linkUrl') + '" }'
   replace({
     regex: /"content": { "message": ".*", "dismiss": ".*", "link": ".*", "href": ".*" }/,
diff --git a/lib/startup/registerWebsocketEvents.ts b/lib/startup/registerWebsocketEvents.ts
index e4d3ececd3a..704bc7df13d 100644
--- a/lib/startup/registerWebsocketEvents.ts
+++ b/lib/startup/registerWebsocketEvents.ts
@@ -5,15 +5,22 @@
 
 import config from 'config'
 import * as utils from '../utils'
+import { Server } from 'socket.io'
+
 const notifications = require('../../data/datacache').notifications
 const challengeUtils = require('../challengeUtils')
 const security = require('../insecurity')
 const challenges = require('../../data/datacache').challenges
 let firstConnectedSocket: any = null
 
+const globalWithSocketIO = global as typeof globalThis & {
+  io: SocketIOClientStatic & Server
+}
+
 const registerWebsocketEvents = (server: any) => {
-  const io = require('socket.io')(server)
-  global.io = io
+  const io = new Server(server, { cors: { origin: 'http://localhost:4200' } })
+  // @ts-expect-error FIXME Type safety issue when setting global socket-io object
+  globalWithSocketIO.io = io
 
   io.on('connection', (socket: any) => {
     if (firstConnectedSocket === null) {
diff --git a/lib/startup/validateConfig.ts b/lib/startup/validateConfig.ts
index 428c442eb77..9ec4e19a6c1 100644
--- a/lib/startup/validateConfig.ts
+++ b/lib/startup/validateConfig.ts
@@ -4,7 +4,7 @@
  */
 
 import process = require('process')
-import { Memory, Product } from '../../data/types'
+import { type Memory, type Product } from '../../data/types'
 import logger from '../logger'
 import config from 'config'
 import path from 'path'
@@ -73,7 +73,7 @@ const checkMinimumRequiredNumberOfProducts = (products: Product[]) => {
 const checkUnambiguousMandatorySpecialProducts = (products: Product[]) => {
   let success = true
   specialProducts.forEach(({ name, key }) => {
-    // @ts-expect-error
+    // @ts-expect-error FIXME Ignoring any type issue on purpose
     const matchingProducts = products.filter((product) => product[key])
     if (matchingProducts.length === 0) {
       logger.warn(`No product is configured as ${colors.italic(name)} but one is required (${colors.red('NOT OK')})`)
@@ -89,9 +89,9 @@ const checkUnambiguousMandatorySpecialProducts = (products: Product[]) => {
 const checkNecessaryExtraKeysOnSpecialProducts = (products: Product[]) => {
   let success = true
   specialProducts.forEach(({ name, key, extra = {} }) => {
-    // @ts-expect-error
+    // @ts-expect-error FIXME implicit any type issue
     const matchingProducts = products.filter((product) => product[key])
-    // @ts-expect-error
+    // @ts-expect-error FIXME implicit any type issue
     if (extra.key && matchingProducts.length === 1 && !matchingProducts[0][extra.key]) {
       logger.warn(`Product ${colors.italic(matchingProducts[0].name)} configured as ${colors.italic(name)} does't contain necessary ${colors.italic(`${extra.name}`)} (${colors.red('NOT OK')})`)
       success = false
@@ -103,7 +103,7 @@ const checkNecessaryExtraKeysOnSpecialProducts = (products: Product[]) => {
 const checkUniqueSpecialOnProducts = (products: Product[]) => {
   let success = true
   products.forEach((product) => {
-    // @ts-expect-error
+    // @ts-expect-error FIXME any type issue
     const appliedSpecials = specialProducts.filter(({ key }) => product[key])
     if (appliedSpecials.length > 1) {
       logger.warn(`Product ${colors.italic(product.name)} is used as ${appliedSpecials.map(({ name }) => `${colors.italic(name)}`).join(' and ')} but can only be used for one challenge (${colors.red('NOT OK')})`)
@@ -125,7 +125,7 @@ const checkMinimumRequiredNumberOfMemories = (memories: Memory[]) => {
 const checkUnambiguousMandatorySpecialMemories = (memories: Memory[]) => {
   let success = true
   specialMemories.forEach(({ name, keys }) => {
-    // @ts-expect-error
+    // @ts-expect-error FIXME any type issue
     const matchingMemories = memories.filter((memory) => memory[keys[0]] && memory[keys[1]])
     if (matchingMemories.length === 0) {
       logger.warn(`No memory is configured as ${colors.italic(name)} but one is required (${colors.red('NOT OK')})`)
@@ -141,7 +141,7 @@ const checkUnambiguousMandatorySpecialMemories = (memories: Memory[]) => {
 const checkSpecialMemoriesHaveNoUserAssociated = (memories: Memory[]) => {
   let success = true
   specialMemories.forEach(({ name, user, keys }) => {
-    // @ts-expect-error
+    // @ts-expect-error FIXME any type issue
     const matchingMemories = memories.filter((memory) => memory[keys[0]] && memory[keys[1]] && memory.user && memory.user !== user)
     if (matchingMemories.length > 0) {
       logger.warn(`Memory configured as ${colors.italic(name)} must belong to user ${colors.italic(user)} but was linked to ${colors.italic(matchingMemories[0].user)} user (${colors.red('NOT OK')})`)
@@ -154,7 +154,7 @@ const checkSpecialMemoriesHaveNoUserAssociated = (memories: Memory[]) => {
 const checkUniqueSpecialOnMemories = (memories: Memory[]) => {
   let success = true
   memories.forEach((memory) => {
-    // @ts-expect-error
+    // @ts-expect-error FIXME any type issue
     const appliedSpecials = specialMemories.filter(({ keys }) => memory[keys[0]] && memory[keys[1]])
     if (appliedSpecials.length > 1) {
       logger.warn(`Memory ${colors.italic(memory.caption)} is used as ${appliedSpecials.map(({ name }) => `${colors.italic(name)}`).join(' and ')} but can only be used for one challenge (${colors.red('NOT OK')})`)
diff --git a/lib/startup/validatePreconditions.ts b/lib/startup/validatePreconditions.ts
index 72235758cd6..71a63803abb 100644
--- a/lib/startup/validatePreconditions.ts
+++ b/lib/startup/validatePreconditions.ts
@@ -13,8 +13,13 @@ const process = require('process')
 const semver = require('semver')
 const portscanner = require('portscanner')
 const fs = require('fs')
+const checkInternetConnected = require('check-internet-connected')
 const access = promisify(fs.access)
 
+const domainDependencies = {
+  'https://www.alchemy.com/': ['"Mint the Honeypot" challenge', '"Wallet Depletion" challenge']
+}
+
 const validatePreconditions = async ({ exitOnFailure = true } = {}) => {
   let success = true
   success = checkIfRunningOnSupportedNodeVersion(process.version) && success
@@ -26,11 +31,11 @@ const validatePreconditions = async ({ exitOnFailure = true } = {}) => {
     checkIfRequiredFileExists('frontend/dist/frontend/index.html'),
     checkIfRequiredFileExists('frontend/dist/frontend/styles.css'),
     checkIfRequiredFileExists('frontend/dist/frontend/main.js'),
-    checkIfRequiredFileExists('frontend/dist/frontend/tutorial.js'),
     checkIfRequiredFileExists('frontend/dist/frontend/polyfills.js'),
     checkIfRequiredFileExists('frontend/dist/frontend/runtime.js'),
     checkIfRequiredFileExists('frontend/dist/frontend/vendor.js'),
-    checkIfPortIsAvailable(process.env.PORT || config.get('server.port'))
+    checkIfPortIsAvailable(process.env.PORT || config.get('server.port')),
+    checkIfDomainReachable('https://www.alchemy.com/')
   ])).every(condition => condition)
 
   if ((!success || !asyncConditions) && exitOnFailure) {
@@ -71,6 +76,22 @@ const checkIfRunningOnSupportedCPU = (runningArch: string) => {
   return true
 }
 
+const checkIfDomainReachable = async (domain: string) => {
+  return checkInternetConnected({ domain })
+    .then(() => {
+      logger.info(`Domain ${colors.bold(domain)} is reachable (${colors.green('OK')})`)
+      return true
+    })
+    .catch(() => {
+      logger.warn(`Domain ${colors.bold(domain)} is not reachable (${colors.yellow('NOT OK')} in a future major release)`)
+      // @ts-expect-error FIXME Type problem by accessing key via variable
+      domainDependencies[domain].forEach((dependency: string) => {
+        logger.warn(`${colors.italic(dependency)} will not work as intended without access to ${colors.bold(domain)}`)
+      })
+      return true // TODO Consider switching to "false" with breaking release v16.0.0 or later
+    })
+}
+
 const checkIfPortIsAvailable = async (port: number) => {
   return await new Promise((resolve, reject) => {
     portscanner.checkPortStatus(port, function (error: unknown, status: string) {
diff --git a/lib/utils.ts b/lib/utils.ts
index a1cd0dc630b..496dfa58a65 100644
--- a/lib/utils.ts
+++ b/lib/utils.ts
@@ -74,7 +74,7 @@ export const trunc = function (str: string, length: number) {
 
 export const version = (module?: string) => {
   if (module) {
-    // @ts-expect-error
+    // @ts-expect-error FIXME Ignoring any type issue on purpose
     return packageJson.dependencies[module]
   } else {
     return packageJson.version
@@ -134,7 +134,7 @@ export const downloadToFile = async (url: string, dest: string) => {
   }
 }
 
-export const jwtFrom = ({ headers }: { headers: any}) => {
+export const jwtFrom = ({ headers }: { headers: any }) => {
   if (headers?.authorization) {
     const parts = headers.authorization.split(' ')
     if (parts.length === 2) {
diff --git a/lib/webhook.ts b/lib/webhook.ts
index 33b3730bcbf..3d0f0c9c505 100644
--- a/lib/webhook.ts
+++ b/lib/webhook.ts
@@ -23,7 +23,7 @@ export const notify = async (challenge: { key: any, name: any }, cheatScore = -1
     json: {
       solution: {
         challenge: challenge.key,
-        cheatScore: cheatScore,
+        cheatScore,
         totalCheatScore: totalCheatScore(),
         issuedOn: new Date().toISOString()
       },
diff --git a/models/address.ts b/models/address.ts
index 89bfd9db931..6cad18c5d39 100644
--- a/models/address.ts
+++ b/models/address.ts
@@ -4,12 +4,12 @@
  */
 
 import {
-  CreationOptional,
-  InferAttributes,
-  InferCreationAttributes,
+  type CreationOptional,
+  type InferAttributes,
+  type InferCreationAttributes,
   Model,
   DataTypes,
-  Sequelize
+  type Sequelize
 } from 'sequelize'
 /* jslint node: true */
 class Address extends Model<
diff --git a/models/basket.ts b/models/basket.ts
index 82bde0f65f4..1bdb8e2964b 100644
--- a/models/basket.ts
+++ b/models/basket.ts
@@ -7,14 +7,14 @@
 
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  NonAttribute,
-  Sequelize
+  type CreationOptional,
+  type NonAttribute,
+  type Sequelize
 } from 'sequelize'
-import { ProductModel } from './product'
+import { type ProductModel } from './product'
 
 class Basket extends Model<
 InferAttributes<Basket>,
diff --git a/models/basketitem.ts b/models/basketitem.ts
index 29b426bbe04..4c0b4d9460c 100644
--- a/models/basketitem.ts
+++ b/models/basketitem.ts
@@ -6,11 +6,11 @@
 /* jslint node: true */
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 
 class BasketItem extends Model<
diff --git a/models/captcha.ts b/models/captcha.ts
index ff1df1e74ee..e0c3cfc7b48 100644
--- a/models/captcha.ts
+++ b/models/captcha.ts
@@ -5,10 +5,10 @@
 
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  Sequelize
+  type Sequelize
 } from 'sequelize'
 
 class Captcha extends Model<
diff --git a/models/card.ts b/models/card.ts
index cd939c8e89a..69f8377469e 100644
--- a/models/card.ts
+++ b/models/card.ts
@@ -6,11 +6,11 @@
 /* jslint node: true */
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 class Card extends Model<
 InferAttributes<Card>,
diff --git a/models/challenge.ts b/models/challenge.ts
index f24bdf585c5..e2ee0d60768 100644
--- a/models/challenge.ts
+++ b/models/challenge.ts
@@ -6,11 +6,11 @@
 /* jslint node: true */
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 class Challenge extends Model<
 InferAttributes<Challenge>,
diff --git a/models/complaint.ts b/models/complaint.ts
index 358624e51f1..8fdc8b2c39d 100644
--- a/models/complaint.ts
+++ b/models/complaint.ts
@@ -7,11 +7,11 @@
 
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 
 class Complaint extends Model<
diff --git a/models/delivery.ts b/models/delivery.ts
index 954cfc8e929..f9bbf865c94 100644
--- a/models/delivery.ts
+++ b/models/delivery.ts
@@ -5,11 +5,11 @@
 
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 
 class Delivery extends Model<
diff --git a/models/feedback.ts b/models/feedback.ts
index 2c0b058a3cb..514c255fced 100644
--- a/models/feedback.ts
+++ b/models/feedback.ts
@@ -9,11 +9,11 @@ import challengeUtils = require('../lib/challengeUtils')
 
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 const security = require('../lib/insecurity')
 const challenges = require('../data/datacache').challenges
diff --git a/models/imageCaptcha.ts b/models/imageCaptcha.ts
index ec5c2e2f78f..fdb4dd49f67 100644
--- a/models/imageCaptcha.ts
+++ b/models/imageCaptcha.ts
@@ -5,11 +5,11 @@
 
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 
 class ImageCaptcha extends Model<
diff --git a/models/memory.ts b/models/memory.ts
index 7383c736790..f7548541057 100644
--- a/models/memory.ts
+++ b/models/memory.ts
@@ -7,11 +7,11 @@
 
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 
 class Memory extends Model<
diff --git a/models/privacyRequests.ts b/models/privacyRequests.ts
index 3aef3736a41..cd0abbd31ef 100644
--- a/models/privacyRequests.ts
+++ b/models/privacyRequests.ts
@@ -7,11 +7,11 @@
 
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 
 class PrivacyRequestModel extends Model<
diff --git a/models/product.ts b/models/product.ts
index c008732e765..001a3b03d33 100644
--- a/models/product.ts
+++ b/models/product.ts
@@ -8,13 +8,13 @@ import utils = require('../lib/utils')
 import challengeUtils = require('../lib/challengeUtils')
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
-import { BasketItemModel } from './basketitem'
+import { type BasketItemModel } from './basketitem'
 const security = require('../lib/insecurity')
 const challenges = require('../data/datacache').challenges
 
diff --git a/models/quantity.ts b/models/quantity.ts
index ad2d2faca9b..f28e93d8c5f 100644
--- a/models/quantity.ts
+++ b/models/quantity.ts
@@ -7,11 +7,11 @@
 
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 
 class Quantity extends Model<
diff --git a/models/recycle.ts b/models/recycle.ts
index 8599f921c1e..24d600536c3 100644
--- a/models/recycle.ts
+++ b/models/recycle.ts
@@ -7,11 +7,11 @@
 
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 
 class Recycle extends Model<
diff --git a/models/relations.ts b/models/relations.ts
index 242c6b3c0b1..0cb620ec5ce 100644
--- a/models/relations.ts
+++ b/models/relations.ts
@@ -1,4 +1,4 @@
-import { Sequelize } from 'sequelize/types'
+import { type Sequelize } from 'sequelize/types'
 import { AddressModel } from './address'
 import { BasketModel } from './basket'
 import { BasketItemModel } from './basketitem'
@@ -41,7 +41,7 @@ const relationsInit = (_sequelize: Sequelize) => {
       name: 'BasketId'
     }
   })
-  // @ts-expect-error
+  // @ts-expect-error FIXME type mismatch
   makeKeyNonUpdatable(BasketItemModel, 'BasketId')
 
   CardModel.belongsTo(UserModel, {
@@ -94,7 +94,7 @@ const relationsInit = (_sequelize: Sequelize) => {
       name: 'ProductId'
     }
   })
-  // @ts-expect-error
+  // @ts-expect-error FIXME type mismatch
   makeKeyNonUpdatable(BasketItemModel, 'ProductId')
 
   QuantityModel.belongsTo(ProductModel, {
diff --git a/models/securityAnswer.ts b/models/securityAnswer.ts
index 4ebbbdad36a..0309a002528 100644
--- a/models/securityAnswer.ts
+++ b/models/securityAnswer.ts
@@ -6,11 +6,11 @@
 /* jslint node: true */
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 const security = require('../lib/insecurity')
 
diff --git a/models/securityQuestion.ts b/models/securityQuestion.ts
index 520e74f5362..34481949717 100644
--- a/models/securityQuestion.ts
+++ b/models/securityQuestion.ts
@@ -6,11 +6,11 @@
 /* jslint node: true */
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 
 class SecurityQuestion extends Model<
diff --git a/models/user.ts b/models/user.ts
index 34d8241fc9f..7160cf994a1 100644
--- a/models/user.ts
+++ b/models/user.ts
@@ -6,12 +6,12 @@
 /* jslint node: true */
 import config from 'config'
 import {
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   Model,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 import challengeUtils = require('../lib/challengeUtils')
 import * as utils from '../lib/utils'
@@ -126,13 +126,13 @@ const UserModelInit = (sequelize: Sequelize) => { // vuln-code-snippet start wea
     }
   )
 
-  User.addHook('afterValidate', (user: User) => {
+  User.addHook('afterValidate', async (user: User) => {
     if (
       user.email &&
     user.email.toLowerCase() ===
       `acc0unt4nt@${config.get('application.domain')}`.toLowerCase()
     ) {
-      return Promise.reject(
+      await Promise.reject(
         new Error(
           'Nice try, but this is not how the "Ephemeral Accountant" challenge works!'
         )
diff --git a/models/wallet.ts b/models/wallet.ts
index 3376f882d27..b4e17931302 100644
--- a/models/wallet.ts
+++ b/models/wallet.ts
@@ -6,11 +6,11 @@
 /* jslint node: true */
 import {
   Model,
-  InferAttributes,
-  InferCreationAttributes,
+  type InferAttributes,
+  type InferCreationAttributes,
   DataTypes,
-  CreationOptional,
-  Sequelize
+  type CreationOptional,
+  type Sequelize
 } from 'sequelize'
 
 class Wallet extends Model<
diff --git a/package.json b/package.json
index 7d5c7c32226..6fe78d2692d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "juice-shop",
-  "version": "15.0.0",
+  "version": "15.3.0",
   "private": true,
   "description": "Probably the most modern and sophisticated insecure web application",
   "keywords": [
@@ -53,11 +53,11 @@
     "cypress:open": "cypress open",
     "frisby": "nyc --report-dir=./build/reports/coverage/api-tests jest --silent --runInBand --forceExit",
     "postinstall": "cd frontend && npm install --legacy-peer-deps && cd .. && npm run build:frontend && (npm run --silent build:server || cd .)",
-    "lint": "eslint *.[jt]s data lib models routes test views && cd frontend && ng lint && npx stylelint \"**/*.scss\" && cd ..",
+    "lint": "eslint *.ts data lib models routes test/**/*.ts views && cd frontend && ng lint && npx stylelint \"**/*.scss\" && cd ..",
     "lint:config": "schema validate -s config.schema.yml",
-    "lint:fix": "eslint *.[jt]s data lib models routes test views rsn --fix && cd frontend && ng lint --fix && npx stylelint \"**/*.scss\" --fix && cd ..",
+    "lint:fix": "eslint *.ts data lib models routes test/**/*.ts views rsn --fix && cd frontend && ng lint --fix && npx stylelint \"**/*.scss\" --fix && cd ..",
     "package": "grunt package",
-    "package:ci": "npm prune --production && npm dedupe && cd frontend && npm prune --legacy-peer-deps --production && cd .. && grunt package",
+    "package:ci": "npm prune --production && npm dedupe && cd frontend && npm prune --legacy-peer-deps --production && cd .. && npm run --silent sbom && grunt package",
     "serve": "concurrently --kill-others \"ts-node app.ts\" \"cd frontend && ng serve\"",
     "serve:dev": "concurrently --kill-others \"ts-node-dev app.ts\" \"cd frontend && ng serve\"",
     "start": "node build/app",
@@ -68,7 +68,10 @@
     "rsn": "ts-node rsn/rsn.ts",
     "rsn:verbose": "ts-node rsn/rsn-verbose.ts",
     "rsn:update": "ts-node rsn/rsn-update.ts",
-    "vagrant": "cd vagrant && vagrant up"
+    "vagrant": "cd vagrant && vagrant up",
+    "sbom": "npm run sbom:json && npm run sbom:xml",
+    "sbom:json": "cyclonedx-npm --omit=dev --output-format=JSON --output-file=bom.json",
+    "sbom:xml": " cyclonedx-npm --omit=dev --output-format=XML  --output-file=bom.xml"
   },
   "jest": {
     "preset": "ts-jest",
@@ -109,9 +112,10 @@
     ]
   },
   "dependencies": {
-    "body-parser": "^1.19.0",
+    "body-parser": "^1.20.2",
     "check-dependencies": "^1.1.0",
-    "clarinet": "^0.12.4",
+    "check-internet-connected": "^2.0.6",
+    "clarinet": "^0.12.5",
     "colors": "1.4.0",
     "compression": "^1.7.4",
     "concurrently": "^5.3.0",
@@ -121,6 +125,7 @@
     "dottie": "^2.0.2",
     "download": "^8.0.0",
     "errorhandler": "^1.5.1",
+    "ethers": "^6.7.0",
     "exif": "^0.6.0",
     "express": "^4.17.1",
     "express-ipfilter": "^1.2.0",
@@ -148,7 +153,7 @@
     "js-yaml": "^3.14.0",
     "jsonwebtoken": "0.4.0",
     "jssha": "^3.1.1",
-    "juicy-chat-bot": "~0.7.1",
+    "juicy-chat-bot": "~0.8.0",
     "libxmljs2": "^0.32.0",
     "marsdb": "^0.6.11",
     "morgan": "^1.10.0",
@@ -171,23 +176,26 @@
     "socket.io": "^3.1.0",
     "sqlite3": "^5.0.8",
     "svg-captcha": "^1.4.0",
-    "swagger-ui-express": "^4.1.4",
+    "swagger-ui-express": "^5.0.0",
     "ts-node-dev": "^1.1.6",
     "unzipper": "0.9.15",
+    "web3": "^4.0.3",
     "winston": "^3.3.3",
     "yaml-schema-validator": "^1.2.2",
     "z85": "^0.0.2"
   },
   "devDependencies": {
+    "@cyclonedx/cyclonedx-npm": "^1.12.0",
     "@istanbuljs/nyc-config-typescript": "^1.0.1",
     "@types/chai": "^4.2.14",
     "@types/chai-as-promised": "^7.1.3",
     "@types/clarinet": "^0.12.1",
     "@types/compression": "^1.7.0",
-    "@types/config": "^0.0.41",
+    "@types/config": "^3.3.1",
     "@types/cookie-parser": "^1.4.2",
     "@types/cors": "^2.8.9",
     "@types/cross-spawn": "^6.0.2",
+    "@types/cypress": "^1.1.3",
     "@types/download": "^6.2.4",
     "@types/errorhandler": "^1.5.0",
     "@types/exif": "^0.6.3",
@@ -223,18 +231,18 @@
     "@types/swagger-ui-express": "^4.1.2",
     "@types/unzipper": "^0.10.3",
     "@types/validator": "^13.1.3",
-    "@typescript-eslint/eslint-plugin": "^4.16.1",
-    "@typescript-eslint/parser": "^4.16.1",
+    "@typescript-eslint/eslint-plugin": "^6.7.2",
+    "@typescript-eslint/parser": "^6.7.2",
     "chai": "^4.2.0",
     "chai-as-promised": "^7.1.1",
     "cross-spawn": "^7.0.3",
-    "cypress": "^9.7.0",
-    "eslint": "^7.21.0",
-    "eslint-config-standard-with-typescript": "^21.0.1",
-    "eslint-plugin-import": "^2.22.1",
+    "cypress": "^11.2.0",
+    "eslint": "^8.49.0",
+    "eslint-config-standard-with-typescript": "^39.0.0",
+    "eslint-plugin-import": "^2.28.1",
     "eslint-plugin-node": "^11.1.0",
-    "eslint-plugin-promise": "^4.3.1",
-    "frisby": "^2.1.3",
+    "eslint-plugin-promise": "^6.1.1",
+    "frisby": "https://github.com/bkimminich/frisby.git",
     "grunt-cli": "^1.3.2",
     "http-server": "^0.12.3",
     "jasmine": "^3.9.0",
@@ -242,7 +250,7 @@
     "jasmine-reporters": "^2.5.0",
     "jest": "^26.6.3",
     "mocha": "^8.1.1",
-    "node-fetch": "^2.6.1",
+    "node-fetch": "^2.6.13",
     "nyc": "^15.1.0",
     "shelljs": "^0.8.4",
     "sinon": "^11.1.2",
diff --git a/routes/2fa.ts b/routes/2fa.ts
index 57bb860042a..59a70dbc70f 100644
--- a/routes/2fa.ts
+++ b/routes/2fa.ts
@@ -4,7 +4,7 @@
  */
 
 import config from 'config'
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 import { BasketModel } from '../models/basket'
 import { UserModel } from '../models/user'
 import challengeUtils = require('../lib/challengeUtils')
@@ -31,7 +31,7 @@ async function verify (req: Request, res: Response) {
     }
 
     const user = await UserModel.findByPk(userId)
-    if (!user) {
+    if (user == null) {
       throw new Error('No such user found!')
     }
 
@@ -47,6 +47,7 @@ async function verify (req: Request, res: Response) {
     const [basket] = await BasketModel.findOrCreate({ where: { UserId: userId } })
 
     const token = security.authorize(plainUser)
+    // @ts-expect-error FIXME set new property for original basket
     plainUser.bid = basket.id // keep track of original basket for challenge solution check
     security.authenticatedUsers.put(token, plainUser)
 
@@ -128,7 +129,7 @@ async function setup (req: Request, res: Response) {
 
     // Update db model and cached object
     const userModel = await UserModel.findByPk(user.id)
-    if (!userModel) {
+    if (userModel == null) {
       throw new Error('No such user found!')
     }
 
@@ -161,7 +162,7 @@ async function disable (req: Request, res: Response) {
 
     // Update db model and cached object
     const userModel = await UserModel.findByPk(user.id)
-    if (!userModel) {
+    if (userModel == null) {
       throw new Error('No such user found!')
     }
 
diff --git a/routes/address.ts b/routes/address.ts
index 27a1569bdd4..dc9fa424d27 100644
--- a/routes/address.ts
+++ b/routes/address.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 import { AddressModel } from '../models/address'
 
 module.exports.getAddress = function getAddress () {
@@ -16,7 +16,7 @@ module.exports.getAddress = function getAddress () {
 module.exports.getAddressById = function getAddressById () {
   return async (req: Request, res: Response) => {
     const address = await AddressModel.findOne({ where: { id: req.params.id, UserId: req.body.UserId } })
-    if (address) {
+    if (address != null) {
       res.status(200).json({ status: 'success', data: address })
     } else {
       res.status(400).json({ status: 'error', data: 'Malicious activity detected.' })
diff --git a/routes/angular.ts b/routes/angular.ts
index f7cf9a459df..b70e6944d46 100644
--- a/routes/angular.ts
+++ b/routes/angular.ts
@@ -4,7 +4,7 @@
  */
 
 import path = require('path')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 
 import * as utils from '../lib/utils'
 
diff --git a/routes/appConfiguration.ts b/routes/appConfiguration.ts
index 5abbfa48df8..3bffd3b0746 100644
--- a/routes/appConfiguration.ts
+++ b/routes/appConfiguration.ts
@@ -4,7 +4,7 @@
  */
 
 import config from 'config'
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 
 module.exports = function retrieveAppConfiguration () {
   return (_req: Request, res: Response) => {
diff --git a/routes/appVersion.ts b/routes/appVersion.ts
index e0bd0bbe680..d784c8f1e98 100644
--- a/routes/appVersion.ts
+++ b/routes/appVersion.ts
@@ -4,7 +4,7 @@
  */
 
 import config from 'config'
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 
 import * as utils from '../lib/utils'
 
diff --git a/routes/authenticatedUsers.ts b/routes/authenticatedUsers.ts
index 5605093f7bb..3c4f31c8db8 100644
--- a/routes/authenticatedUsers.ts
+++ b/routes/authenticatedUsers.ts
@@ -2,7 +2,7 @@
  * Copyright (c) 2014-2023 Bjoern Kimminich & the OWASP Juice Shop contributors.
  * SPDX-License-Identifier: MIT
  */
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { UserModel } from '../models/user'
 
 import * as utils from '../lib/utils'
diff --git a/routes/b2bOrder.ts b/routes/b2bOrder.ts
index ef801524871..81988d59401 100644
--- a/routes/b2bOrder.ts
+++ b/routes/b2bOrder.ts
@@ -4,7 +4,7 @@
  */
 
 import vm = require('vm')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import challengeUtils = require('../lib/challengeUtils')
 
 import * as utils from '../lib/utils'
@@ -22,7 +22,7 @@ module.exports = function b2bOrder () {
         vm.runInContext('safeEval(orderLinesData)', sandbox, { timeout: 2000 })
         res.json({ cid: body.cid, orderNo: uniqueOrderNumber(), paymentDue: dateTwoWeeksFromNow() })
       } catch (err) {
-        if (utils.getErrorMessage(err).match(/Script execution timed out.*/)) {
+        if (utils.getErrorMessage(err).match(/Script execution timed out.*/) != null) {
           challengeUtils.solveIf(challenges.rceOccupyChallenge, () => { return true })
           res.status(503)
           next(new Error('Sorry, we are temporarily not available! Please try again later.'))
diff --git a/routes/basket.ts b/routes/basket.ts
index 9e8ef729ef7..d99ff7734d1 100644
--- a/routes/basket.ts
+++ b/routes/basket.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { ProductModel } from '../models/product'
 import { BasketModel } from '../models/basket'
 import challengeUtils = require('../lib/challengeUtils')
@@ -22,7 +22,7 @@ module.exports = function retrieveBasket () {
           const user = security.authenticatedUsers.from(req)
           return user && id && id !== 'undefined' && id !== 'null' && id !== 'NaN' && user.bid && user.bid != id // eslint-disable-line eqeqeq
         })
-        if (basket?.Products && basket.Products.length > 0) {
+        if (((basket?.Products) != null) && basket.Products.length > 0) {
           for (let i = 0; i < basket.Products.length; i++) {
             basket.Products[i].name = req.__(basket.Products[i].name)
           }
diff --git a/routes/basketItems.ts b/routes/basketItems.ts
index ac2935401a2..9130a9cb217 100644
--- a/routes/basketItems.ts
+++ b/routes/basketItems.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { BasketItemModel } from '../models/basketitem'
 import { QuantityModel } from '../models/quantity'
 import challengeUtils = require('../lib/challengeUtils')
@@ -68,7 +68,7 @@ module.exports.quantityCheckBeforeBasketItemUpdate = function quantityCheckBefor
       const user = security.authenticatedUsers.from(req)
       challengeUtils.solveIf(challenges.basketManipulateChallenge, () => { return user && req.body.BasketId && user.bid != req.body.BasketId }) // eslint-disable-line eqeqeq
       if (req.body.quantity) {
-        if (!item) {
+        if (item == null) {
           throw new Error('No such item found!')
         }
         void quantityCheck(req, res, next, item.ProductId, req.body.quantity)
@@ -83,7 +83,7 @@ module.exports.quantityCheckBeforeBasketItemUpdate = function quantityCheckBefor
 
 async function quantityCheck (req: Request, res: Response, next: NextFunction, id: number, quantity: number) {
   const product = await QuantityModel.findOne({ where: { ProductId: id } })
-  if (!product) {
+  if (product == null) {
     throw new Error('No such product found!')
   }
 
diff --git a/routes/captcha.ts b/routes/captcha.ts
index 78737b79c76..c5fc7a499ba 100644
--- a/routes/captcha.ts
+++ b/routes/captcha.ts
@@ -3,8 +3,8 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
-import { Captcha } from '../data/types'
+import { type Request, type Response, type NextFunction } from 'express'
+import { type Captcha } from '../data/types'
 import { CaptchaModel } from '../models/captcha'
 
 function captchas () {
@@ -23,9 +23,9 @@ function captchas () {
     const answer = eval(expression).toString() // eslint-disable-line no-eval
 
     const captcha = {
-      captchaId: captchaId,
+      captchaId,
       captcha: expression,
-      answer: answer
+      answer
     }
     const captchaInstance = CaptchaModel.build(captcha)
     await captchaInstance.save()
@@ -35,7 +35,7 @@ function captchas () {
 
 captchas.verifyCaptcha = () => (req: Request, res: Response, next: NextFunction) => {
   CaptchaModel.findOne({ where: { captchaId: req.body.captchaId } }).then((captcha: Captcha | null) => {
-    if (captcha && req.body.captcha === captcha.answer) {
+    if ((captcha != null) && req.body.captcha === captcha.answer) {
       next()
     } else {
       res.status(401).send(res.__('Wrong answer to CAPTCHA. Please try again.'))
diff --git a/routes/changePassword.ts b/routes/changePassword.ts
index 71c6e1452dc..83b8891a727 100644
--- a/routes/changePassword.ts
+++ b/routes/changePassword.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { UserModel } from '../models/user'
 import challengeUtils = require('../lib/challengeUtils')
 
@@ -29,7 +29,7 @@ module.exports = function changePassword () {
           res.status(401).send(res.__('Current password is not correct.'))
         } else {
           UserModel.findByPk(loggedInUser.data.id).then((user: UserModel | null) => {
-            if (user) {
+            if (user != null) {
               user.update({ password: newPasswordInString }).then((user: UserModel) => {
                 challengeUtils.solveIf(challenges.changePasswordBenderChallenge, () => { return user.id === 3 && !currentPassword && user.password === security.hash('slurmCl4ssic') })
                 res.json({ user })
diff --git a/routes/chatbot.ts b/routes/chatbot.ts
index 091fda9e86f..680a13d94e5 100644
--- a/routes/chatbot.ts
+++ b/routes/chatbot.ts
@@ -4,10 +4,10 @@
  */
 
 import fs from 'fs/promises'
-import { Request, Response, NextFunction } from 'express'
-import { User } from '../data/types'
+import { type Request, type Response, type NextFunction } from 'express'
+import { type User } from '../data/types'
 import { UserModel } from '../models/user'
-import jwt, { JwtPayload, VerifyErrors } from 'jsonwebtoken'
+import jwt, { type JwtPayload, type VerifyErrors } from 'jsonwebtoken'
 import challengeUtils = require('../lib/challengeUtils')
 import logger from '../lib/logger'
 import config from 'config'
@@ -49,7 +49,7 @@ export async function initialize () {
 void initialize()
 
 async function processQuery (user: User, req: Request, res: Response, next: NextFunction) {
-  if (!bot) {
+  if (bot == null) {
     res.status(503).send()
     return
   }
@@ -96,7 +96,9 @@ async function processQuery (user: User, req: Request, res: Response, next: Next
   try {
     const response = await bot.respond(req.body.query, `${user.id}`)
     if (response.action === 'function') {
+      // @ts-expect-error FIXME unclean usage of any type as index
       if (response.handler && botUtils[response.handler]) {
+        // @ts-expect-error FIXME unclean usage of any type as index
         res.status(200).json(await botUtils[response.handler](req.body.query, user))
       } else {
         res.status(200).json({
@@ -125,12 +127,12 @@ async function processQuery (user: User, req: Request, res: Response, next: Next
 }
 
 async function setUserName (user: User, req: Request, res: Response) {
-  if (!bot) {
+  if (bot == null) {
     return
   }
   try {
     const userModel = await UserModel.findByPk(user.id)
-    if (!userModel) {
+    if (userModel == null) {
       res.status(401).json({
         status: 'error',
         error: 'Unknown user'
@@ -140,6 +142,7 @@ async function setUserName (user: User, req: Request, res: Response) {
     const updatedUser = await userModel.update({ username: req.body.query })
     const updatedUserResponse = utils.queryResultToJson(updatedUser)
     const updatedToken = security.authorize(updatedUserResponse)
+    // @ts-expect-error FIXME some properties missing in updatedUserResponse
     security.authenticatedUsers.put(updatedToken, updatedUserResponse)
     bot.addUser(`${updatedUser.id}`, req.body.query)
     res.status(200).json({
@@ -155,7 +158,7 @@ async function setUserName (user: User, req: Request, res: Response) {
 
 export const status = function status () {
   return async (req: Request, res: Response, next: NextFunction) => {
-    if (!bot) {
+    if (bot == null) {
       res.status(200).json({
         status: false,
         body: `${config.get('application.chatBot.name')} isn't ready at the moment, please wait while I set things up`
@@ -172,7 +175,7 @@ export const status = function status () {
     }
 
     const user = await getUserFromJwt(token)
-    if (!user) {
+    if (user == null) {
       res.status(401).json({
         error: 'Unauthenticated user'
       })
@@ -203,7 +206,7 @@ export const status = function status () {
 
 module.exports.process = function respond () {
   return async (req: Request, res: Response, next: NextFunction) => {
-    if (!bot) {
+    if (bot == null) {
       res.status(200).json({
         action: 'response',
         body: `${config.get('application.chatBot.name')} isn't ready at the moment, please wait while I set things up`
@@ -218,7 +221,7 @@ module.exports.process = function respond () {
     }
 
     const user = await getUserFromJwt(token)
-    if (!user) {
+    if (user == null) {
       res.status(401).json({
         error: 'Unauthenticated user'
       })
diff --git a/routes/checkKeys.ts b/routes/checkKeys.ts
new file mode 100644
index 00000000000..09bc26a9865
--- /dev/null
+++ b/routes/checkKeys.ts
@@ -0,0 +1,43 @@
+import { type Request, type Response } from 'express'
+import { HDNodeWallet } from 'ethers'
+import challengeUtils = require('../lib/challengeUtils')
+import * as utils from '../lib/utils'
+
+const challenges = require('../data/datacache').challenges
+
+module.exports.checkKeys = function checkKeys () {
+  return (req: Request, res: Response) => {
+    try {
+      const mnemonic = 'purpose betray marriage blame crunch monitor spin slide donate sport lift clutch'
+      const mnemonicWallet = HDNodeWallet.fromPhrase(mnemonic)
+      const privateKey = mnemonicWallet.privateKey
+      const publicKey = mnemonicWallet.publicKey
+      const address = mnemonicWallet.address
+      challengeUtils.solveIf(challenges.nftUnlockChallenge, () => {
+        return req.body.privateKey === privateKey
+      })
+      if (req.body.privateKey === privateKey) {
+        res.status(200).json({ success: true, message: 'Challenge successfully solved', status: challenges.nftUnlockChallenge })
+      } else {
+        if (req.body.privateKey === address) {
+          res.status(401).json({ success: false, message: 'Looks like you entered the public address of my ethereum wallet!', status: challenges.nftUnlockChallenge })
+        } else if (req.body.privateKey === publicKey) {
+          res.status(401).json({ success: false, message: 'Looks like you entered the public key of my ethereum wallet!', status: challenges.nftUnlockChallenge })
+        } else {
+          res.status(401).json({ success: false, message: 'Looks like you entered a non-Ethereum private key to access me.', status: challenges.nftUnlockChallenge })
+        }
+      }
+    } catch (error) {
+      res.status(500).json(utils.getErrorMessage(error))
+    }
+  }
+}
+module.exports.nftUnlocked = function nftUnlocked () {
+  return (req: Request, res: Response) => {
+    try {
+      res.status(200).json({ status: challenges.nftUnlockChallenge.solved })
+    } catch (error) {
+      res.status(500).json(utils.getErrorMessage(error))
+    }
+  }
+}
diff --git a/routes/continueCode.ts b/routes/continueCode.ts
index 79379751710..ed5f4b62baf 100644
--- a/routes/continueCode.ts
+++ b/routes/continueCode.ts
@@ -4,7 +4,7 @@
  */
 
 import Hashids = require('hashids/cjs')
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 import { ChallengeModel } from '../models/challenge'
 
 const sequelize = require('sequelize')
diff --git a/routes/countryMapping.ts b/routes/countryMapping.ts
index 9e3e573d7c1..9596b7b4b76 100644
--- a/routes/countryMapping.ts
+++ b/routes/countryMapping.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 import logger from '../lib/logger'
 
 module.exports = function countryMapping (config = require('config')) {
diff --git a/routes/coupon.ts b/routes/coupon.ts
index b574b41382a..2fe42c599a5 100644
--- a/routes/coupon.ts
+++ b/routes/coupon.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { BasketModel } from '../models/basket'
 
 const security = require('../lib/insecurity')
@@ -15,7 +15,7 @@ module.exports = function applyCoupon () {
     const discount = security.discountFromCoupon(coupon)
     coupon = discount ? coupon : null
     BasketModel.findByPk(id).then((basket: BasketModel | null) => {
-      if (basket) {
+      if (basket != null) {
         basket.update({ coupon: coupon?.toString() }).then(() => {
           if (discount) {
             res.json({ discount })
diff --git a/routes/createProductReviews.ts b/routes/createProductReviews.ts
index 0ef9dbea3be..a5f4bc2a4f8 100644
--- a/routes/createProductReviews.ts
+++ b/routes/createProductReviews.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 import challengeUtils = require('../lib/challengeUtils')
 
 import * as utils from '../lib/utils'
@@ -25,7 +25,7 @@ module.exports = function productReviews () {
     }).then(() => {
       res.status(201).json({ status: 'success' })
     }, (err: unknown) => {
-      res.status(500).json(utils.get(err))
+      res.status(500).json(utils.getErrorMessage(err))
     })
   }
 }
diff --git a/routes/currentUser.ts b/routes/currentUser.ts
index 71ae51c8cdd..10c400152dc 100644
--- a/routes/currentUser.ts
+++ b/routes/currentUser.ts
@@ -4,7 +4,7 @@
  */
 
 import challengeUtils = require('../lib/challengeUtils')
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 
 const security = require('../lib/insecurity')
 const cache = require('../data/datacache')
diff --git a/routes/dataErasure.ts b/routes/dataErasure.ts
index 9f61a2aa4d2..39ec58b1124 100644
--- a/routes/dataErasure.ts
+++ b/routes/dataErasure.ts
@@ -2,7 +2,7 @@
  * Copyright (c) 2014-2023 Bjoern Kimminich & the OWASP Juice Shop contributors.
  * SPDX-License-Identifier: MIT
  */
-import express, { NextFunction, Request, Response } from 'express'
+import express, { type NextFunction, type Request, type Response } from 'express'
 import path from 'path'
 import { SecurityAnswerModel } from '../models/securityAnswer'
 import { UserModel } from '../models/user'
@@ -30,11 +30,11 @@ router.get('/', async (req: Request, res: Response, next: NextFunction): Promise
         where: { email }
       }]
     })
-    if (!answer) {
+    if (answer == null) {
       throw new Error('No answer found!')
     }
     const question = await SecurityQuestionModel.findByPk(answer.SecurityQuestionId)
-    if (!question) {
+    if (question == null) {
       throw new Error('No question found!')
     }
 
@@ -51,7 +51,7 @@ interface DataErasureRequestParams {
 }
 
 // eslint-disable-next-line @typescript-eslint/no-misused-promises
-router.post('/', async (req: Request<{}, {}, DataErasureRequestParams>, res: Response, next: NextFunction): Promise<void> => {
+router.post('/', async (req: Request<Record<string, unknown>, Record<string, unknown>, DataErasureRequestParams>, res: Response, next: NextFunction): Promise<void> => {
   const loggedInUser = insecurity.authenticatedUsers.get(req.cookies.token)
   if (!loggedInUser) {
     next(new Error('Blocked illegal activity by ' + req.socket.remoteAddress))
@@ -65,7 +65,7 @@ router.post('/', async (req: Request<{}, {}, DataErasureRequestParams>, res: Res
     })
 
     res.clearCookie('token')
-    if (req.body.layout !== undefined) {
+    if (req.body.layout) {
       const filePath: string = path.resolve(req.body.layout).toLowerCase()
       const isForbiddenFile: boolean = (filePath.includes('ftp') || filePath.includes('ctf.key') || filePath.includes('encryptionkeys'))
       if (!isForbiddenFile) {
@@ -77,7 +77,7 @@ router.post('/', async (req: Request<{}, {}, DataErasureRequestParams>, res: Res
           } else {
             const sendlfrResponse: string = html.slice(0, 100) + '......'
             res.send(sendlfrResponse)
-            challengeUtils.solve(challenges.lfrChallenge)
+            challengeUtils.solveIf(challenges.lfrChallenge, () => { return true })
           }
         })
       } else {
diff --git a/routes/dataExport.ts b/routes/dataExport.ts
index 64f58de1ea8..4cc51902d33 100644
--- a/routes/dataExport.ts
+++ b/routes/dataExport.ts
@@ -3,9 +3,9 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { MemoryModel } from '../models/memory'
-import { ProductModel } from '../models/product'
+import { type ProductModel } from '../models/product'
 
 import challengeUtils = require('../lib/challengeUtils')
 const security = require('../lib/insecurity')
diff --git a/routes/delivery.ts b/routes/delivery.ts
index 11d6fc8f6f2..adb8243a082 100644
--- a/routes/delivery.ts
+++ b/routes/delivery.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { DeliveryModel } from '../models/delivery'
 
 const security = require('../lib/insecurity')
@@ -32,7 +32,7 @@ module.exports.getDeliveryMethods = function getDeliveryMethods () {
 module.exports.getDeliveryMethod = function getDeliveryMethod () {
   return async (req: Request, res: Response, next: NextFunction) => {
     const method = await DeliveryModel.findOne({ where: { id: req.params.id } })
-    if (method) {
+    if (method != null) {
       const sendMethod = {
         id: method.id,
         name: method.name,
diff --git a/routes/deluxe.ts b/routes/deluxe.ts
index 7e687a14e99..a729a23361e 100644
--- a/routes/deluxe.ts
+++ b/routes/deluxe.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { UserModel } from '../models/user'
 import { WalletModel } from '../models/wallet'
 import { CardModel } from '../models/card'
@@ -17,13 +17,13 @@ module.exports.upgradeToDeluxe = function upgradeToDeluxe () {
   return async (req: Request, res: Response, next: NextFunction) => {
     try {
       const user = await UserModel.findOne({ where: { id: req.body.UserId, role: security.roles.customer } })
-      if (!user) {
+      if (user == null) {
         res.status(400).json({ status: 'error', error: 'Something went wrong. Please try again!' })
         return
       }
       if (req.body.paymentMode === 'wallet') {
         const wallet = await WalletModel.findOne({ where: { UserId: req.body.UserId } })
-        if (wallet && wallet.balance < 49) {
+        if ((wallet != null) && wallet.balance < 49) {
           res.status(400).json({ status: 'error', error: 'Insuffienct funds in Wallet' })
           return
         } else {
@@ -33,7 +33,7 @@ module.exports.upgradeToDeluxe = function upgradeToDeluxe () {
 
       if (req.body.paymentMode === 'card') {
         const card = await CardModel.findOne({ where: { id: req.body.paymentId, UserId: req.body.UserId } })
-        if (!card || card.expYear < new Date().getFullYear() || (card.expYear === new Date().getFullYear() && card.expMonth - 1 < new Date().getMonth())) {
+        if ((card == null) || card.expYear < new Date().getFullYear() || (card.expYear === new Date().getFullYear() && card.expMonth - 1 < new Date().getMonth())) {
           res.status(400).json({ status: 'error', error: 'Invalid Card' })
           return
         }
@@ -42,6 +42,7 @@ module.exports.upgradeToDeluxe = function upgradeToDeluxe () {
       user.update({ role: security.roles.deluxe, deluxeToken: security.deluxeToken(user.email) })
         .then(user => {
           challengeUtils.solveIf(challenges.freeDeluxeChallenge, () => { return security.verify(utils.jwtFrom(req)) && req.body.paymentMode !== 'wallet' && req.body.paymentMode !== 'card' })
+          // @ts-expect-error FIXME some properties missing in user
           user = utils.queryResultToJson(user)
           const updatedToken = security.authorize(user)
           security.authenticatedUsers.put(updatedToken, user)
diff --git a/routes/easterEgg.ts b/routes/easterEgg.ts
index a5e9942fa09..421d02f55d1 100644
--- a/routes/easterEgg.ts
+++ b/routes/easterEgg.ts
@@ -4,7 +4,7 @@
  */
 
 import path = require('path')
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 
 import challengeUtils = require('../lib/challengeUtils')
 const challenges = require('../data/datacache').challenges
diff --git a/routes/fileServer.ts b/routes/fileServer.ts
index 642f5b1e1eb..57a8794a6b1 100644
--- a/routes/fileServer.ts
+++ b/routes/fileServer.ts
@@ -4,7 +4,7 @@
  */
 
 import path = require('path')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import challengeUtils = require('../lib/challengeUtils')
 
 import * as utils from '../lib/utils'
diff --git a/routes/fileUpload.ts b/routes/fileUpload.ts
index 5ff708d8cc7..e4864d49cf5 100644
--- a/routes/fileUpload.ts
+++ b/routes/fileUpload.ts
@@ -6,7 +6,7 @@
 import os from 'os'
 import fs = require('fs')
 import challengeUtils = require('../lib/challengeUtils')
-import { NextFunction, Request, Response } from 'express'
+import { type NextFunction, type Request, type Response } from 'express'
 import path from 'path'
 import * as utils from '../lib/utils'
 
@@ -16,14 +16,14 @@ const vm = require('vm')
 const unzipper = require('unzipper')
 
 function ensureFileIsPassed ({ file }: Request, res: Response, next: NextFunction) {
-  if (file) {
+  if (file != null) {
     next()
   }
 }
 
 function handleZipFileUpload ({ file }: Request, res: Response, next: NextFunction) {
   if (utils.endsWith(file?.originalname.toLowerCase(), '.zip')) {
-    if (file?.buffer && !utils.disableOnContainerEnv()) {
+    if (((file?.buffer) != null) && !utils.disableOnContainerEnv()) {
       const buffer = file.buffer
       const filename = file.originalname.toLowerCase()
       const tempFile = path.join(os.tmpdir(), filename)
@@ -55,7 +55,7 @@ function handleZipFileUpload ({ file }: Request, res: Response, next: NextFuncti
 }
 
 function checkUploadSize ({ file }: Request, res: Response, next: NextFunction) {
-  if (file) {
+  if (file != null) {
     challengeUtils.solveIf(challenges.uploadSizeChallenge, () => { return file?.size > 100000 })
   }
   next()
@@ -72,7 +72,7 @@ function checkFileType ({ file }: Request, res: Response, next: NextFunction) {
 function handleXmlUpload ({ file }: Request, res: Response, next: NextFunction) {
   if (utils.endsWith(file?.originalname.toLowerCase(), '.xml')) {
     challengeUtils.solveIf(challenges.deprecatedInterfaceChallenge, () => { return true })
-    if (file?.buffer && !utils.disableOnContainerEnv()) { // XXE attacks in Docker/Heroku containers regularly cause "segfault" crashes
+    if (((file?.buffer) != null) && !utils.disableOnContainerEnv()) { // XXE attacks in Docker/Heroku containers regularly cause "segfault" crashes
       const data = file.buffer.toString()
       try {
         const sandbox = { libxml, data }
diff --git a/routes/imageCaptcha.ts b/routes/imageCaptcha.ts
index 8a7372689a9..db19625b208 100644
--- a/routes/imageCaptcha.ts
+++ b/routes/imageCaptcha.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { ImageCaptchaModel } from '../models/imageCaptcha'
 import { Op } from 'sequelize'
 
@@ -34,7 +34,7 @@ imageCaptchas.verifyCaptcha = () => (req: Request, res: Response, next: NextFunc
   ImageCaptchaModel.findAll({
     limit: 1,
     where: {
-      UserId: UserId,
+      UserId,
       createdAt: {
         [Op.gt]: new Date(Date.now() - 300000)
       }
diff --git a/routes/keyServer.ts b/routes/keyServer.ts
index 839b8c30dd9..de05aff5564 100644
--- a/routes/keyServer.ts
+++ b/routes/keyServer.ts
@@ -4,7 +4,7 @@
  */
 
 import path = require('path')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 
 module.exports = function serveKeyFiles () {
   return ({ params }: Request, res: Response, next: NextFunction) => {
diff --git a/routes/languages.ts b/routes/languages.ts
index c118d153fe7..2b976fd977a 100644
--- a/routes/languages.ts
+++ b/routes/languages.ts
@@ -5,7 +5,7 @@
 
 import locales from '../data/static/locales.json'
 import fs = require('fs')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 
 module.exports = function getLanguageList () { // TODO Refactor and extend to also load backend translations from /i18n/*json and calculate joint percentage/gauge
   return (req: Request, res: Response, next: NextFunction) => {
@@ -33,11 +33,11 @@ module.exports = function getLanguageList () { // TODO Refactor and extend to al
             const key = fileName.substring(0, fileName.indexOf('.'))
             const locale = locales.find((l) => l.key === key)
             const lang: any = {
-              key: key,
+              key,
               lang: fileContent.LANGUAGE,
               icons: locale?.icons,
               shortKey: locale?.shortKey,
-              percentage: percentage,
+              percentage,
               gauge: (percentage > 90 ? 'full' : (percentage > 70 ? 'three-quarters' : (percentage > 50 ? 'half' : (percentage > 30 ? 'quarter' : 'empty'))))
             }
             if (!(fileName === 'en.json' || fileName === 'tlh_AA.json')) {
diff --git a/routes/likeProductReviews.ts b/routes/likeProductReviews.ts
index f77e28d2a5e..00bcb2f40f0 100644
--- a/routes/likeProductReviews.ts
+++ b/routes/likeProductReviews.ts
@@ -4,8 +4,8 @@
  */
 
 import challengeUtils = require('../lib/challengeUtils')
-import { Request, Response, NextFunction } from 'express'
-import { Review } from '../data/types'
+import { type Request, type Response, type NextFunction } from 'express'
+import { type Review } from '../data/types'
 
 const challenges = require('../data/datacache').challenges
 const db = require('../data/mongodb')
@@ -40,7 +40,7 @@ module.exports = function productReviews () {
                   challengeUtils.solveIf(challenges.timingAttackChallenge, () => { return count > 2 })
                   db.reviews.update(
                     { _id: id },
-                    { $set: { likedBy: likedBy } }
+                    { $set: { likedBy } }
                   ).then(
                     (result: any) => {
                       res.json(result)
diff --git a/routes/logfileServer.ts b/routes/logfileServer.ts
index ccd1a3a19db..dbe4011a40e 100644
--- a/routes/logfileServer.ts
+++ b/routes/logfileServer.ts
@@ -4,7 +4,7 @@
  */
 
 import path = require('path')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 
 module.exports = function serveLogFiles () {
   return ({ params }: Request, res: Response, next: NextFunction) => {
diff --git a/routes/login.ts b/routes/login.ts
index 803fc5fc5d8..7e0fbb314ad 100644
--- a/routes/login.ts
+++ b/routes/login.ts
@@ -4,8 +4,8 @@
  */
 
 import models = require('../models/index')
-import { Request, Response, NextFunction } from 'express'
-import { User } from '../data/types'
+import { type Request, type Response, type NextFunction } from 'express'
+import { type User } from '../data/types'
 import { BasketModel } from '../models/basket'
 import { UserModel } from '../models/user'
 import challengeUtils = require('../lib/challengeUtils')
@@ -47,6 +47,7 @@ module.exports = function login () {
             }
           })
         } else if (user.data?.id) {
+          // @ts-expect-error FIXME some properties missing in user - vuln-code-snippet hide-line
           afterLogin(user, res, next)
         } else {
           res.status(401).send(res.__('Invalid email or password.'))
diff --git a/routes/memory.ts b/routes/memory.ts
index dfee6591166..95d11787851 100644
--- a/routes/memory.ts
+++ b/routes/memory.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { MemoryModel } from '../models/memory'
 import { UserModel } from '../models/user'
 
diff --git a/routes/metrics.ts b/routes/metrics.ts
index 7be4c626122..fb661826e8f 100644
--- a/routes/metrics.ts
+++ b/routes/metrics.ts
@@ -4,7 +4,7 @@
  */
 
 import { retrieveChallengesWithCodeSnippet } from './vulnCodeSnippet'
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { ChallengeModel } from '../models/challenge'
 import { UserModel } from '../models/user'
 import { WalletModel } from '../models/wallet'
@@ -57,7 +57,7 @@ exports.observeRequestMetricsMiddleware = function observeRequestMetricsMiddlewa
 exports.observeFileUploadMetricsMiddleware = function observeFileUploadMetricsMiddleware () {
   return ({ file }: Request, res: Response, next: NextFunction) => {
     onFinished(res, () => {
-      if (file) {
+      if (file != null) {
         res.statusCode < 400 ? fileUploadsCountMetric.labels(file.mimetype).inc() : fileUploadErrorsMetric.labels(file.mimetype).inc()
       }
     })
@@ -191,11 +191,11 @@ exports.observeMetrics = function observeMetrics () {
       accuracyMetrics.set({ phase: 'find it' }, accuracy.totalFindItAccuracy())
       accuracyMetrics.set({ phase: 'fix it' }, accuracy.totalFixItAccuracy())
 
-      orders.count({}).then((orderCount: Number) => {
+      orders.count({}).then((orderCount: number) => {
         if (orderCount) orderMetrics.set(orderCount)
       })
 
-      reviews.count({}).then((reviewCount: Number) => {
+      reviews.count({}).then((reviewCount: number) => {
         if (reviewCount) interactionsMetrics.set({ type: 'review' }, reviewCount)
       })
 
@@ -207,11 +207,11 @@ exports.observeMetrics = function observeMetrics () {
         if (count) userMetrics.set({ type: 'deluxe' }, count)
       })
 
-      void UserModel.count().then((count: Number) => {
+      void UserModel.count().then((count: number) => {
         if (count) userTotalMetrics.set(count)
       })
 
-      void WalletModel.sum('balance').then((totalBalance: Number) => {
+      void WalletModel.sum('balance').then((totalBalance: number) => {
         if (totalBalance) walletMetrics.set(totalBalance)
       })
 
@@ -228,8 +228,8 @@ exports.observeMetrics = function observeMetrics () {
   }, 5000)
 
   return {
-    register: register,
+    register,
     probe: intervalCollector,
-    updateLoop: updateLoop
+    updateLoop
   }
 }
diff --git a/routes/nftMint.ts b/routes/nftMint.ts
new file mode 100644
index 00000000000..7e5b2978ffc
--- /dev/null
+++ b/routes/nftMint.ts
@@ -0,0 +1,46 @@
+import { type Request, type Response } from 'express'
+import challengeUtils = require('../lib/challengeUtils')
+import * as utils from '../lib/utils'
+const nftABI = require('../data/static/contractABIs').nftABI
+const ethers = require('ethers')
+const challenges = require('../data/datacache').challenges
+const nftAddress = '0x41427790c94E7a592B17ad694eD9c06A02bb9C39'
+const addressesMinted = new Set()
+let isEventListenerCreated = false
+
+module.exports.nftMintListener = function nftMintListener () {
+  return (req: Request, res: Response) => {
+    try {
+      const provider = new ethers.WebSocketProvider('wss://eth-sepolia.g.alchemy.com/v2/FZDapFZSs1l6yhHW4VnQqsi18qSd-3GJ')
+      const contract = new ethers.Contract(nftAddress, nftABI, provider)
+      if (!isEventListenerCreated) {
+        contract.on('NFTMinted', (minter: string) => {
+          if (!addressesMinted.has(minter)) {
+            addressesMinted.add(minter)
+          }
+        })
+        isEventListenerCreated = true
+      }
+      res.status(200).json({ success: true, message: 'Event Listener Created' })
+    } catch (error) {
+      res.status(500).json(utils.getErrorMessage(error))
+    }
+  }
+}
+
+module.exports.walletNFTVerify = function walletNFTVerify () {
+  return (req: Request, res: Response) => {
+    try {
+      const metamaskAddress = req.body.walletAddress
+      if (addressesMinted.has(metamaskAddress)) {
+        addressesMinted.delete(metamaskAddress)
+        challengeUtils.solveIf(challenges.nftMintChallenge, () => true)
+        res.status(200).json({ success: true, message: 'Challenge successfully solved', status: challenges.nftMintChallenge })
+      } else {
+        res.status(200).json({ success: false, message: 'Wallet did not mint the NFT', status: challenges.nftMintChallenge })
+      }
+    } catch (error) {
+      res.status(500).json(utils.getErrorMessage(error))
+    }
+  }
+}
diff --git a/routes/order.ts b/routes/order.ts
index bc5a6eeffac..12f152f8480 100644
--- a/routes/order.ts
+++ b/routes/order.ts
@@ -4,7 +4,7 @@
  */
 
 import path = require('path')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { BasketModel } from '../models/basket'
 import { ProductModel } from '../models/product'
 import { BasketItemModel } from '../models/basketitem'
@@ -22,7 +22,7 @@ const products = require('../data/datacache').products
 const challenges = require('../data/datacache').challenges
 const db = require('../data/mongodb')
 
-interface Product{
+interface Product {
   quantity: number
   id?: number
   name: string
@@ -36,7 +36,7 @@ module.exports = function placeOrder () {
     const id = req.params.id
     BasketModel.findOne({ where: { id }, include: [{ model: ProductModel, paranoid: false, as: 'Products' }] })
       .then(async (basket: BasketModel | null) => {
-        if (basket) {
+        if (basket != null) {
           const customer = security.authenticatedUsers.from(req)
           const email = customer ? customer.data ? customer.data.email : '' : ''
           const orderId = security.hash(email).slice(0, 4) + '-' + utils.randomHexString(16)
@@ -67,7 +67,7 @@ module.exports = function placeOrder () {
           const basketProducts: Product[] = []
           let totalPoints = 0
           basket.Products?.forEach(({ BasketItem, price, deluxePrice, name, id }) => {
-            if (BasketItem) {
+            if (BasketItem != null) {
               challengeUtils.solveIf(challenges.christmasSpecialChallenge, () => { return BasketItem.ProductId === products.christmasSpecial.id })
               QuantityModel.findOne({ where: { ProductId: BasketItem.ProductId } }).then((product: any) => {
                 const newQuantity = product.quantity - BasketItem.quantity
@@ -87,7 +87,7 @@ module.exports = function placeOrder () {
               const itemBonus = Math.round(itemPrice / 10) * BasketItem.quantity
               const product = {
                 quantity: BasketItem.quantity,
-                id: id,
+                id,
                 name: req.__(name),
                 price: itemPrice,
                 total: itemTotal,
@@ -116,7 +116,7 @@ module.exports = function placeOrder () {
           }
           if (req.body.orderDetails?.deliveryMethodId) {
             const deliveryMethodFromModel = await DeliveryModel.findOne({ where: { id: req.body.orderDetails.deliveryMethodId } })
-            if (deliveryMethodFromModel) {
+            if (deliveryMethodFromModel != null) {
               deliveryMethod.deluxePrice = deliveryMethodFromModel.deluxePrice
               deliveryMethod.price = deliveryMethodFromModel.price
               deliveryMethod.eta = deliveryMethodFromModel.eta
@@ -139,7 +139,7 @@ module.exports = function placeOrder () {
           if (req.body.UserId) {
             if (req.body.orderDetails && req.body.orderDetails.paymentId === 'wallet') {
               const wallet = await WalletModel.findOne({ where: { UserId: req.body.UserId } })
-              if (wallet && wallet.balance >= totalPrice) {
+              if ((wallet != null) && wallet.balance >= totalPrice) {
                 WalletModel.decrement({ balance: totalPrice }, { where: { UserId: req.body.UserId } }).catch((error: unknown) => {
                   next(error)
                 })
@@ -156,10 +156,10 @@ module.exports = function placeOrder () {
             promotionalAmount: discountAmount,
             paymentId: req.body.orderDetails ? req.body.orderDetails.paymentId : null,
             addressId: req.body.orderDetails ? req.body.orderDetails.addressId : null,
-            orderId: orderId,
+            orderId,
             delivered: false,
             email: (email ? email.replace(/[aeiou]/gi, '*') : undefined),
-            totalPrice: totalPrice,
+            totalPrice,
             products: basketProducts,
             bonus: totalPoints,
             deliveryPrice: deliveryAmount,
diff --git a/routes/orderHistory.ts b/routes/orderHistory.ts
index a0ae695dd3e..cea41f19fd6 100644
--- a/routes/orderHistory.ts
+++ b/routes/orderHistory.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 
 const orders = require('../data/mongodb').orders
 
@@ -34,7 +34,7 @@ module.exports.toggleDeliveryStatus = function toggleDeliveryStatus () {
   return async (req: Request, res: Response, next: NextFunction) => {
     const deliveryStatus = !req.body.deliveryStatus
     const eta = deliveryStatus ? '0' : '1'
-    await orders.update({ _id: req.params.id }, { $set: { delivered: deliveryStatus, eta: eta } })
+    await orders.update({ _id: req.params.id }, { $set: { delivered: deliveryStatus, eta } })
     res.status(200).json({ status: 'success' })
   }
 }
diff --git a/routes/payment.ts b/routes/payment.ts
index 6f74d7b2e1a..3b2abfd76d2 100644
--- a/routes/payment.ts
+++ b/routes/payment.ts
@@ -3,10 +3,10 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { CardModel } from '../models/card'
 
-interface displayCard{
+interface displayCard {
   UserId: number
   id: number
   fullName: string
@@ -47,7 +47,7 @@ module.exports.getPaymentMethodById = function getPaymentMethodById () {
       expMonth: 0,
       expYear: 0
     }
-    if (card) {
+    if (card != null) {
       displayableCard.UserId = card.UserId
       displayableCard.id = card.id
       displayableCard.fullName = card.fullName
@@ -57,7 +57,7 @@ module.exports.getPaymentMethodById = function getPaymentMethodById () {
       const cardNumber = String(card.cardNum)
       displayableCard.cardNum = '*'.repeat(12) + cardNumber.substring(cardNumber.length - 4)
     }
-    if (card && displayableCard) {
+    if ((card != null) && displayableCard) {
       res.status(200).json({ status: 'success', data: displayableCard })
     } else {
       res.status(400).json({ status: 'error', data: 'Malicious activity detected' })
diff --git a/routes/premiumReward.ts b/routes/premiumReward.ts
index a12ca2fef66..1a23d60609f 100644
--- a/routes/premiumReward.ts
+++ b/routes/premiumReward.ts
@@ -4,7 +4,7 @@
  */
 
 import path = require('path')
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 
 import challengeUtils = require('../lib/challengeUtils')
 const challenges = require('../data/datacache').challenges
diff --git a/routes/privacyPolicyProof.ts b/routes/privacyPolicyProof.ts
index 82184862275..daf6985de24 100644
--- a/routes/privacyPolicyProof.ts
+++ b/routes/privacyPolicyProof.ts
@@ -4,7 +4,7 @@
  */
 
 import path = require('path')
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 
 import challengeUtils = require('../lib/challengeUtils')
 const challenges = require('../data/datacache').challenges
diff --git a/routes/profileImageFileUpload.ts b/routes/profileImageFileUpload.ts
index 860c3ce0dc3..a27d8d77059 100644
--- a/routes/profileImageFileUpload.ts
+++ b/routes/profileImageFileUpload.ts
@@ -4,7 +4,7 @@
  */
 
 import fs = require('fs')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { UserModel } from '../models/user'
 import logger from '../lib/logger'
 
@@ -27,14 +27,14 @@ module.exports = function fileUpload () {
         if (loggedInUser) {
           fs.open(`frontend/dist/frontend/assets/public/images/uploads/${loggedInUser.data.id}.${uploadedFileType.ext}`, 'w', function (err, fd) {
             if (err != null) logger.warn('Error opening file: ' + err.message)
-            // @ts-expect-error
+            // @ts-expect-error FIXME buffer has unexpected type
             fs.write(fd, buffer, 0, buffer.length, null, function (err) {
               if (err != null) logger.warn('Error writing file: ' + err.message)
               fs.close(fd, function () { })
             })
           })
           UserModel.findByPk(loggedInUser.data.id).then(async (user: UserModel | null) => {
-            if (user) {
+            if (user != null) {
               return await user.update({ profileImage: `assets/public/images/uploads/${loggedInUser.data.id}.${uploadedFileType.ext}` })
             }
           }).catch((error: Error) => {
diff --git a/routes/profileImageUrlUpload.ts b/routes/profileImageUrlUpload.ts
index b90ebe1df74..d93a875578b 100644
--- a/routes/profileImageUrlUpload.ts
+++ b/routes/profileImageUrlUpload.ts
@@ -4,7 +4,7 @@
  */
 
 import fs = require('fs')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import logger from '../lib/logger'
 
 import { UserModel } from '../models/user'
diff --git a/routes/quarantineServer.ts b/routes/quarantineServer.ts
index fc703a6a999..7dada55cdb2 100644
--- a/routes/quarantineServer.ts
+++ b/routes/quarantineServer.ts
@@ -4,7 +4,7 @@
  */
 
 import path = require('path')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 
 module.exports = function serveQuarantineFiles () {
   return ({ params, query }: Request, res: Response, next: NextFunction) => {
diff --git a/routes/recycles.ts b/routes/recycles.ts
index 1411496e67c..68b30e59f9b 100644
--- a/routes/recycles.ts
+++ b/routes/recycles.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 import { RecycleModel } from '../models/recycle'
 
 import * as utils from '../lib/utils'
diff --git a/routes/redirect.ts b/routes/redirect.ts
index bd8c8946a45..6acd0eb0f5a 100644
--- a/routes/redirect.ts
+++ b/routes/redirect.ts
@@ -5,7 +5,7 @@
 
 import utils = require('../lib/utils')
 import challengeUtils = require('../lib/challengeUtils')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 
 const security = require('../lib/insecurity')
 const challenges = require('../data/datacache').challenges
diff --git a/routes/repeatNotification.ts b/routes/repeatNotification.ts
index afde9cff341..2b36953a3dc 100644
--- a/routes/repeatNotification.ts
+++ b/routes/repeatNotification.ts
@@ -4,7 +4,7 @@
  */
 
 import challengeUtils = require('../lib/challengeUtils')
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 
 module.exports = function repeatNotification () {
   return ({ query }: Request, res: Response) => {
diff --git a/routes/resetPassword.ts b/routes/resetPassword.ts
index b17b6b3a3eb..c2738c21240 100644
--- a/routes/resetPassword.ts
+++ b/routes/resetPassword.ts
@@ -4,8 +4,8 @@
  */
 
 import config from 'config'
-import { Request, Response, NextFunction } from 'express'
-import { Memory } from '../data/types'
+import { type Request, type Response, type NextFunction } from 'express'
+import { type Memory } from '../data/types'
 import { SecurityAnswerModel } from '../models/securityAnswer'
 import { UserModel } from '../models/user'
 
@@ -33,7 +33,7 @@ module.exports = function resetPassword () {
           where: { email }
         }]
       }).then((data: SecurityAnswerModel | null) => {
-        if (data && security.hmac(answer) === data.answer) {
+        if ((data != null) && security.hmac(answer) === data.answer) {
           UserModel.findByPk(data.UserId).then((user: UserModel | null) => {
             user?.update({ password: newPassword }).then((user: UserModel) => {
               verifySecurityAnswerChallenges(user, answer)
diff --git a/routes/restoreProgress.ts b/routes/restoreProgress.ts
index 3fc0787e847..38c6ec46700 100644
--- a/routes/restoreProgress.ts
+++ b/routes/restoreProgress.ts
@@ -4,7 +4,7 @@
  */
 
 import Hashids = require('hashids/cjs')
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 
 const challenges = require('../data/datacache').challenges
 const challengeUtils = require('../lib/challengeUtils')
diff --git a/routes/saveLoginIp.ts b/routes/saveLoginIp.ts
index cae263a0ac1..cb6894a77f6 100644
--- a/routes/saveLoginIp.ts
+++ b/routes/saveLoginIp.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { UserModel } from '../models/user'
 import challengeUtils = require('../lib/challengeUtils')
 
@@ -23,6 +23,7 @@ module.exports = function saveLoginIp () {
         lastLoginIp = security.sanitizeSecure(lastLoginIp)
       }
       if (lastLoginIp === undefined) {
+        // @ts-expect-error FIXME types not matching
         lastLoginIp = utils.toSimpleIpAddress(req.socket.remoteAddress)
       }
       UserModel.findByPk(loggedInUser.data.id).then((user: UserModel | null) => {
diff --git a/routes/search.ts b/routes/search.ts
index 3c76e4442be..f3eaeff8835 100644
--- a/routes/search.ts
+++ b/routes/search.ts
@@ -4,7 +4,7 @@
  */
 
 import models = require('../models/index')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { UserModel } from '../models/user'
 
 import * as utils from '../lib/utils'
diff --git a/routes/securityQuestion.ts b/routes/securityQuestion.ts
index 847b68f4102..9985d5844c9 100644
--- a/routes/securityQuestion.ts
+++ b/routes/securityQuestion.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { SecurityAnswerModel } from '../models/securityAnswer'
 import { UserModel } from '../models/user'
 import { SecurityQuestionModel } from '../models/securityQuestion'
@@ -17,7 +17,7 @@ module.exports = function securityQuestion () {
         where: { email: email?.toString() }
       }]
     }).then((answer: SecurityAnswerModel | null) => {
-      if (answer) {
+      if (answer != null) {
         SecurityQuestionModel.findByPk(answer.SecurityQuestionId).then((question: SecurityQuestionModel | null) => {
           res.json({ question })
         }).catch((error: Error) => {
diff --git a/routes/showProductReviews.ts b/routes/showProductReviews.ts
index 15e4a983aac..7b61bc29bd1 100644
--- a/routes/showProductReviews.ts
+++ b/routes/showProductReviews.ts
@@ -5,15 +5,15 @@
 
 import utils = require('../lib/utils')
 import challengeUtils = require('../lib/challengeUtils')
-import { Request, Response, NextFunction } from 'express'
-import { Review } from 'data/types'
+import { type Request, type Response, type NextFunction } from 'express'
+import { type Review } from 'data/types'
 
 const challenges = require('../data/datacache').challenges
 const security = require('../lib/insecurity')
 const db = require('../data/mongodb')
 
 // Blocking sleep function as in native MongoDB
-// @ts-expect-error
+// @ts-expect-error FIXME Type safety broken for global object
 global.sleep = (time: number) => {
   // Ensure that users don't accidentally dos their servers for too long
   if (time > 2000) {
diff --git a/routes/trackOrder.ts b/routes/trackOrder.ts
index 36196be08f3..f11e83cba61 100644
--- a/routes/trackOrder.ts
+++ b/routes/trackOrder.ts
@@ -5,7 +5,7 @@
 
 import utils = require('../lib/utils')
 import challengeUtils = require('../lib/challengeUtils')
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 
 const challenges = require('../data/datacache').challenges
 const db = require('../data/mongodb')
diff --git a/routes/updateProductReviews.ts b/routes/updateProductReviews.ts
index c6d31a3707f..93a6a45a9a5 100644
--- a/routes/updateProductReviews.ts
+++ b/routes/updateProductReviews.ts
@@ -4,7 +4,7 @@
  */
 
 import challengeUtils = require('../lib/challengeUtils')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 
 const challenges = require('../data/datacache').challenges
 const db = require('../data/mongodb')
diff --git a/routes/updateUserProfile.ts b/routes/updateUserProfile.ts
index 1f6ab6f0338..334177f5585 100644
--- a/routes/updateUserProfile.ts
+++ b/routes/updateUserProfile.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { UserModel } from '../models/user'
 import challengeUtils = require('../lib/challengeUtils')
 import * as utils from '../lib/utils'
@@ -18,13 +18,14 @@ module.exports = function updateUserProfile () {
 
     if (loggedInUser) {
       UserModel.findByPk(loggedInUser.data.id).then((user: UserModel | null) => {
-        if (user) {
+        if (user != null) {
           challengeUtils.solveIf(challenges.csrfChallenge, () => {
             return ((req.headers.origin?.includes('://htmledit.squarefree.com')) ??
               (req.headers.referer?.includes('://htmledit.squarefree.com'))) &&
               req.body.username !== user.username
           })
           void user.update({ username: req.body.username }).then((savedUser: UserModel) => {
+            // @ts-expect-error FIXME some properties missing in savedUser
             savedUser = utils.queryResultToJson(savedUser)
             const updatedToken = security.authorize(savedUser)
             security.authenticatedUsers.put(updatedToken, savedUser)
diff --git a/routes/userProfile.ts b/routes/userProfile.ts
index f0837e25b1c..af7aeb7e540 100644
--- a/routes/userProfile.ts
+++ b/routes/userProfile.ts
@@ -4,7 +4,7 @@
  */
 
 import fs = require('fs')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 
 import { UserModel } from '../models/user'
 import challengeUtils = require('../lib/challengeUtils')
@@ -55,6 +55,7 @@ module.exports = function getUserProfile () {
           template = template.replace(/_logo_/g, utils.extractFilename(config.get('application.logo')))
           const fn = pug.compile(template)
           const CSP = `img-src 'self' ${user?.profileImage}; script-src 'self' 'unsafe-eval' https://code.getmdl.io http://ajax.googleapis.com`
+          // @ts-expect-error FIXME type issue with string vs. undefined for username
           challengeUtils.solveIf(challenges.usernameXssChallenge, () => { return user?.profileImage.match(/;[ ]*script-src(.)*'unsafe-inline'/g) !== null && utils.contains(username, '<script>alert(`xss`)</script>') })
 
           res.set({
diff --git a/routes/verify.ts b/routes/verify.ts
index 9c77a32c0f8..c4b546d3663 100644
--- a/routes/verify.ts
+++ b/routes/verify.ts
@@ -3,9 +3,9 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
-import { Challenge, Product } from '../data/types'
-import { JwtPayload, VerifyErrors } from 'jsonwebtoken'
+import { type Request, type Response, type NextFunction } from 'express'
+import { type Challenge, type Product } from '../data/types'
+import { type JwtPayload, type VerifyErrors } from 'jsonwebtoken'
 import { FeedbackModel } from '../models/feedback'
 import { ComplaintModel } from '../models/complaint'
 import { Op } from 'sequelize'
@@ -63,6 +63,7 @@ exports.passwordRepeatChallenge = () => (req: Request, res: Response, next: Next
 
 exports.accessControlChallenges = () => ({ url }: Request, res: Response, next: NextFunction) => {
   challengeUtils.solveIf(challenges.scoreBoardChallenge, () => { return utils.endsWith(url, '/1px.png') })
+  challengeUtils.solveIf(challenges.web3SandboxChallenge, () => { return utils.endsWith(url, '/11px.png') })
   challengeUtils.solveIf(challenges.adminSectionChallenge, () => { return utils.endsWith(url, '/19px.png') })
   challengeUtils.solveIf(challenges.tokenSaleChallenge, () => { return utils.endsWith(url, '/56px.png') })
   challengeUtils.solveIf(challenges.privacyPolicyChallenge, () => { return utils.endsWith(url, '/81px.png') })
diff --git a/routes/videoHandler.ts b/routes/videoHandler.ts
index e596aa2a786..09390e22869 100644
--- a/routes/videoHandler.ts
+++ b/routes/videoHandler.ts
@@ -4,7 +4,7 @@
  */
 
 import fs = require('fs')
-import { Request, Response } from 'express'
+import { type Request, type Response } from 'express'
 import challengeUtils = require('../lib/challengeUtils')
 import config from 'config'
 import * as utils from '../lib/utils'
diff --git a/routes/vulnCodeFixes.ts b/routes/vulnCodeFixes.ts
index 9d7099f919b..4255b1b7b47 100644
--- a/routes/vulnCodeFixes.ts
+++ b/routes/vulnCodeFixes.ts
@@ -1,4 +1,4 @@
-import { NextFunction, Request, Response } from 'express'
+import { type NextFunction, type Request, type Response } from 'express'
 import * as accuracy from '../lib/accuracy'
 
 const challengeUtils = require('../lib/challengeUtils')
@@ -12,9 +12,7 @@ interface codeFix {
   correct: number
 }
 
-interface cache {
-  [index: string]: codeFix
-}
+type cache = Record<string, codeFix>
 
 const CodeFixes: cache = {}
 
@@ -39,8 +37,8 @@ export const readFixes = (key: string) => {
   }
 
   CodeFixes[key] = {
-    fixes: fixes,
-    correct: correct
+    fixes,
+    correct
   }
   return CodeFixes[key]
 }
@@ -54,7 +52,7 @@ interface VerdictRequestBody {
   selectedFix: number
 }
 
-export const serveCodeFixes = () => (req: Request<FixesRequestParams, {}, {}>, res: Response, next: NextFunction) => {
+export const serveCodeFixes = () => (req: Request<FixesRequestParams, Record<string, unknown>, Record<string, unknown>>, res: Response, next: NextFunction) => {
   const key = req.params.key
   const fixData = readFixes(key)
   if (fixData.fixes.length === 0) {
@@ -68,7 +66,7 @@ export const serveCodeFixes = () => (req: Request<FixesRequestParams, {}, {}>, r
   })
 }
 
-export const checkCorrectFix = () => async (req: Request<{}, {}, VerdictRequestBody>, res: Response, next: NextFunction) => {
+export const checkCorrectFix = () => async (req: Request<Record<string, unknown>, Record<string, unknown>, VerdictRequestBody>, res: Response, next: NextFunction) => {
   const key = req.body.key
   const selectedFix = req.body.selectedFix
   const fixData = readFixes(key)
diff --git a/routes/vulnCodeSnippet.ts b/routes/vulnCodeSnippet.ts
index a3a2f023e4f..604594b5cfd 100644
--- a/routes/vulnCodeSnippet.ts
+++ b/routes/vulnCodeSnippet.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { NextFunction, Request, Response } from 'express'
+import { type NextFunction, type Request, type Response } from 'express'
 import fs from 'fs'
 import yaml from 'js-yaml'
 import { getCodeChallenges } from '../lib/codingChallenges'
@@ -38,10 +38,10 @@ export const retrieveCodeSnippet = async (challengeKey: string) => {
   return null
 }
 
-exports.serveCodeSnippet = () => async (req: Request<SnippetRequestBody, {}, {}>, res: Response, next: NextFunction) => {
+exports.serveCodeSnippet = () => async (req: Request<SnippetRequestBody, Record<string, unknown>, Record<string, unknown>>, res: Response, next: NextFunction) => {
   try {
     const snippetData = await retrieveCodeSnippet(req.params.challenge)
-    if (!snippetData) {
+    if (snippetData == null) {
       res.status(404).json({ status: 'error', error: `No code challenge for challenge key: ${req.params.challenge}` })
       return
     }
@@ -71,12 +71,12 @@ export const getVerdict = (vulnLines: number[], neutralLines: number[], selected
   return notOkLines.length === 0
 }
 
-exports.checkVulnLines = () => async (req: Request<{}, {}, VerdictRequestBody>, res: Response, next: NextFunction) => {
+exports.checkVulnLines = () => async (req: Request<Record<string, unknown>, Record<string, unknown>, VerdictRequestBody>, res: Response, next: NextFunction) => {
   const key = req.body.key
   let snippetData
   try {
     snippetData = await retrieveCodeSnippet(key)
-    if (!snippetData) {
+    if (snippetData == null) {
       res.status(404).json({ status: 'error', error: `No code challenge for challenge key: ${key}` })
       return
     }
diff --git a/routes/wallet.ts b/routes/wallet.ts
index 0e2d2cdee20..5f3c5ab4b49 100644
--- a/routes/wallet.ts
+++ b/routes/wallet.ts
@@ -3,14 +3,14 @@
  * SPDX-License-Identifier: MIT
  */
 
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { WalletModel } from '../models/wallet'
 import { CardModel } from '../models/card'
 
 module.exports.getWalletBalance = function getWalletBalance () {
   return async (req: Request, res: Response, next: NextFunction) => {
     const wallet = await WalletModel.findOne({ where: { UserId: req.body.UserId } })
-    if (wallet) {
+    if (wallet != null) {
       res.status(200).json({ status: 'success', data: wallet.balance })
     } else {
       res.status(404).json({ status: 'error' })
@@ -22,7 +22,7 @@ module.exports.addWalletBalance = function addWalletBalance () {
   return async (req: Request, res: Response, next: NextFunction) => {
     const cardId = req.body.paymentId
     const card = cardId ? await CardModel.findOne({ where: { id: cardId, UserId: req.body.UserId } }) : null
-    if (card) {
+    if (card != null) {
       WalletModel.increment({ balance: req.body.balance }, { where: { UserId: req.body.UserId } }).then(() => {
         res.status(200).json({ status: 'success', data: req.body.balance })
       }).catch(() => {
diff --git a/routes/web3Wallet.ts b/routes/web3Wallet.ts
new file mode 100644
index 00000000000..6483b906a37
--- /dev/null
+++ b/routes/web3Wallet.ts
@@ -0,0 +1,32 @@
+import { type Request, type Response } from 'express'
+import challengeUtils = require('../lib/challengeUtils')
+import * as utils from '../lib/utils'
+const web3WalletABI = require('../data/static/contractABIs').web3WalletABI
+const ethers = require('ethers')
+const challenges = require('../data/datacache').challenges
+const web3WalletAddress = '0x413744D59d31AFDC2889aeE602636177805Bd7b0'
+const walletsConnected = new Set()
+let isEventListenerCreated = false
+
+module.exports.contractExploitListener = function contractExploitListener () {
+  return (req: Request, res: Response) => {
+    const metamaskAddress = req.body.walletAddress
+    walletsConnected.add(metamaskAddress)
+    try {
+      const provider = new ethers.WebSocketProvider('wss://eth-sepolia.g.alchemy.com/v2/FZDapFZSs1l6yhHW4VnQqsi18qSd-3GJ')
+      const contract = new ethers.Contract(web3WalletAddress, web3WalletABI, provider)
+      if (!isEventListenerCreated) {
+        contract.on('ContractExploited', (exploiter: string) => {
+          if (walletsConnected.has(exploiter)) {
+            walletsConnected.delete(exploiter)
+            challengeUtils.solveIf(challenges.web3WalletChallenge, () => true)
+          }
+        })
+        isEventListenerCreated = true
+      }
+      res.status(200).json({ success: true, message: 'Event Listener Created' })
+    } catch (error) {
+      res.status(500).json(utils.getErrorMessage(error))
+    }
+  }
+}
diff --git a/rsn/cache.json b/rsn/cache.json
index 4c431314dad..185e2d7319b 100644
--- a/rsn/cache.json
+++ b/rsn/cache.json
@@ -249,6 +249,38 @@
 			18
 		]
 	},
+	"nftMintChallenge_1.sol": {
+		"added": [],
+		"removed": []
+	},
+	"nftMintChallenge_2.sol": {
+		"added": [],
+		"removed": []
+	},
+	"nftMintChallenge_3.sol": {
+		"added": [],
+		"removed": []
+	},
+	"nftMintChallenge_4_correct.sol": {
+		"added": [],
+		"removed": []
+	},
+	"nftUnlockChallenge_1.sol": {
+		"added": [],
+		"removed": []
+	},
+	"nftUnlockChallenge_2_correct.sol": {
+		"added": [],
+		"removed": []
+	},
+	"nftUnlockChallenge_3.sol": {
+		"added": [],
+		"removed": []
+	},
+	"nftUnlockChallenge_4.sol": {
+		"added": [],
+		"removed": []
+	},
 	"noSqlReviewsChallenge_1.ts": {
 		"added": [
 			6
@@ -357,6 +389,180 @@
 			5
 		]
 	},
+	"resetPasswordBenderChallenge_1.yml": {
+		"added": [],
+		"removed": []
+	},
+	"resetPasswordBenderChallenge_2_correct.yml": {
+		"added": [
+			1,
+			2,
+			3,
+			4,
+			5,
+			6,
+			7,
+			8,
+			9,
+			10,
+			11,
+			12,
+			13,
+			14,
+			15,
+			16,
+			17,
+			18,
+			21,
+			22,
+			23,
+			24,
+			25,
+			26,
+			27,
+			28
+		],
+		"removed": [
+			1,
+			2,
+			3,
+			4
+		]
+	},
+	"resetPasswordBenderChallenge_3.yml": {
+		"added": [],
+		"removed": []
+	},
+	"resetPasswordBjoernChallenge_1_correct.yml": {
+		"added": [
+			1,
+			2,
+			3,
+			4,
+			5,
+			6,
+			7,
+			8,
+			9,
+			10,
+			11,
+			12,
+			13,
+			14,
+			15,
+			16,
+			19,
+			20,
+			21,
+			22,
+			23,
+			24,
+			25,
+			26,
+			27,
+			28
+		],
+		"removed": [
+			1,
+			2,
+			3,
+			4
+		]
+	},
+	"resetPasswordBjoernChallenge_2.yml": {
+		"added": [],
+		"removed": []
+	},
+	"resetPasswordBjoernChallenge_3.yml": {
+		"added": [],
+		"removed": []
+	},
+	"resetPasswordBjoernOwaspChallenge_1.yml": {
+		"added": [],
+		"removed": []
+	},
+	"resetPasswordBjoernOwaspChallenge_2_correct.yml": {
+		"added": [
+			1,
+			2,
+			3,
+			4,
+			5,
+			6,
+			7,
+			8,
+			9,
+			10,
+			11,
+			12,
+			15,
+			16,
+			17,
+			18,
+			19,
+			20,
+			21,
+			22,
+			23,
+			24,
+			25,
+			26,
+			27,
+			28
+		],
+		"removed": [
+			1,
+			2,
+			3,
+			4
+		]
+	},
+	"resetPasswordBjoernOwaspChallenge_3.yml": {
+		"added": [],
+		"removed": []
+	},
+	"resetPasswordJimChallenge_1.yml": {
+		"added": [],
+		"removed": []
+	},
+	"resetPasswordJimChallenge_2.yml": {
+		"added": [],
+		"removed": []
+	},
+	"resetPasswordJimChallenge_3_correct.yml": {
+		"added": [
+			3,
+			4,
+			5,
+			6,
+			7,
+			8,
+			9,
+			10,
+			11,
+			12,
+			13,
+			14,
+			15,
+			16,
+			17,
+			18,
+			19,
+			20,
+			21,
+			22,
+			23,
+			24,
+			25,
+			26,
+			27,
+			28
+		],
+		"removed": [
+			3,
+			4
+		]
+	},
 	"resetPasswordMortyChallenge_1.ts": {
 		"added": [
 			2
@@ -381,6 +587,50 @@
 		"added": [],
 		"removed": []
 	},
+	"resetPasswordUvoginChallenge_1.yml": {
+		"added": [],
+		"removed": []
+	},
+	"resetPasswordUvoginChallenge_2.yml": {
+		"added": [],
+		"removed": []
+	},
+	"resetPasswordUvoginChallenge_3_correct.yml": {
+		"added": [
+			1,
+			2,
+			3,
+			4,
+			5,
+			6,
+			7,
+			8,
+			9,
+			10,
+			11,
+			12,
+			13,
+			14,
+			15,
+			16,
+			17,
+			18,
+			19,
+			20,
+			21,
+			22,
+			25,
+			26,
+			27,
+			28
+		],
+		"removed": [
+			1,
+			2,
+			3,
+			4
+		]
+	},
 	"restfulXssChallenge_1_correct.ts": {
 		"added": [
 			55,
@@ -511,6 +761,36 @@
 		"added": [],
 		"removed": []
 	},
+	"web3SandboxChallenge_1_correct.ts": {
+		"added": [
+			170
+		],
+		"removed": []
+	},
+	"web3SandboxChallenge_2.ts": {
+		"added": [],
+		"removed": []
+	},
+	"web3SandboxChallenge_3.ts": {
+		"added": [],
+		"removed": []
+	},
+	"web3WalletChallenge_1.sol": {
+		"added": [],
+		"removed": []
+	},
+	"web3WalletChallenge_2.sol": {
+		"added": [],
+		"removed": []
+	},
+	"web3WalletChallenge_3_correct.sol": {
+		"added": [],
+		"removed": []
+	},
+	"web3WalletChallenge_4.sol": {
+		"added": [],
+		"removed": []
+	},
 	"xssBonusChallenge_1_correct.ts": {
 		"added": [],
 		"removed": []
diff --git a/rsn/rsn-verbose.ts b/rsn/rsn-verbose.ts
index 7c0d7c2a372..f47d0f5763d 100644
--- a/rsn/rsn-verbose.ts
+++ b/rsn/rsn-verbose.ts
@@ -8,12 +8,12 @@ checkDiffs(keys)
     const fileData = getDataFromFile()
     const filesWithDiff = checkData(data, fileData)
     if (filesWithDiff.length === 0) {
-      console.log(`${colors.green.bold('No new file diffs recognized since last lock!')} No action required.`)
+      console.log(`${colors.green(colors.bold('No new file diffs recognized since last lock!'))} No action required.`)
     } else {
-      console.log(`${colors.red.bold('New file diffs recognized since last lock!')} Double-check and amend listed files and lock new state with ${colors.bold('npm run rsn:update')}`)
+      console.log(`${colors.red(colors.bold('New file diffs recognized since last lock!'))} Double-check and amend listed files and lock new state with ${colors.bold('npm run rsn:update')}`)
       console.log(`Be aware that diffs for the ${filesWithDiff.length} affected files below contain ${colors.bold('all changes')} including locked & cached ones! Compare carefully!`)
       console.log('---------------------------------------')
-      filesWithDiff.forEach(async file => await seePatch(file))
+      filesWithDiff.forEach(async file => { await seePatch(file) })
       process.exitCode = 1
     }
   })
diff --git a/rsn/rsnUtil.ts b/rsn/rsnUtil.ts
index b1de40f1084..e701e9d7a1b 100644
--- a/rsn/rsnUtil.ts
+++ b/rsn/rsnUtil.ts
@@ -5,16 +5,14 @@ const fs = require('fs')
 const fixesPath = 'data/static/codefixes'
 const cacheFile = 'rsn/cache.json'
 
-interface CacheData {
-  [key: string]: {
-    added: number[]
-    removed: number[]
-  }
-}
+type CacheData = Record<string, {
+  added: number[]
+  removed: number[]
+}>
 
 function readFiles () {
   const files = fs.readdirSync(fixesPath)
-  const keys = files.filter((file: string) => file.endsWith('.ts'))
+  const keys = files.filter((file: string) => !file.endsWith('.info.yml') && !file.endsWith('.editorconfig'))
   return keys
 }
 
@@ -45,7 +43,7 @@ const checkDiffs = async (keys: string[]) => {
   for (const val of keys) {
     await retrieveCodeSnippet(val.split('_')[0])
       .then(snippet => {
-        if (!snippet) return
+        if (snippet == null) return
         process.stdout.write(val + ': ')
         const fileData = fs.readFileSync(fixesPath + '/' + val).toString()
         const diff = Diff.diffLines(filterString(fileData), filterString(snippet.snippet))
@@ -104,7 +102,7 @@ const checkDiffs = async (keys: string[]) => {
 async function seePatch (file: string) {
   const fileData = fs.readFileSync(fixesPath + '/' + file).toString()
   const snippet = await retrieveCodeSnippet(file.split('_')[0])
-  if (!snippet) return
+  if (snippet == null) return
   const patch = Diff.structuredPatch(file, file, filterString(snippet.snippet), filterString(fileData))
   console.log(colors.bold(file + '\n'))
   for (const hunk of patch.hunks) {
diff --git a/screenshots/git-stats.png b/screenshots/git-stats.png
index d1f6ee1dbfc..a5e2124db76 100644
Binary files a/screenshots/git-stats.png and b/screenshots/git-stats.png differ
diff --git a/screenshots/screenshot00.png b/screenshots/screenshot00.png
new file mode 100644
index 00000000000..6b7bb05945b
Binary files /dev/null and b/screenshots/screenshot00.png differ
diff --git a/screenshots/screenshot01.png b/screenshots/screenshot01.png
index 7ec64c7e924..b6f5cc9f293 100644
Binary files a/screenshots/screenshot01.png and b/screenshots/screenshot01.png differ
diff --git a/screenshots/screenshot02.png b/screenshots/screenshot02.png
index 5055f5c6aa3..759db9519fc 100644
Binary files a/screenshots/screenshot02.png and b/screenshots/screenshot02.png differ
diff --git a/screenshots/screenshot03.png b/screenshots/screenshot03.png
index f27a916fc1f..7bf4be83868 100644
Binary files a/screenshots/screenshot03.png and b/screenshots/screenshot03.png differ
diff --git a/screenshots/screenshot04.png b/screenshots/screenshot04.png
index 93c08636d4b..336d2291b88 100644
Binary files a/screenshots/screenshot04.png and b/screenshots/screenshot04.png differ
diff --git a/screenshots/screenshot05.png b/screenshots/screenshot05.png
index 8c266917c69..a3eceb6448f 100644
Binary files a/screenshots/screenshot05.png and b/screenshots/screenshot05.png differ
diff --git a/screenshots/screenshot06.png b/screenshots/screenshot06.png
new file mode 100644
index 00000000000..b7ca13f2d78
Binary files /dev/null and b/screenshots/screenshot06.png differ
diff --git a/screenshots/screenshot07.png b/screenshots/screenshot07.png
new file mode 100644
index 00000000000..d8c0f3500dc
Binary files /dev/null and b/screenshots/screenshot07.png differ
diff --git a/screenshots/screenshot08.png b/screenshots/screenshot08.png
new file mode 100644
index 00000000000..af102dfd724
Binary files /dev/null and b/screenshots/screenshot08.png differ
diff --git a/screenshots/screenshot09.png b/screenshots/screenshot09.png
new file mode 100644
index 00000000000..bf4dae41e55
Binary files /dev/null and b/screenshots/screenshot09.png differ
diff --git a/screenshots/screenshot10.png b/screenshots/screenshot10.png
new file mode 100644
index 00000000000..cb6568c3add
Binary files /dev/null and b/screenshots/screenshot10.png differ
diff --git a/screenshots/screenshot11.png b/screenshots/screenshot11.png
new file mode 100644
index 00000000000..9179e2e3108
Binary files /dev/null and b/screenshots/screenshot11.png differ
diff --git a/screenshots/screenshot12.png b/screenshots/screenshot12.png
new file mode 100644
index 00000000000..3bbec7e5b67
Binary files /dev/null and b/screenshots/screenshot12.png differ
diff --git a/screenshots/screenshot13.png b/screenshots/screenshot13.png
new file mode 100644
index 00000000000..e485a0d939d
Binary files /dev/null and b/screenshots/screenshot13.png differ
diff --git a/screenshots/slideshow.gif b/screenshots/slideshow.gif
index d84bd792d3b..b9586539cf4 100644
Binary files a/screenshots/slideshow.gif and b/screenshots/slideshow.gif differ
diff --git a/server.ts b/server.ts
index 322a1a38bef..c1b9f30167e 100644
--- a/server.ts
+++ b/server.ts
@@ -4,7 +4,7 @@
  */
 import dataErasure from './routes/dataErasure'
 import fs = require('fs')
-import { Request, Response, NextFunction } from 'express'
+import { type Request, type Response, type NextFunction } from 'express'
 import { sequelize } from './models'
 import { UserModel } from './models/user'
 import { QuantityModel } from './models/quantity'
@@ -86,6 +86,9 @@ const recycles = require('./routes/recycles')
 const b2bOrder = require('./routes/b2bOrder')
 const showProductReviews = require('./routes/showProductReviews')
 const createProductReviews = require('./routes/createProductReviews')
+const checkKeys = require('./routes/checkKeys')
+const nftMint = require('./routes/nftMint')
+const web3Wallet = require('./routes/web3Wallet')
 const updateProductReviews = require('./routes/updateProductReviews')
 const likeProductReviews = require('./routes/likeProductReviews')
 const security = require('./lib/insecurity')
@@ -124,7 +127,7 @@ const startupGauge = new client.Gauge({
 })
 
 // Wraps the function and measures its (async) execution time
-const collectDurationPromise = (name: string, func: Function) => {
+const collectDurationPromise = (name: string, func: any) => {
   return async (...args: any) => {
     const end = startupGauge.startTimer({ task: name })
     const res = await func(...args)
@@ -214,7 +217,7 @@ restoreOverwrittenFilesWithOriginals().then(() => {
   /* Create middleware to change paths from the serve-index plugin from absolute to relative */
   const serveIndexMiddleware = (req: Request, res: Response, next: NextFunction) => {
     const origEnd = res.end
-    // @ts-expect-error
+    // @ts-expect-error FIXME assignment broken due to seemingly void return value
     res.end = function () {
       if (arguments.length) {
         const reqPath = req.originalUrl.replace(/\?.*$/, '')
@@ -231,7 +234,7 @@ restoreOverwrittenFilesWithOriginals().then(() => {
           return 'a href="' + relativePath + '"'
         })
       }
-      // @ts-expect-error
+      // @ts-expect-error FIXME passed argument has wrong type
       origEnd.apply(this, arguments)
     }
     next()
@@ -278,7 +281,7 @@ restoreOverwrittenFilesWithOriginals().then(() => {
 
   app.use(bodyParser.text({ type: '*/*' }))
   app.use(function jsonParser (req: Request, res: Response, next: NextFunction) {
-    // @ts-expect-error
+    // @ts-expect-error FIXME intentionally saving original request in this property
     req.rawBody = req.body
     if (req.headers['content-type']?.includes('application/json')) {
       if (!req.body) {
@@ -584,6 +587,13 @@ restoreOverwrittenFilesWithOriginals().then(() => {
   app.patch('/rest/products/reviews', security.isAuthorized(), updateProductReviews())
   app.post('/rest/products/reviews', security.isAuthorized(), likeProductReviews())
 
+  /* Web3 API endpoints */
+  app.post('/rest/web3/submitKey', checkKeys.checkKeys())
+  app.get('/rest/web3/nftUnlocked', checkKeys.nftUnlocked())
+  app.get('/rest/web3/nftMintListen', nftMint.nftMintListener())
+  app.post('/rest/web3/walletNFTVerify', nftMint.walletNFTVerify())
+  app.post('/rest/web3/walletExploitAddress', web3Wallet.contractExploitListener())
+
   /* B2B Order API */
   app.post('/b2b/v2/orders', b2bOrder())
 
@@ -631,7 +641,7 @@ const mimeTypeMap: any = {
 }
 const uploadToDisk = multer({
   storage: multer.diskStorage({
-    destination: (req: Request, file: any, cb: Function) => {
+    destination: (req: Request, file: any, cb: any) => {
       const isValid = mimeTypeMap[file.mimetype]
       let error: Error | null = new Error('Invalid mime type')
       if (isValid) {
@@ -639,7 +649,7 @@ const uploadToDisk = multer({
       }
       cb(error, path.resolve('frontend/dist/frontend/assets/public/images/uploads/'))
     },
-    filename: (req: Request, file: any, cb: Function) => {
+    filename: (req: Request, file: any, cb: any) => {
       const name = security.sanitizeFilename(file.originalname)
         .toLowerCase()
         .split(' ')
@@ -667,7 +677,7 @@ errorhandler.title = `${config.get('application.name')} (Express ${utils.version
 const registerWebsocketEvents = require('./lib/startup/registerWebsocketEvents')
 const customizeApplication = require('./lib/startup/customizeApplication')
 
-export async function start (readyCallback: Function) {
+export async function start (readyCallback: any) {
   const datacreatorEnd = startupGauge.startTimer({ task: 'datacreator' })
   await sequelize.sync({ force: true })
   await datacreator()
@@ -705,5 +715,5 @@ export function close (exitCode: number | undefined) {
 // vuln-code-snippet end exposedMetricsChallenge
 
 // stop server on sigint or sigterm signals
-process.on('SIGINT', () => close(0))
-process.on('SIGTERM', () => close(0))
+process.on('SIGINT', () => { close(0) })
+process.on('SIGTERM', () => { close(0) })
diff --git a/test/api/2faSpec.ts b/test/api/2faSpec.ts
index 2257086b406..3ccdb39211e 100644
--- a/test/api/2faSpec.ts
+++ b/test/api/2faSpec.ts
@@ -17,7 +17,7 @@ const API_URL = 'http://localhost:3000/api'
 const jsonHeader = { 'content-type': 'application/json' }
 
 async function login ({ email, password, totpSecret }: { email: string, password: string, totpSecret?: string }) {
-  // @ts-expect-error
+  // @ts-expect-error FIXME promise return handling broken
   const loginRes = await frisby
     .post(REST_URL + '/user/login', {
       email,
@@ -30,7 +30,7 @@ async function login ({ email, password, totpSecret }: { email: string, password
     })
 
   if (loginRes.json.status && loginRes.json.status === 'totp_token_required') {
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     const totpRes = await frisby
       .post(REST_URL + '/2fa/verify', {
         tmpToken: loginRes.json.data.tmpToken,
@@ -44,7 +44,7 @@ async function login ({ email, password, totpSecret }: { email: string, password
 }
 
 async function register ({ email, password, totpSecret }: { email: string, password: string, totpSecret?: string }) {
-  // @ts-expect-error
+  // @ts-expect-error FIXME promise return handling broken
   const res = await frisby
     .post(API_URL + '/Users/', {
       email,
@@ -59,7 +59,7 @@ async function register ({ email, password, totpSecret }: { email: string, passw
   if (totpSecret) {
     const { token } = await login({ email, password })
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.post(
       REST_URL + '/2fa/setup',
       {
@@ -103,7 +103,7 @@ describe('/rest/2fa/verify', () => {
 
     const totpToken = otplib.authenticator.generate('IFTXE3SPOEYVURT2MRYGI52TKJ4HC3KH')
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.post(REST_URL + '/2fa/verify', {
       headers: jsonHeader,
       body: {
@@ -131,7 +131,7 @@ describe('/rest/2fa/verify', () => {
 
     const totpToken = otplib.authenticator.generate('THIS9ISNT8THE8RIGHT8SECRET')
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.post(REST_URL + '/2fa/verify', {
       headers: jsonHeader,
       body: {
@@ -150,7 +150,7 @@ describe('/rest/2fa/verify', () => {
 
     const totpToken = otplib.authenticator.generate('IFTXE3SPOEYVURT2MRYGI52TKJ4HC3KH')
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.post(REST_URL + '/2fa/verify', {
       headers: jsonHeader,
       body: {
@@ -170,7 +170,7 @@ describe('/rest/2fa/status', () => {
       totpSecret: 'IFTXE3SPOEYVURT2MRYGI52TKJ4HC3KH'
     })
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.get(
       REST_URL + '/2fa/status',
       {
@@ -195,7 +195,7 @@ describe('/rest/2fa/status', () => {
       password: '0Y8rMnww$*9VFYE§59-!Fg1L6t&6lB'
     })
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.get(
       REST_URL + '/2fa/status',
       {
@@ -219,7 +219,7 @@ describe('/rest/2fa/status', () => {
   })
 
   it('GET should return 401 when not logged in', async () => {
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.get(REST_URL + '/2fa/status')
       .expect('status', 401)
   })
@@ -235,7 +235,7 @@ describe('/rest/2fa/setup', () => {
     await register({ email, password })
     const { token } = await login({ email, password })
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.post(
       REST_URL + '/2fa/setup',
       {
@@ -254,7 +254,7 @@ describe('/rest/2fa/setup', () => {
       })
       .expect('status', 200)
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.get(
       REST_URL + '/2fa/status',
       {
@@ -281,7 +281,7 @@ describe('/rest/2fa/setup', () => {
     await register({ email, password })
     const { token } = await login({ email, password })
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.post(
       REST_URL + '/2fa/setup',
       {
@@ -310,7 +310,7 @@ describe('/rest/2fa/setup', () => {
     await register({ email, password })
     const { token } = await login({ email, password })
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.post(
       REST_URL + '/2fa/setup',
       {
@@ -319,7 +319,7 @@ describe('/rest/2fa/setup', () => {
           'content-type': 'application/json'
         },
         body: {
-          password: password,
+          password,
           setupToken: security.authorize({
             secret,
             type: 'totp_setup_secret'
@@ -339,7 +339,7 @@ describe('/rest/2fa/setup', () => {
     await register({ email, password })
     const { token } = await login({ email, password })
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.post(
       REST_URL + '/2fa/setup',
       {
@@ -366,7 +366,7 @@ describe('/rest/2fa/setup', () => {
 
     const { token } = await login({ email, password, totpSecret })
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.post(
       REST_URL + '/2fa/setup',
       {
@@ -396,14 +396,14 @@ describe('/rest/2fa/disable', () => {
     await register({ email, password, totpSecret })
     const { token } = await login({ email, password, totpSecret })
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await getStatus(token)
       .expect('status', 200)
       .expect('json', {
         setup: true
       })
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.post(
       REST_URL + '/2fa/disable',
       {
@@ -417,7 +417,7 @@ describe('/rest/2fa/disable', () => {
       }
     ).expect('status', 200)
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await getStatus(token)
       .expect('status', 200)
       .expect('json', {
@@ -433,14 +433,14 @@ describe('/rest/2fa/disable', () => {
     await register({ email, password, totpSecret })
     const { token } = await login({ email, password, totpSecret })
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await getStatus(token)
       .expect('status', 200)
       .expect('json', {
         setup: true
       })
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await frisby.post(
       REST_URL + '/2fa/disable',
       {
@@ -454,7 +454,7 @@ describe('/rest/2fa/disable', () => {
       }
     ).expect('status', 401)
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME promise return handling broken
     await getStatus(token)
       .expect('status', 200)
       .expect('json', {
diff --git a/test/api/basketApiSpec.ts b/test/api/basketApiSpec.ts
index b82a8f220c1..379a73aa64d 100644
--- a/test/api/basketApiSpec.ts
+++ b/test/api/basketApiSpec.ts
@@ -4,6 +4,7 @@
  */
 
 import frisby = require('frisby')
+import { expect } from '@jest/globals'
 const security = require('../../lib/insecurity')
 
 const API_URL = 'http://localhost:3000/api'
diff --git a/test/api/basketItemApiSpec.ts b/test/api/basketItemApiSpec.ts
index 6c34a0bff73..194ecfca276 100644
--- a/test/api/basketItemApiSpec.ts
+++ b/test/api/basketItemApiSpec.ts
@@ -4,6 +4,7 @@
  */
 
 import frisby = require('frisby')
+import { expect } from '@jest/globals'
 import config from 'config'
 
 const API_URL = 'http://localhost:3000/api'
diff --git a/test/api/chatBotSpec.ts b/test/api/chatBotSpec.ts
index 25fa3af8f91..86b609c34ac 100644
--- a/test/api/chatBotSpec.ts
+++ b/test/api/chatBotSpec.ts
@@ -4,6 +4,7 @@
  */
 
 import frisby = require('frisby')
+import { expect } from '@jest/globals'
 import config from 'config'
 import { initialize, bot } from '../../routes/chatbot'
 import fs from 'fs/promises'
@@ -15,7 +16,7 @@ const API_URL = `${URL}/api/`
 let trainingData: { data: any[] }
 
 async function login ({ email, password }: { email: string, password: string }) {
-  // @ts-expect-error
+  // @ts-expect-error FIXME promise return handling broken
   const loginRes = await frisby
     .post(REST_URL + '/user/login', {
       email,
@@ -99,7 +100,7 @@ describe('/chatbot', () => {
     })
 
     it('Returns greeting if username is defined', async () => {
-      if (!bot) {
+      if (bot == null) {
         throw new Error('Bot not initialized')
       }
       const { token } = await login({
@@ -131,7 +132,7 @@ describe('/chatbot', () => {
     })
 
     it('Returns proper response for registered user', async () => {
-      if (!bot) {
+      if (bot == null) {
         throw new Error('Bot not initialized')
       }
       const { token } = await login({
@@ -163,7 +164,6 @@ describe('/chatbot', () => {
         .expect('status', 200)
         .promise()
         .then(({ json }) => {
-          // @ts-expect-error
           expect(trainingData.data[0].answers).toContainEqual(json)
         })
     })
diff --git a/test/api/dataExportApiSpec.ts b/test/api/dataExportApiSpec.ts
index 19072e0e2cc..3726039e746 100644
--- a/test/api/dataExportApiSpec.ts
+++ b/test/api/dataExportApiSpec.ts
@@ -4,8 +4,10 @@
  */
 
 import frisby = require('frisby')
+import { expect } from '@jest/globals'
 import config from 'config'
 import path from 'path'
+
 const fs = require('fs')
 
 const jsonHeader = { 'content-type': 'application/json' }
@@ -198,7 +200,7 @@ describe('/rest/user/data-export', () => {
         return frisby.post(REST_URL + '/memories', {
           headers: {
             Authorization: 'Bearer ' + jsonLogin.authentication.token,
-            // @ts-expect-error
+            // @ts-expect-error FIXME form.getHeaders() is not found
             'Content-Type': form.getHeaders()['content-type']
           },
           body: form
@@ -336,7 +338,7 @@ describe('/rest/user/data-export', () => {
         return frisby.post(REST_URL + '/memories', {
           headers: {
             Authorization: 'Bearer ' + jsonLogin.authentication.token,
-            // @ts-expect-error
+            // @ts-expect-error FIXME form.getHeaders() is not found
             'Content-Type': form.getHeaders()['content-type']
           },
           body: form
diff --git a/test/api/deliveryApiSpec.ts b/test/api/deliveryApiSpec.ts
index a2e1d94e36f..9c0191bd7c7 100644
--- a/test/api/deliveryApiSpec.ts
+++ b/test/api/deliveryApiSpec.ts
@@ -4,6 +4,7 @@
  */
 
 import frisby = require('frisby')
+import { expect } from '@jest/globals'
 import config from 'config'
 
 const API_URL = 'http://localhost:3000/api'
diff --git a/test/api/deluxeApiSpec.ts b/test/api/deluxeApiSpec.ts
index b5aa74f3f6f..1a4bab9861f 100644
--- a/test/api/deluxeApiSpec.ts
+++ b/test/api/deluxeApiSpec.ts
@@ -11,7 +11,7 @@ const REST_URL = 'http://localhost:3000/rest'
 const API_URL = 'http://localhost:3000/api'
 
 async function login ({ email, password }: { email: string, password: string }) {
-  // @ts-expect-error
+  // @ts-expect-error FIXME promise return handling broken
   const loginRes = await frisby
     .post(`${REST_URL}/user/login`, {
       email,
diff --git a/test/api/erasureRequestApiSpec.ts b/test/api/erasureRequestApiSpec.ts
index bbc0e9e6232..6ead44ff452 100644
--- a/test/api/erasureRequestApiSpec.ts
+++ b/test/api/erasureRequestApiSpec.ts
@@ -90,4 +90,67 @@ describe('/dataerasure', () => {
       .expect('status', 500)
       .expect('bodyContains', 'Error: Blocked illegal activity')
   })
+
+  it('POST erasure request with empty layout parameter returns', () => {
+    return frisby.post(REST_URL + '/user/login', {
+      headers: jsonHeader,
+      body: {
+        email: 'bjoern.kimminich@gmail.com',
+        password: 'bW9jLmxpYW1nQGhjaW5pbW1pay5ucmVvamI='
+      }
+    })
+      .expect('status', 200)
+      .then(({ json: jsonLogin }) => {
+        return frisby.post(BASE_URL + '/dataerasure/', {
+          headers: { Cookie: 'token=' + jsonLogin.authentication.token },
+          body: {
+            layout: null
+          }
+        })
+          .expect('status', 200)
+      })
+  })
+
+  it('POST erasure request with non-existing file path as layout parameter throws error', () => {
+    return frisby.post(REST_URL + '/user/login', {
+      headers: jsonHeader,
+      body: {
+        email: 'bjoern.kimminich@gmail.com',
+        password: 'bW9jLmxpYW1nQGhjaW5pbW1pay5ucmVvamI='
+      }
+    })
+      .expect('status', 200)
+      .then(({ json: jsonLogin }) => {
+        return frisby.post(BASE_URL + '/dataerasure/', {
+          headers: { Cookie: 'token=' + jsonLogin.authentication.token },
+          body: {
+            layout: '../this/file/does/not/exist'
+          }
+        })
+          .expect('status', 500)
+          .expect('bodyContains', 'no such file or directory')
+      })
+  })
+
+  it('POST erasure request with existing file path as layout parameter returns content truncated', () => {
+    return frisby.post(REST_URL + '/user/login', {
+      headers: jsonHeader,
+      body: {
+        email: 'bjoern.kimminich@gmail.com',
+        password: 'bW9jLmxpYW1nQGhjaW5pbW1pay5ucmVvamI='
+      }
+    })
+      .expect('status', 200)
+      .then(({ json: jsonLogin }) => {
+        return frisby.post(BASE_URL + '/dataerasure/', {
+          headers: { Cookie: 'token=' + jsonLogin.authentication.token },
+          body: {
+            layout: '../package.json'
+          }
+        })
+          .expect('status', 200)
+          .expect('bodyContains', 'juice-shop')
+          .expect('bodyContains', '......')
+      })
+  })
 })
diff --git a/test/api/feedbackApiSpec.ts b/test/api/feedbackApiSpec.ts
index 0b9bbc15698..1478cd64e86 100644
--- a/test/api/feedbackApiSpec.ts
+++ b/test/api/feedbackApiSpec.ts
@@ -4,6 +4,7 @@
  */
 
 import frisby = require('frisby')
+import { expect } from '@jest/globals'
 const Joi = frisby.Joi
 const utils = require('../../lib/utils')
 const security = require('../../lib/insecurity')
diff --git a/test/api/fileServingSpec.ts b/test/api/fileServingSpec.ts
index 85607954e74..289ca886c34 100644
--- a/test/api/fileServingSpec.ts
+++ b/test/api/fileServingSpec.ts
@@ -5,7 +5,7 @@
 
 import frisby = require('frisby')
 import config from 'config'
-import { Product } from '../../data/types'
+import { type Product } from '../../data/types'
 const utils = require('../../lib/utils')
 
 const URL = 'http://localhost:3000'
diff --git a/test/api/fileUploadSpec.ts b/test/api/fileUploadSpec.ts
index 45c673bf9c0..48af371fac5 100644
--- a/test/api/fileUploadSpec.ts
+++ b/test/api/fileUploadSpec.ts
@@ -4,6 +4,7 @@
  */
 
 import frisby = require('frisby')
+import { expect } from '@jest/globals'
 import path from 'path'
 const fs = require('fs')
 const utils = require('../../lib/utils')
@@ -16,7 +17,7 @@ describe('/file-upload', () => {
     const form = frisby.formData()
     form.append('file', fs.createReadStream(file))
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME form.getHeaders() is not found
     return frisby.post(URL + '/file-upload', { headers: { 'Content-Type': form.getHeaders()['content-type'] }, body: form })
       .expect('status', 204)
   })
@@ -26,7 +27,7 @@ describe('/file-upload', () => {
     const form = frisby.formData()
     form.append('file', fs.createReadStream(file))
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME form.getHeaders() is not found
     return frisby.post(URL + '/file-upload', { headers: { 'Content-Type': form.getHeaders()['content-type'] }, body: form })
       .expect('status', 204)
   })
@@ -36,7 +37,7 @@ describe('/file-upload', () => {
     const form = frisby.formData()
     form.append('file', fs.createReadStream(file))
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME form.getHeaders() is not found
     return frisby.post(URL + '/file-upload', { headers: { 'Content-Type': form.getHeaders()['content-type'] }, body: form })
       .expect('status', 204)
   })
@@ -46,7 +47,7 @@ describe('/file-upload', () => {
     const form = frisby.formData()
     form.append('file', fs.createReadStream(file))
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME form.getHeaders() is not found
     return frisby.post(URL + '/file-upload', { headers: { 'Content-Type': form.getHeaders()['content-type'] }, body: form })
       .expect('status', 410)
   })
@@ -56,7 +57,7 @@ describe('/file-upload', () => {
     const form = frisby.formData()
     form.append('file', fs.createReadStream(file))
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME form.getHeaders() is not found
     return frisby.post(URL + '/file-upload', { headers: { 'Content-Type': form.getHeaders()['content-type'] }, body: form })
       .expect('status', 410)
   })
@@ -68,7 +69,7 @@ describe('/file-upload', () => {
       form.append('file', fs.createReadStream(file))
 
       return frisby.post(URL + '/file-upload', {
-        // @ts-expect-error
+        // @ts-expect-error FIXME form.getHeaders() is not found
         headers: { 'Content-Type': form.getHeaders()['content-type'] },
         body: form
       })
@@ -81,7 +82,7 @@ describe('/file-upload', () => {
       form.append('file', fs.createReadStream(file))
 
       return frisby.post(URL + '/file-upload', {
-        // @ts-expect-error
+        // @ts-expect-error FIXME form.getHeaders() is not found
         headers: { 'Content-Type': form.getHeaders()['content-type'] },
         body: form
       })
@@ -94,7 +95,7 @@ describe('/file-upload', () => {
       form.append('file', fs.createReadStream(file))
 
       return frisby.post(URL + '/file-upload', {
-        // @ts-expect-error
+        // @ts-expect-error FIXME form.getHeaders() is not found
         headers: { 'Content-Type': form.getHeaders()['content-type'] },
         body: form
       })
@@ -108,7 +109,7 @@ describe('/file-upload', () => {
       form.append('file', fs.createReadStream(file))
 
       return frisby.post(URL + '/file-upload', {
-        // @ts-expect-error
+        // @ts-expect-error FIXME form.getHeaders() is not found
         headers: { 'Content-Type': form.getHeaders()['content-type'] },
         body: form
       }).then((res) => {
@@ -122,7 +123,7 @@ describe('/file-upload', () => {
       form.append('file', fs.createReadStream(file))
 
       return frisby.post(URL + '/file-upload', {
-        // @ts-expect-error
+        // @ts-expect-error FIXME form.getHeaders() is not found
         headers: { 'Content-Type': form.getHeaders()['content-type'] },
         body: form
       })
@@ -134,7 +135,7 @@ describe('/file-upload', () => {
     const form = frisby.formData()
     form.append('file', fs.createReadStream(file))
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME form.getHeaders() is not found
     return frisby.post(URL + '/file-upload', { headers: { 'Content-Type': form.getHeaders()['content-type'] }, body: form })
       .expect('status', 500)
   })
@@ -144,7 +145,7 @@ describe('/file-upload', () => {
     const form = frisby.formData()
     form.append('file', fs.createReadStream(file))
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME form.getHeaders() is not found
     return frisby.post(URL + '/file-upload', { headers: { 'Content-Type': form.getHeaders()['content-type'] }, body: form })
       .expect('status', 204)
   })
@@ -154,7 +155,7 @@ describe('/file-upload', () => {
     const form = frisby.formData()
     form.append('file', fs.createReadStream(file))
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME form.getHeaders() is not found
     return frisby.post(URL + '/file-upload', { headers: { 'Content-Type': form.getHeaders()['content-type'] }, body: form })
       .expect('status', 204)
   })
diff --git a/test/api/httpSpec.ts b/test/api/httpSpec.ts
index 1d592df8c03..4b571f1d34f 100644
--- a/test/api/httpSpec.ts
+++ b/test/api/httpSpec.ts
@@ -12,13 +12,13 @@ describe('HTTP', () => {
   it('response must contain CORS header allowing all origins', () => {
     return frisby.get(URL)
       .expect('status', 200)
-      .expect('header', 'Access-Control-Allow-Origin', '*')
+      .expect('header', 'Access-Control-Allow-Origin', '\\*')
   })
 
   it('response must contain sameorigin frameguard header', () => {
     return frisby.get(URL)
       .expect('status', 200)
-      .expect('header', 'X-Frame-Options', 'sameorigin')
+      .expect('header', 'X-Frame-Options', 'SAMEORIGIN')
   })
 
   it('response must contain CORS header allowing all origins', () => {
diff --git a/test/api/memoryApiSpec.ts b/test/api/memoryApiSpec.ts
index eecdc236ef2..c83df6afe9d 100644
--- a/test/api/memoryApiSpec.ts
+++ b/test/api/memoryApiSpec.ts
@@ -4,6 +4,7 @@
  */
 
 import frisby = require('frisby')
+import { expect } from '@jest/globals'
 import config from 'config'
 import path from 'path'
 const fs = require('fs')
@@ -42,7 +43,7 @@ describe('/rest/memories', () => {
 
     return frisby.post(REST_URL + '/memories', {
       headers: {
-        // @ts-expect-error
+        // @ts-expect-error FIXME form.getHeaders() is not found
         'Content-Type': form.getHeaders()['content-type']
       },
       body: form
@@ -68,7 +69,7 @@ describe('/rest/memories', () => {
         return frisby.post(REST_URL + '/memories', {
           headers: {
             Authorization: 'Bearer ' + jsonLogin.authentication.token,
-            // @ts-expect-error
+            // @ts-expect-error FIXME form.getHeaders() is not found
             'Content-Type': form.getHeaders()['content-type']
           },
           body: form
@@ -95,7 +96,7 @@ describe('/rest/memories', () => {
         return frisby.post(REST_URL + '/memories', {
           headers: {
             Authorization: 'Bearer ' + jsonLogin.authentication.token,
-            // @ts-expect-error
+            // @ts-expect-error FIXME form.getHeaders() is not found
             'Content-Type': form.getHeaders()['content-type']
           },
           body: form
diff --git a/test/api/metricsApiSpec.ts b/test/api/metricsApiSpec.ts
index b65277d63af..df0d56eba44 100644
--- a/test/api/metricsApiSpec.ts
+++ b/test/api/metricsApiSpec.ts
@@ -34,7 +34,7 @@ describe('/metrics', () => {
     const form = frisby.formData()
     form.append('file', fs.createReadStream(file))
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME form.getHeaders() is not found
     return frisby.post(URL + '/file-upload', { headers: { 'Content-Type': form.getHeaders()['content-type'] }, body: form })
       .expect('status', 204)
       .then(() => {
@@ -50,7 +50,7 @@ describe('/metrics', () => {
     const form = frisby.formData()
     form.append('file', fs.createReadStream(file))
 
-    // @ts-expect-error
+    // @ts-expect-error FIXME form.getHeaders() is not found
     return frisby.post(URL + '/file-upload', { headers: { 'Content-Type': form.getHeaders()['content-type'] }, body: form })
       .expect('status', 500)
       .then(() => {
diff --git a/test/api/orderHistoryApiSpec.ts b/test/api/orderHistoryApiSpec.ts
index 9aca67ea7d0..c142aac632f 100644
--- a/test/api/orderHistoryApiSpec.ts
+++ b/test/api/orderHistoryApiSpec.ts
@@ -4,6 +4,7 @@
  */
 
 import frisby = require('frisby')
+import { expect } from '@jest/globals'
 import config from 'config'
 
 const jsonHeader = { 'content-type': 'application/json' }
diff --git a/test/api/productApiSpec.ts b/test/api/productApiSpec.ts
index 26ee3687b01..d923e08ef98 100644
--- a/test/api/productApiSpec.ts
+++ b/test/api/productApiSpec.ts
@@ -4,7 +4,7 @@
  */
 
 import frisby = require('frisby')
-import { Product } from '../../data/types'
+import { type Product } from '../../data/types'
 import config from 'config'
 const Joi = frisby.Joi
 const utils = require('../../lib/utils')
diff --git a/test/api/profileImageUploadSpec.ts b/test/api/profileImageUploadSpec.ts
index e08c8f2f1e7..49c9b6e29e8 100644
--- a/test/api/profileImageUploadSpec.ts
+++ b/test/api/profileImageUploadSpec.ts
@@ -30,7 +30,7 @@ describe('/profile/image/file', () => {
         return frisby.post(`${URL}/profile/image/file`, {
           headers: {
             Cookie: `token=${jsonLogin.authentication.token}`,
-            // @ts-expect-error
+            // @ts-expect-error FIXME form.getHeaders() is not found
             'Content-Type': form.getHeaders()['content-type']
           },
           body: form,
@@ -57,7 +57,7 @@ describe('/profile/image/file', () => {
         return frisby.post(`${URL}/profile/image/file`, {
           headers: {
             Cookie: `token=${jsonLogin.authentication.token}`,
-            // @ts-expect-error
+            // @ts-expect-error FIXME form.getHeaders() is not found
             'Content-Type': form.getHeaders()['content-type']
           },
           body: form
@@ -75,7 +75,7 @@ describe('/profile/image/file', () => {
     form.append('file', fs.createReadStream(file))
 
     return frisby.post(`${URL}/profile/image/file`, {
-      // @ts-expect-error
+      // @ts-expect-error FIXME form.getHeaders() is not found
       headers: { 'Content-Type': form.getHeaders()['content-type'] },
       body: form
     })
@@ -102,7 +102,7 @@ describe('/profile/image/url', () => {
         return frisby.post(`${URL}/profile/image/url`, {
           headers: {
             Cookie: `token=${jsonLogin.authentication.token}`,
-            // @ts-expect-error
+            // @ts-expect-error FIXME form.getHeaders() is not found
             'Content-Type': form.getHeaders()['content-type']
           },
           body: form,
@@ -128,7 +128,7 @@ describe('/profile/image/url', () => {
         return frisby.post(`${URL}/profile/image/url`, {
           headers: {
             Cookie: `token=${jsonLogin.authentication.token}`,
-            // @ts-expect-error
+            // @ts-expect-error FIXME form.getHeaders() is not found
             'Content-Type': form.getHeaders()['content-type']
           },
           body: form,
@@ -143,7 +143,7 @@ describe('/profile/image/url', () => {
     form.append('imageUrl', 'https://placekitten.com/g/100/100')
 
     return frisby.post(`${URL}/profile/image/url`, {
-      // @ts-expect-error
+      // @ts-expect-error FIXME form.getHeaders() is not found
       headers: { 'Content-Type': form.getHeaders()['content-type'] },
       body: form
     })
diff --git a/test/api/quantityApiSpec.ts b/test/api/quantityApiSpec.ts
index 622b33a540a..9cc1707ff22 100644
--- a/test/api/quantityApiSpec.ts
+++ b/test/api/quantityApiSpec.ts
@@ -4,6 +4,7 @@
  */
 
 import frisby = require('frisby')
+import { expect } from '@jest/globals'
 import config from 'config'
 
 const REST_URL = 'http://localhost:3000/rest'
diff --git a/test/api/redirectSpec.ts b/test/api/redirectSpec.ts
index aa75512df3f..9c7587bcf73 100644
--- a/test/api/redirectSpec.ts
+++ b/test/api/redirectSpec.ts
@@ -9,8 +9,8 @@ import config from 'config'
 const URL = 'http://localhost:3000'
 
 describe('/redirect', () => {
-  it('GET redirected to https://github.com/bkimminich/juice-shop when this URL is passed as "to" parameter', () => {
-    return frisby.get(`${URL}/redirect?to=https://github.com/bkimminich/juice-shop`, { redirect: 'manual' })
+  it('GET redirected to https://github.com/juice-shop/juice-shop when this URL is passed as "to" parameter', () => {
+    return frisby.get(`${URL}/redirect?to=https://github.com/juice-shop/juice-shop`, { redirect: 'manual' })
       .expect('status', 302)
   })
 
@@ -73,7 +73,7 @@ describe('/redirect', () => {
   })
 
   it('GET redirected to target URL in "to" parameter when a allow-listed URL is part of the query string', () => {
-    return frisby.get(`${URL}/redirect?to=/score-board?satisfyIndexOf=https://github.com/bkimminich/juice-shop`)
+    return frisby.get(`${URL}/redirect?to=/score-board?satisfyIndexOf=https://github.com/juice-shop/juice-shop`)
       .expect('status', 200)
       .expect('header', 'content-type', /text\/html/)
       .expect('bodyContains', 'main.js')
diff --git a/test/api/searchApiSpec.ts b/test/api/searchApiSpec.ts
index 2af1b1d8810..f801d269b4d 100644
--- a/test/api/searchApiSpec.ts
+++ b/test/api/searchApiSpec.ts
@@ -4,7 +4,8 @@
  */
 
 import frisby = require('frisby')
-import { Product } from '../../data/types'
+import { expect } from '@jest/globals'
+import { type Product } from '../../data/types'
 import config from 'config'
 const security = require('../../lib/insecurity')
 
diff --git a/test/api/socketSpec.ts b/test/api/socketSpec.ts
index 37d887f3e48..8eca011d1a0 100644
--- a/test/api/socketSpec.ts
+++ b/test/api/socketSpec.ts
@@ -3,7 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-import io = require('socket.io-client')
+import io from 'socket.io-client'
 
 describe('WebSocket', () => {
   let socket: SocketIOClient.Socket
diff --git a/test/api/userApiSpec.ts b/test/api/userApiSpec.ts
index 0644847d67d..7d2a2d52707 100644
--- a/test/api/userApiSpec.ts
+++ b/test/api/userApiSpec.ts
@@ -4,6 +4,7 @@
  */
 
 import frisby = require('frisby')
+import { expect } from '@jest/globals'
 const Joi = frisby.Joi
 const utils = require('../../lib/utils')
 const security = require('../../lib/insecurity')
diff --git a/test/api/userProfileSpec.ts b/test/api/userProfileSpec.ts
index a2581b6141d..f981680cbea 100644
--- a/test/api/userProfileSpec.ts
+++ b/test/api/userProfileSpec.ts
@@ -48,7 +48,7 @@ describe('/profile', () => {
     form.append('username', 'Localhorst')
 
     return frisby.post(`${URL}/profile`, {
-      // @ts-expect-error
+      // @ts-expect-error FIXME form.getHeaders() is not found
       headers: { 'Content-Type': form.getHeaders()['content-type'], Cookie: authHeader.Cookie },
       body: form,
       redirect: 'manual'
@@ -61,7 +61,7 @@ describe('/profile', () => {
     form.append('username', 'Localhorst')
 
     return frisby.post(`${URL}/profile`, {
-      // @ts-expect-error
+      // @ts-expect-error FIXME form.getHeaders() is not found
       headers: { 'Content-Type': form.getHeaders()['content-type'] },
       body: form
     })
diff --git a/test/api/vulnCodeFixesSpec.ts b/test/api/vulnCodeFixesSpec.ts
index f11d32ecefe..d2e7fd80924 100644
--- a/test/api/vulnCodeFixesSpec.ts
+++ b/test/api/vulnCodeFixesSpec.ts
@@ -3,7 +3,9 @@
  * SPDX-License-Identifier: MIT
  */
 
+import { expect } from '@jest/globals'
 import frisby = require('frisby')
+import io from 'socket.io-client'
 import { Joi } from 'frisby'
 
 const URL = 'http://localhost:3000'
@@ -28,6 +30,25 @@ describe('/snippets/fixes/:key', () => {
 })
 
 describe('/snippets/fixes', () => {
+  let socket: SocketIOClient.Socket
+
+  beforeEach(done => {
+    socket = io('http://localhost:3000', {
+      reconnectionDelay: 0,
+      forceNew: true
+    })
+    socket.on('connect', () => {
+      done()
+    })
+  })
+
+  afterEach(done => {
+    if (socket.connected) {
+      socket.disconnect()
+    }
+    done()
+  })
+
   it('POST fix for non-existing challenge key throws error', () => {
     return frisby.post(URL + '/snippets/fixes', {
       body: {
@@ -66,8 +87,18 @@ describe('/snippets/fixes', () => {
       })
   })
 
-  it('POST correct fix for existing challenge key gives positive verdict and explanation', () => {
-    return frisby.post(URL + '/snippets/fixes', {
+  it('POST correct fix for existing challenge key gives positive verdict and explanation', async () => {
+    const websocketReceivedPromise = new Promise<void>((resolve) => {
+      socket.once('code challenge solved', (data: any) => {
+        expect(data).toEqual({
+          key: 'resetPasswordBenderChallenge',
+          codingChallengeStatus: 2
+        })
+        resolve()
+      })
+    })
+
+    await frisby.post(URL + '/snippets/fixes', {
       body: {
         key: 'resetPasswordBenderChallenge',
         selectedFix: 1
@@ -78,5 +109,8 @@ describe('/snippets/fixes', () => {
         verdict: true,
         explanation: 'When answered truthfully, all security questions are susceptible to online research (on Facebook, LinkedIn etc.) and often even brute force. If at all, they should not be used as the only factor for a security-relevant function.'
       })
+      .promise()
+
+    await websocketReceivedPromise
   })
 })
diff --git a/test/api/vulnCodeSnippetSpec.ts b/test/api/vulnCodeSnippetSpec.ts
index bb20dd6d5e9..b4cb24da3ae 100644
--- a/test/api/vulnCodeSnippetSpec.ts
+++ b/test/api/vulnCodeSnippetSpec.ts
@@ -3,7 +3,9 @@
  * SPDX-License-Identifier: MIT
  */
 
+import { expect } from '@jest/globals'
 import frisby = require('frisby')
+import io from 'socket.io-client'
 const Joi = frisby.Joi
 
 const URL = 'http://localhost:3000'
@@ -32,10 +34,29 @@ describe('/snippets/:challenge', () => {
 })
 
 describe('snippets/verdict', () => {
-  it('should check for the correct lines', () => {
+  let socket: SocketIOClient.Socket
+
+  beforeEach(done => {
+    socket = io('http://localhost:3000', {
+      reconnectionDelay: 0,
+      forceNew: true
+    })
+    socket.on('connect', () => {
+      done()
+    })
+  })
+
+  afterEach(done => {
+    if (socket.connected) {
+      socket.disconnect()
+    }
+    done()
+  })
+
+  it('should check for the incorrect lines', () => {
     return frisby.post(URL + '/snippets/verdict', {
       body: {
-        selectedLines: [2],
+        selectedLines: [5, 9],
         key: 'resetPasswordJimChallenge'
       }
     })
@@ -44,14 +65,24 @@ describe('snippets/verdict', () => {
         verdict: Joi.boolean()
       })
       .expect('json', {
-        verdict: true
+        verdict: false
       })
   })
 
-  it('should check for the incorrect lines', () => {
-    return frisby.post(URL + '/snippets/verdict', {
+  it('should check for the correct lines', async () => {
+    const websocketReceivedPromise = new Promise<void>((resolve) => {
+      socket.once('code challenge solved', (data: any) => {
+        expect(data).toEqual({
+          key: 'resetPasswordJimChallenge',
+          codingChallengeStatus: 1
+        })
+        resolve()
+      })
+    })
+
+    await frisby.post(URL + '/snippets/verdict', {
       body: {
-        selectedLines: [5, 9],
+        selectedLines: [2],
         key: 'resetPasswordJimChallenge'
       }
     })
@@ -60,7 +91,10 @@ describe('snippets/verdict', () => {
         verdict: Joi.boolean()
       })
       .expect('json', {
-        verdict: false
+        verdict: true
       })
+      .promise()
+
+    await websocketReceivedPromise
   })
 })
diff --git a/test/api/walletApiSpec.ts b/test/api/walletApiSpec.ts
index b8d34298cc9..d75e9c3e235 100644
--- a/test/api/walletApiSpec.ts
+++ b/test/api/walletApiSpec.ts
@@ -14,8 +14,8 @@ beforeAll(() => {
   return frisby.post(`${REST_URL}/user/login`, {
     headers: jsonHeader,
     body: {
-      email: 'jim@juice-sh.op',
-      password: 'ncc-1701'
+      email: 'demo',
+      password: 'demo'
     }
   })
     .expect('status', 200)
@@ -37,7 +37,7 @@ describe('/api/Wallets', () => {
       .expect('status', 200)
       .expect('header', 'content-type', /application\/json/)
       .expect('json', {
-        data: 100
+        data: 200
       })
   })
 
@@ -55,7 +55,7 @@ describe('/api/Wallets', () => {
       headers: authHeader,
       body: {
         balance: 10,
-        paymentId: 5
+        paymentId: 2
       }
     })
       .expect('status', 200)
@@ -66,7 +66,7 @@ describe('/api/Wallets', () => {
           .expect('status', 200)
           .expect('header', 'content-type', /application\/json/)
           .expect('json', {
-            data: 110
+            data: 210
           })
       })
   })
diff --git a/test/api/web3Spec.ts b/test/api/web3Spec.ts
new file mode 100644
index 00000000000..2571dad251b
--- /dev/null
+++ b/test/api/web3Spec.ts
@@ -0,0 +1,152 @@
+/*
+ * Copyright (c) 2014-2023 Bjoern Kimminich & the OWASP Juice Shop contributors.
+ * SPDX-License-Identifier: MIT
+ */
+
+import frisby = require('frisby')
+import { Joi } from 'frisby'
+
+const REST_URL = 'http://localhost:3000/rest/web3'
+
+describe('/submitKey', () => {
+  it('POST missing key in request body gets rejected as non-Ethereum key', () => {
+    return frisby.post(REST_URL + '/submitKey')
+      .expect('status', 401)
+      .expect('header', 'content-type', /application\/json/)
+      .expect('json', {
+        success: false,
+        message: 'Looks like you entered a non-Ethereum private key to access me.'
+      })
+  })
+
+  it('POST arbitrary string in request body gets rejected as non-Ethereum key', () => {
+    return frisby.post(REST_URL + '/submitKey', {
+      privateKey: 'lalalala'
+    })
+      .expect('status', 401)
+      .expect('header', 'content-type', /application\/json/)
+      .expect('json', {
+        success: false,
+        message: 'Looks like you entered a non-Ethereum private key to access me.'
+      })
+  })
+
+  it('POST public wallet key in request body gets rejected as such', () => {
+    return frisby.post(REST_URL + '/submitKey', {
+      privateKey: '0x02c7a2a93289c9fbda5990bac6596993e9bb0a8d3f178175a80b7cfd983983f506'
+    })
+      .expect('status', 401)
+      .expect('header', 'content-type', /application\/json/)
+      .expect('json', {
+        success: false,
+        message: 'Looks like you entered the public key of my ethereum wallet!'
+      })
+  })
+
+  it('POST wallet address in request body gets rejected as such', () => {
+    return frisby.post(REST_URL + '/submitKey', {
+      privateKey: '0x8343d2eb2B13A2495De435a1b15e85b98115Ce05'
+    })
+      .expect('status', 401)
+      .expect('header', 'content-type', /application\/json/)
+      .expect('json', {
+        success: false,
+        message: 'Looks like you entered the public address of my ethereum wallet!'
+      })
+  })
+
+  it('POST private key in request body gets accepted', () => {
+    return frisby.post(REST_URL + '/submitKey', {
+      privateKey: '0x5bcc3e9d38baa06e7bfaab80ae5957bbe8ef059e640311d7d6d465e6bc948e3e'
+    })
+      .expect('status', 200)
+      .expect('header', 'content-type', /application\/json/)
+      .expect('json', {
+        success: true,
+        message: 'Challenge successfully solved'
+      })
+  })
+})
+
+describe('/nftUnlocked', () => {
+  it('GET solution status of "Unlock NFT" challenge', () => {
+    return frisby.get(REST_URL + '/nftUnlocked')
+      .expect('status', 200)
+      .expect('header', 'content-type', /application\/json/)
+      .expect('jsonTypes', {
+        status: Joi.boolean()
+      })
+  })
+})
+
+describe('/nftMintListen', () => {
+  it('GET call confirms registration of event listener', () => {
+    return frisby.get(REST_URL + '/nftMintListen')
+      .expect('status', 200)
+      .expect('header', 'content-type', /application\/json/)
+      .expect('json', {
+        success: true,
+        message: 'Event Listener Created'
+      })
+  })
+})
+
+describe('/walletNFTVerify', () => {
+  it('POST missing wallet address fails to solve minting challenge', () => {
+    return frisby.post(REST_URL + '/walletNFTVerify')
+      .expect('status', 200)
+      .expect('header', 'content-type', /application\/json/)
+      .expect('json', {
+        success: false,
+        message: 'Wallet did not mint the NFT'
+      })
+  })
+
+  it('POST invalid wallet address fails to solve minting challenge', () => {
+    return frisby.post(REST_URL + '/walletNFTVerify', {
+      walletAddress: 'lalalalala'
+    })
+      .expect('status', 200)
+      .expect('header', 'content-type', /application\/json/)
+      .expect('json', {
+        success: false,
+        message: 'Wallet did not mint the NFT'
+      })
+  })
+})
+
+describe('/walletExploitAddress', () => {
+  it('POST missing wallet address in request body still leads to success notification', () => {
+    return frisby.post(REST_URL + '/walletExploitAddress')
+      .expect('status', 200)
+      .expect('header', 'content-type', /application\/json/)
+      .expect('json', {
+        success: true,
+        message: 'Event Listener Created'
+      })
+  })
+
+  it('POST invalid wallet address in request body still leads to success notification', () => {
+    return frisby.post(REST_URL + '/walletExploitAddress', {
+      walletAddress: 'lalalalala'
+    })
+      .expect('status', 200)
+      .expect('header', 'content-type', /application\/json/)
+      .expect('json', {
+        success: true,
+        message: 'Event Listener Created'
+      })
+  })
+
+  it('POST self-referential address in request body leads to success notification', () => {
+    return frisby.post(REST_URL + '/walletExploitAddress', {
+      walletAddress: '0x413744D59d31AFDC2889aeE602636177805Bd7b0'
+    })
+      .expect('status', 200)
+      .expect('header', 'content-type', /application\/json/)
+      .expect('json', {
+        success: true,
+        message: 'Event Listener Created'
+      })
+  })
+})
diff --git a/test/apiTestsSetup.ts b/test/apiTestsSetup.ts
index 0b550c7b54f..a18fe0f1f56 100644
--- a/test/apiTestsSetup.ts
+++ b/test/apiTestsSetup.ts
@@ -6,11 +6,15 @@
 import server = require('./../server')
 
 // eslint-disable-next-line no-async-promise-executor,@typescript-eslint/no-misused-promises
-export = async () => await new Promise<void>(async (resolve, reject) =>
-  await server.start((err: Error) => {
-    if (err) {
-      reject(err)
-    }
-    resolve()
-  })
-)
+export = async () => {
+// eslint-disable-next-line no-async-promise-executor
+  await new Promise<void>(async (resolve, reject) => {
+    await server.start((err: Error) => {
+      if (err) {
+        reject(err)
+      }
+      resolve()
+    })
+  }
+  )
+}
diff --git a/test/cypress/integration/e2e/administration.spec.ts b/test/cypress/e2e/administration.spec.ts
similarity index 100%
rename from test/cypress/integration/e2e/administration.spec.ts
rename to test/cypress/e2e/administration.spec.ts
diff --git a/test/cypress/integration/e2e/b2bOrder.spec.ts b/test/cypress/e2e/b2bOrder.spec.ts
similarity index 94%
rename from test/cypress/integration/e2e/b2bOrder.spec.ts
rename to test/cypress/e2e/b2bOrder.spec.ts
index cc46333898d..277d83739a0 100644
--- a/test/cypress/integration/e2e/b2bOrder.spec.ts
+++ b/test/cypress/e2e/b2bOrder.spec.ts
@@ -7,7 +7,7 @@ describe('/b2b/v2/order', () => {
 
           cy.window().then(async () => {
             const response = await fetch(
-              `${Cypress.env('baseUrl')}/b2b/v2/orders/`,
+              `${Cypress.config('baseUrl')}/b2b/v2/orders/`,
               {
                 method: 'POST',
                 cache: 'no-cache',
@@ -37,7 +37,7 @@ describe('/b2b/v2/order', () => {
           cy.login({ email: 'admin', password: 'admin123' })
           cy.window().then(async () => {
             const response = await fetch(
-              `${Cypress.env('baseUrl')}/b2b/v2/orders/`,
+              `${Cypress.config('baseUrl')}/b2b/v2/orders/`,
               {
                 method: 'POST',
                 cache: 'no-cache',
diff --git a/test/cypress/integration/e2e/basket.spec.ts b/test/cypress/e2e/basket.spec.ts
similarity index 93%
rename from test/cypress/integration/e2e/basket.spec.ts
rename to test/cypress/e2e/basket.spec.ts
index 7cbb9db05eb..d4261d7414f 100644
--- a/test/cypress/integration/e2e/basket.spec.ts
+++ b/test/cypress/e2e/basket.spec.ts
@@ -8,7 +8,7 @@ describe('/#/basket', () => {
       it('should be possible to update a basket to a negative quantity via the Rest API', () => {
         cy.window().then(async () => {
           const response = await fetch(
-            `${Cypress.env('baseUrl')}/api/BasketItems/1`,
+            `${Cypress.config('baseUrl')}/api/BasketItems/1`,
             {
               method: 'PUT',
               cache: 'no-cache',
@@ -57,7 +57,7 @@ describe('/#/basket', () => {
     describe('challenge "basketManipulateChallenge"', () => {
       it('should manipulate basket of other user instead of the one associated to logged-in user', () => {
         cy.window().then(async () => {
-          await fetch(`${Cypress.env('baseUrl')}/api/BasketItems/`, {
+          await fetch(`${Cypress.config('baseUrl')}/api/BasketItems/`, {
             method: 'POST',
             cache: 'no-cache',
             headers: {
@@ -108,13 +108,13 @@ describe('/#/basket', () => {
 
     describe('challenge "forgedCoupon"', () => {
       it('should be able to access file /ftp/coupons_2013.md.bak with poison null byte attack', () => {
-        cy.request(`${Cypress.env('baseUrl')}/ftp/coupons_2013.md.bak%2500.md`)
+        cy.request(`${Cypress.config('baseUrl')}/ftp/coupons_2013.md.bak%2500.md`)
       })
 
       it('should be possible to add a product in the basket', () => {
         cy.window().then(async () => {
           const response = await fetch(
-            `${Cypress.env('baseUrl')}/api/BasketItems/`,
+            `${Cypress.config('baseUrl')}/api/BasketItems/`,
             {
               method: 'POST',
               cache: 'no-cache',
@@ -142,7 +142,7 @@ describe('/#/basket', () => {
 
         cy.visit('/#/payment/shop')
         cy.get('#collapseCouponElement').click()
-        cy.task('GenerateCoupon', 90).then((coupon: string) => {
+        cy.task<string>('GenerateCoupon', 90).then((coupon: string) => {
           cy.get('#coupon').type(coupon)
           cy.get('#applyCouponButton').click()
         })
diff --git a/test/cypress/integration/e2e/changePassword.spec.ts b/test/cypress/e2e/changePassword.spec.ts
similarity index 100%
rename from test/cypress/integration/e2e/changePassword.spec.ts
rename to test/cypress/e2e/changePassword.spec.ts
diff --git a/test/cypress/integration/e2e/chatbot.spec.ts b/test/cypress/e2e/chatbot.spec.ts
similarity index 98%
rename from test/cypress/integration/e2e/chatbot.spec.ts
rename to test/cypress/e2e/chatbot.spec.ts
index df605ab2f42..df46ee067ae 100644
--- a/test/cypress/integration/e2e/chatbot.spec.ts
+++ b/test/cypress/e2e/chatbot.spec.ts
@@ -22,7 +22,7 @@ describe('/chatbot', () => {
 
   describe('challenge "bullyChatbot"', () => {
     it('should be possible to make the chatbot hand out a coupon code', () => {
-      cy.task('GetCouponIntent').then(
+      cy.task<any>('GetCouponIntent').then(
         (couponIntent: {
           utterances: string[]
           intent: string
diff --git a/test/cypress/integration/e2e/complain.spec.ts b/test/cypress/e2e/complain.spec.ts
similarity index 97%
rename from test/cypress/integration/e2e/complain.spec.ts
rename to test/cypress/e2e/complain.spec.ts
index b73bd300ede..c6bedd85531 100644
--- a/test/cypress/integration/e2e/complain.spec.ts
+++ b/test/cypress/e2e/complain.spec.ts
@@ -20,7 +20,7 @@ describe('/#/complain', () => {
         const data = new FormData()
         data.append('file', blob, 'invalidSizeForClient.pdf')
 
-        await fetch(`${Cypress.env('baseUrl')}/file-upload`, {
+        await fetch(`${Cypress.config('baseUrl')}/file-upload`, {
           method: 'POST',
           cache: 'no-cache',
           body: data
@@ -37,7 +37,7 @@ describe('/#/complain', () => {
         const blob = new Blob(['test'], { type: 'application/x-msdownload' })
         data.append('file', blob, 'invalidTypeForClient.exe')
 
-        await fetch(`${Cypress.env('baseUrl')}/file-upload`, {
+        await fetch(`${Cypress.config('baseUrl')}/file-upload`, {
           method: 'POST',
           cache: 'no-cache',
           body: data
diff --git a/test/cypress/integration/e2e/contact.spec.ts b/test/cypress/e2e/contact.spec.ts
similarity index 93%
rename from test/cypress/integration/e2e/contact.spec.ts
rename to test/cypress/e2e/contact.spec.ts
index 517555e7457..8619a7bb7f8 100644
--- a/test/cypress/integration/e2e/contact.spec.ts
+++ b/test/cypress/e2e/contact.spec.ts
@@ -1,4 +1,4 @@
-import { Product } from '../../../../data/types'
+import { type Product } from '../../../data/types'
 
 describe('/#/contact', () => {
   beforeEach(() => {
@@ -135,7 +135,7 @@ describe('/#/contact', () => {
       cy.visit('/')
       cy.window().then(async () => {
         const response = await fetch(
-          `${Cypress.env('baseUrl')}/rest/captcha/`,
+          `${Cypress.config('baseUrl')}/rest/captcha/`,
           {
             method: 'GET',
             cache: 'no-cache',
@@ -156,7 +156,7 @@ describe('/#/contact', () => {
           answer: string
         }) {
           const response = await fetch(
-            `${Cypress.env('baseUrl')}/api/Feedbacks`,
+            `${Cypress.config('baseUrl')}/api/Feedbacks`,
             {
               method: 'POST',
               cache: 'no-cache',
@@ -185,7 +185,7 @@ describe('/#/contact', () => {
       cy.window().then(async () => {
         for (let i = 0; i < 15; i++) {
           const response = await fetch(
-            `${Cypress.env('baseUrl')}/rest/captcha/`,
+            `${Cypress.config('baseUrl')}/rest/captcha/`,
             {
               method: 'GET',
               headers: {
@@ -203,7 +203,7 @@ describe('/#/contact', () => {
             captchaId: number
             answer: string
           }) {
-            await fetch(`${Cypress.env('baseUrl')}/api/Feedbacks`, {
+            await fetch(`${Cypress.config('baseUrl')}/api/Feedbacks`, {
               method: 'POST',
               cache: 'no-cache',
               headers: {
@@ -236,9 +236,9 @@ describe('/#/contact', () => {
 
   describe('challenge "dlpPastebinDataLeak"', () => {
     it('should be possible to post dangerous ingredients of unsafe product as feedback', () => {
-      cy.task('GetPastebinLeakProduct').then((products: Product) => {
+      cy.task<Product>('GetPastebinLeakProduct').then((pastebinLeakProduct: Product) => {
         cy.get('#comment').type(
-          products.keywordsForPastebinDataLeakChallenge.toString()
+          pastebinLeakProduct.keywordsForPastebinDataLeakChallenge ? pastebinLeakProduct.keywordsForPastebinDataLeakChallenge.toString() : '?'
         )
       })
       cy.get('#rating').click()
diff --git a/test/cypress/integration/e2e/dataErasure.spec.ts b/test/cypress/e2e/dataErasure.spec.ts
similarity index 84%
rename from test/cypress/integration/e2e/dataErasure.spec.ts
rename to test/cypress/e2e/dataErasure.spec.ts
index 182521f18d0..56912e1bb11 100644
--- a/test/cypress/integration/e2e/dataErasure.spec.ts
+++ b/test/cypress/e2e/dataErasure.spec.ts
@@ -8,12 +8,12 @@ describe('/dataerasure', () => {
       cy.window().then(async () => {
         const params = 'layout=../package.json'
 
-        const response = await fetch(`${Cypress.env('baseUrl')}/dataerasure`, {
+        const response = await fetch(`${Cypress.config('baseUrl')}/dataerasure`, {
           method: 'POST',
           cache: 'no-cache',
           headers: {
             'Content-type': 'application/x-www-form-urlencoded',
-            Origin: `${Cypress.env('baseUrl')}/`,
+            Origin: `${Cypress.config('baseUrl')}/`,
             Cookie: `token=${localStorage.getItem('token')}`
           },
           body: params
diff --git a/test/cypress/integration/e2e/dataExport.spec.ts b/test/cypress/e2e/dataExport.spec.ts
similarity index 93%
rename from test/cypress/integration/e2e/dataExport.spec.ts
rename to test/cypress/e2e/dataExport.spec.ts
index 7a9f07141f2..2724645248a 100644
--- a/test/cypress/integration/e2e/dataExport.spec.ts
+++ b/test/cypress/e2e/dataExport.spec.ts
@@ -3,7 +3,7 @@ describe('/#/privacy-security/data-export', () => {
     beforeEach(() => {
       cy.visit('/#/register')
 
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#emailControl').type(`admun@${appDomain}`)
         }
diff --git a/test/cypress/integration/e2e/deluxe.spec.ts b/test/cypress/e2e/deluxe.spec.ts
similarity index 90%
rename from test/cypress/integration/e2e/deluxe.spec.ts
rename to test/cypress/e2e/deluxe.spec.ts
index c09025c25ab..e5560a94171 100644
--- a/test/cypress/integration/e2e/deluxe.spec.ts
+++ b/test/cypress/e2e/deluxe.spec.ts
@@ -5,7 +5,7 @@ describe('/#/deluxe-membership', () => {
       cy.location().then((loc) => {
         cy.visit(
           `/#/deluxe-membership?testDecal=${encodeURIComponent(
-            `../../..${loc.pathname}/redirect?to=https://placekitten.com/g/200/100?x=https://github.com/bkimminich/juice-shop`
+            `../../..${loc.pathname}/redirect?to=https://placekitten.com/g/200/100?x=https://github.com/juice-shop/juice-shop`
           )}`
         )
       })
@@ -25,7 +25,7 @@ describe('/#/deluxe-membership', () => {
         cy.request({
           url: '/rest/deluxe-membership',
           method: 'POST',
-          headers: { Authorization: `Bearer ${token.value}` }
+          headers: { Authorization: `Bearer ${token?.value}` }
         }).then((response) => {
           expect(response.body.status).contains('success')
         })
diff --git a/test/cypress/integration/e2e/directAccess.spec.ts b/test/cypress/e2e/directAccess.spec.ts
similarity index 96%
rename from test/cypress/integration/e2e/directAccess.spec.ts
rename to test/cypress/e2e/directAccess.spec.ts
index b0e5e3883da..2e90af2ede8 100644
--- a/test/cypress/integration/e2e/directAccess.spec.ts
+++ b/test/cypress/e2e/directAccess.spec.ts
@@ -39,7 +39,7 @@ describe('/', () => {
 
   describe('challenge "retrieveBlueprint"', () => {
     it('should be able to access the blueprint file', () => {
-      cy.task('GetBlueprint').then((foundBlueprint: string) => {
+      cy.task<string>('GetBlueprint').then((foundBlueprint: string) => {
         // cy.visit requires a text/html response and this is an STL file hence cy.request has been used
         cy.request(`/assets/public/images/products/${foundBlueprint}`)
       })
@@ -76,7 +76,7 @@ describe('/', () => {
   describe('challenge "accessLogDisclosure"', () => {
     it("should be able to access today's access log file", () => {
       // cy.visit requires a text/html response hence cy.request has been used
-      cy.task('toISO8601').then((date: Date) => {
+      cy.task<Date>('toISO8601').then((date: Date) => {
         cy.request(`/support/logs/access.log.${date}`)
       })
       cy.expectChallengeSolved({ challenge: 'Access Log' })
diff --git a/test/cypress/integration/e2e/forgedJwt.spec.ts b/test/cypress/e2e/forgedJwt.spec.ts
similarity index 100%
rename from test/cypress/integration/e2e/forgedJwt.spec.ts
rename to test/cypress/e2e/forgedJwt.spec.ts
diff --git a/test/cypress/integration/e2e/forgotPassword.spec.ts b/test/cypress/e2e/forgotPassword.spec.ts
similarity index 91%
rename from test/cypress/integration/e2e/forgotPassword.spec.ts
rename to test/cypress/e2e/forgotPassword.spec.ts
index 07e06a7e81e..1e8a8edde93 100644
--- a/test/cypress/integration/e2e/forgotPassword.spec.ts
+++ b/test/cypress/e2e/forgotPassword.spec.ts
@@ -10,7 +10,7 @@ describe('/#/forgot-password', () => {
 
   describe('as Jim', () => {
     it('should be able to reset password with his security answer', () => {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#email').type(`jim@${appDomain}`)
         }
@@ -27,7 +27,7 @@ describe('/#/forgot-password', () => {
 
   describe('as Bender', () => {
     it('should be able to reset password with his security answer', () => {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#email').type(`bender@${appDomain}`)
         }
@@ -45,7 +45,7 @@ describe('/#/forgot-password', () => {
   describe('as Bjoern', () => {
     describe('for his internal account', () => {
       it('should be able to reset password with his security answer', () => {
-        cy.task('GetFromConfig', 'application.domain').then(
+        cy.task<string>('GetFromConfig', 'application.domain').then(
           (appDomain: string) => {
             cy.get('#email').type(`bjoern@${appDomain}`)
           }
@@ -76,7 +76,7 @@ describe('/#/forgot-password', () => {
 
   describe('as Morty', () => {
     it('should be able to reset password with his security answer', () => {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#email').type(`morty@${appDomain}`)
         }
@@ -93,7 +93,7 @@ describe('/#/forgot-password', () => {
 
   describe('as Uvogin', () => {
     it('should be able to reset password with his security answer', () => {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#email').type(`uvogin@${appDomain}`)
         }
diff --git a/test/cypress/integration/e2e/geoStalking.spec.ts b/test/cypress/e2e/geoStalking.spec.ts
similarity index 89%
rename from test/cypress/integration/e2e/geoStalking.spec.ts
rename to test/cypress/e2e/geoStalking.spec.ts
index 76b8eb12944..ef3337e3b0a 100644
--- a/test/cypress/integration/e2e/geoStalking.spec.ts
+++ b/test/cypress/e2e/geoStalking.spec.ts
@@ -5,7 +5,7 @@ describe('/#/photo-wall', () => {
 
   describe('challenge "geoStalkingMeta"', () => {
     it('Should be possible to find the answer to a security question in the meta-data of a photo on the photo wall', () => {
-      cy.task('GetFromMemories', 'geoStalkingMetaSecurityAnswer').then(
+      cy.task<string>('GetFromMemories', 'geoStalkingMetaSecurityAnswer').then(
         (answer: string) => {
           cy.task('GetFromConfig', 'application.domain').then((appDomain) => {
             cy.get('#email').type(`john@${appDomain}`)
@@ -23,7 +23,7 @@ describe('/#/photo-wall', () => {
 
   describe('challenge "geoStalkingVisual"', () => {
     it('Should be possible to determine the answer to a security question by looking closely at an image on the photo wall', () => {
-      cy.task('GetFromMemories', 'geoStalkingVisualSecurityAnswer').then(
+      cy.task<string>('GetFromMemories', 'geoStalkingVisualSecurityAnswer').then(
         (answer: string) => {
           cy.task('GetFromConfig', 'application.domain').then((appDomain) => {
             cy.get('#email').type(`emma@${appDomain}`)
diff --git a/test/cypress/integration/e2e/login.spec.ts b/test/cypress/e2e/login.spec.ts
similarity index 88%
rename from test/cypress/integration/e2e/login.spec.ts
rename to test/cypress/e2e/login.spec.ts
index 2c52c76c429..034d7bcc0ad 100644
--- a/test/cypress/integration/e2e/login.spec.ts
+++ b/test/cypress/e2e/login.spec.ts
@@ -11,7 +11,7 @@ describe('/#/login', () => {
     })
 
     it('should log in Admin with SQLI attack on email field using "admin@<juice-sh.op>\'--"', () => {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#email').type(`admin@${appDomain}'--`)
           cy.get('#password').type('a')
@@ -24,7 +24,7 @@ describe('/#/login', () => {
 
   describe('challenge "loginJim"', () => {
     it('should log in Jim with SQLI attack on email field using "jim@<juice-sh.op>\'--"', () => {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#email').type(`jim@${appDomain}'--`)
           cy.get('#password').type('a')
@@ -37,7 +37,7 @@ describe('/#/login', () => {
 
   describe('challenge "loginBender"', () => {
     it('should log in Bender with SQLI attack on email field using "bender@<juice-sh.op>\'--"', () => {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#email').type(`bender@${appDomain}'--`)
           cy.get('#password').type('a')
@@ -50,7 +50,7 @@ describe('/#/login', () => {
 
   describe('challenge "adminCredentials"', () => {
     it('should be able to log in with original (weak) admin credentials', () => {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#email').type(`admin@${appDomain}`)
           cy.get('#password').type('admin123')
@@ -63,7 +63,7 @@ describe('/#/login', () => {
 
   describe('challenge "loginSupport"', () => {
     it('should be able to log in with original support-team credentials', () => {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#email').type(`support@${appDomain}`)
           cy.get('#password').type('J6aVjTgOpRs@?5l!Zkq2AYnCE@RF$P')
@@ -76,7 +76,7 @@ describe('/#/login', () => {
 
   describe('challenge "loginRapper"', () => {
     it('should be able to log in with original MC SafeSearch credentials', () => {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#email').type(`mc.safesearch@${appDomain}`)
           cy.get('#password').type('Mr. N00dles')
@@ -89,7 +89,7 @@ describe('/#/login', () => {
 
   describe('challenge "loginAmy"', () => {
     it('should be able to log in with original Amy credentials', () => {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#email').type(`amy@${appDomain}`)
           cy.get('#password').type('K1f.....................')
@@ -102,7 +102,7 @@ describe('/#/login', () => {
 
   describe('challenge "dlpPasswordSpraying"', () => {
     it('should be able to log in with original Jannik credentials', () => {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#email').type(`J12934@${appDomain}`)
           cy.get('#password').type('0Y8rMnww$*9VFYE§59-!Fg1L6t&6lB')
@@ -115,7 +115,7 @@ describe('/#/login', () => {
 
   describe('challenge "twoFactorAuthUnsafeSecretStorage"', () => {
     it('should be able to log into a exsisting 2fa protected account given the right token', () => {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#email').type(`wurstbrot@${appDomain}'--`)
           cy.get('#password').type('Never mind...')
@@ -123,7 +123,7 @@ describe('/#/login', () => {
         }
       )
 
-      cy.task('GenerateAuthenticator', 'IFTXE3SPOEYVURT2MRYGI52TKJ4HC3KH').then(
+      cy.task<string>('GenerateAuthenticator', 'IFTXE3SPOEYVURT2MRYGI52TKJ4HC3KH').then(
         (totpToken: string) => {
           void cy.get('#totpToken').type(totpToken)
           void cy.get('#totpSubmitButton').click()
@@ -151,7 +151,7 @@ describe('/#/login', () => {
     })
 
     it('should be able to log in as chris.pike@juice-sh.op by using "chris.pike@juice-sh.op\' --"', () => {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           cy.get('#email').type(`chris.pike@${appDomain}'--`)
           cy.get('#password').type('a')
diff --git a/test/cypress/integration/e2e/metrics.spec.ts b/test/cypress/e2e/metrics.spec.ts
similarity index 100%
rename from test/cypress/integration/e2e/metrics.spec.ts
rename to test/cypress/e2e/metrics.spec.ts
diff --git a/test/cypress/integration/e2e/noSql.spec.ts b/test/cypress/e2e/noSql.spec.ts
similarity index 89%
rename from test/cypress/integration/e2e/noSql.spec.ts
rename to test/cypress/e2e/noSql.spec.ts
index 06d5d97bd11..5e5b16d9456 100644
--- a/test/cypress/integration/e2e/noSql.spec.ts
+++ b/test/cypress/e2e/noSql.spec.ts
@@ -12,7 +12,7 @@ describe('/rest/products/reviews', () => {
         if (!disableOnContainerEnv) {
           cy.window().then(() => {
             void fetch(
-              `${Cypress.env('baseUrl')}/rest/products/sleep(1000)/reviews`,
+              `${Cypress.config('baseUrl')}/rest/products/sleep(1000)/reviews`,
               {
                 method: 'GET',
                 headers: {
@@ -33,9 +33,7 @@ describe('/rest/products/reviews', () => {
         if (!disableOnContainerEnv) {
           cy.window().then(async () => {
             await fetch(
-              `${Cypress.env(
-                'baseUrl'
-              )}/rest/track-order/%27%20%7C%7C%20true%20%7C%7C%20%27`,
+              `${Cypress.config('baseUrl')}/rest/track-order/%27%20%7C%7C%20true%20%7C%7C%20%27`,
               {
                 method: 'GET',
                 headers: {
@@ -57,7 +55,7 @@ describe('/rest/products/reviews', () => {
 
     it('should be possible to inject a selector into the update route', () => {
       cy.window().then(async () => {
-        await fetch(`${Cypress.env('baseUrl')}/rest/products/reviews`, {
+        await fetch(`${Cypress.config('baseUrl')}/rest/products/reviews`, {
           method: 'PATCH',
           headers: {
             'Content-type': 'application/json',
@@ -82,7 +80,7 @@ describe('/rest/products/reviews', () => {
       cy.visit('/')
       cy.window().then(async () => {
         const response = await fetch(
-          `${Cypress.env('baseUrl')}/rest/products/1/reviews`,
+          `${Cypress.config('baseUrl')}/rest/products/1/reviews`,
           {
             method: 'GET',
             headers: {
@@ -98,7 +96,7 @@ describe('/rest/products/reviews', () => {
 
         async function editReview (reviewId: string) {
           const response = await fetch(
-            `${Cypress.env('baseUrl')}/rest/products/reviews`,
+            `${Cypress.config('baseUrl')}/rest/products/reviews`,
             {
               method: 'PATCH',
               headers: {
@@ -127,7 +125,7 @@ describe('/rest/products/reviews', () => {
       cy.window().then(async () => {
         async function sendPostRequest (reviewId: string) {
           const anotherResponse = await fetch(
-            `${Cypress.env('baseUrl')}/rest/products/reviews`,
+            `${Cypress.config('baseUrl')}/rest/products/reviews`,
             {
               method: 'POST',
               headers: {
@@ -143,7 +141,7 @@ describe('/rest/products/reviews', () => {
         }
 
         const response = await fetch(
-          `${Cypress.env('baseUrl')}/rest/products/1/reviews`,
+          `${Cypress.config('baseUrl')}/rest/products/1/reviews`,
           {
             method: 'GET',
             headers: {
diff --git a/test/cypress/integration/e2e/privacyPolicy.spec.ts b/test/cypress/e2e/privacyPolicy.spec.ts
similarity index 100%
rename from test/cypress/integration/e2e/privacyPolicy.spec.ts
rename to test/cypress/e2e/privacyPolicy.spec.ts
diff --git a/test/cypress/integration/e2e/profile.spec.ts b/test/cypress/e2e/profile.spec.ts
similarity index 92%
rename from test/cypress/integration/e2e/profile.spec.ts
rename to test/cypress/e2e/profile.spec.ts
index 9a5ace54bdb..f4a5f988f2f 100644
--- a/test/cypress/integration/e2e/profile.spec.ts
+++ b/test/cypress/e2e/profile.spec.ts
@@ -7,9 +7,7 @@ describe('/profile', () => {
       cy.visit('/profile')
 
       cy.get('#url').type(
-        `${Cypress.env(
-          'baseUrl'
-        )}/solve/challenges/server-side?key=tRy_H4rd3r_n0thIng_iS_Imp0ssibl3`
+        `${Cypress.config('baseUrl')}/solve/challenges/server-side?key=tRy_H4rd3r_n0thIng_iS_Imp0ssibl3`
       )
       cy.get('#submitUrl').click()
       cy.visit('/')
@@ -38,7 +36,7 @@ describe('/profile', () => {
           cy.get('#submit').click()
 
           cy.get('#url').type(
-            `${Cypress.env('baseUrl')}/assets/public/images/uploads/default.svg`
+            `${Cypress.config('baseUrl')}/assets/public/images/uploads/default.svg`
           )
           cy.get('#submitUrl').click()
           cy.visit('/#/')
@@ -82,7 +80,7 @@ describe('/profile', () => {
           .getElementsByName('editbox')[0]
           .contentDocument.getElementsByName(
             'ta'
-          )[0].value = `<form action=\\"${Cypress.env('baseUrl')}/profile\\" 
+          )[0].value = `<form action=\\"${Cypress.config('baseUrl')}/profile\\" 
         method=\\"POST\\">
         <input type=\\"hidden\\" name=\\"username\\" value=\\"CSRF\\"/>
         <input type=\\"submit\\"/>
@@ -100,7 +98,7 @@ describe('/profile', () => {
         const formData = new FormData()
         formData.append('username', 'CSRF')
 
-        const response = await fetch(`${Cypress.env('baseUrl')}/profile`, {
+        const response = await fetch(`${Cypress.config('baseUrl')}/profile`, {
           method: 'POST',
           cache: 'no-cache',
           headers: {
diff --git a/test/cypress/integration/e2e/publicFtp.spec.ts b/test/cypress/e2e/publicFtp.spec.ts
similarity index 100%
rename from test/cypress/integration/e2e/publicFtp.spec.ts
rename to test/cypress/e2e/publicFtp.spec.ts
diff --git a/test/cypress/integration/e2e/redirect.spec.ts b/test/cypress/e2e/redirect.spec.ts
similarity index 97%
rename from test/cypress/integration/e2e/redirect.spec.ts
rename to test/cypress/e2e/redirect.spec.ts
index f938f228510..6d5b1625dc9 100644
--- a/test/cypress/integration/e2e/redirect.spec.ts
+++ b/test/cypress/e2e/redirect.spec.ts
@@ -11,7 +11,7 @@ describe('/redirect', () => {
   describe('challenge "redirect"', () => {
     it('should redirect to target URL if allowlisted URL is contained in it as parameter', () => {
       cy.visit(
-        '/redirect?to=https://owasp.org?trickIndexOf=https://github.com/bkimminich/juice-shop',
+        '/redirect?to=https://owasp.org?trickIndexOf=https://github.com/juice-shop/juice-shop',
         {
           failOnStatusCode: false
         }
diff --git a/test/cypress/integration/e2e/register.spec.ts b/test/cypress/e2e/register.spec.ts
similarity index 91%
rename from test/cypress/integration/e2e/register.spec.ts
rename to test/cypress/e2e/register.spec.ts
index ddbaa313566..b6393c85118 100644
--- a/test/cypress/integration/e2e/register.spec.ts
+++ b/test/cypress/e2e/register.spec.ts
@@ -16,7 +16,7 @@ describe('/#/register', () => {
         if (!disableOnContainerEnv) {
           cy.window().then(async () => {
             const response = await fetch(
-              `${Cypress.env('baseUrl')}/api/Users/`,
+              `${Cypress.config('baseUrl')}/api/Users/`,
               {
                 method: 'POST',
                 cache: 'no-cache',
@@ -49,7 +49,7 @@ describe('/#/register', () => {
   describe('challenge "registerAdmin"', () => {
     it('should be possible to register admin user using REST API', () => {
       cy.window().then(async () => {
-        const response = await fetch(`${Cypress.env('baseUrl')}/api/Users/`, {
+        const response = await fetch(`${Cypress.config('baseUrl')}/api/Users/`, {
           method: 'POST',
           cache: 'no-cache',
           headers: {
@@ -73,7 +73,7 @@ describe('/#/register', () => {
   describe('challenge "passwordRepeat"', () => {
     it('should be possible to register user without repeating the password', () => {
       cy.window().then(async () => {
-        const response = await fetch(`${Cypress.env('baseUrl')}/api/Users/`, {
+        const response = await fetch(`${Cypress.config('baseUrl')}/api/Users/`, {
           method: 'POST',
           cache: 'no-cache',
           headers: {
@@ -95,7 +95,7 @@ describe('/#/register', () => {
   describe('challenge "registerEmptyUser"', () => {
     it('should be possible to register a user with blank email/password', () => {
       cy.window().then(async () => {
-        const response = await fetch(`${Cypress.env('baseUrl')}/api/Users`, {
+        const response = await fetch(`${Cypress.config('baseUrl')}/api/Users`, {
           method: 'POST',
           cache: 'no-cache',
           headers: {
diff --git a/test/cypress/integration/e2e/restApi.spec.ts b/test/cypress/e2e/restApi.spec.ts
similarity index 94%
rename from test/cypress/integration/e2e/restApi.spec.ts
rename to test/cypress/e2e/restApi.spec.ts
index 35135ebf432..f4156c73990 100644
--- a/test/cypress/integration/e2e/restApi.spec.ts
+++ b/test/cypress/e2e/restApi.spec.ts
@@ -11,7 +11,7 @@ describe('/api', () => {
         if (!disableOnContainerEnv) {
           cy.window().then(async () => {
             const response = await fetch(
-              `${Cypress.env('baseUrl')}/api/Products`,
+              `${Cypress.config('baseUrl')}/api/Products`,
               {
                 method: 'POST',
                 cache: 'no-cache',
@@ -51,7 +51,7 @@ describe('/api', () => {
         cy.task('GetOverwriteUrl').then((overwriteUrl) => {
           cy.window().then(async () => {
             const response = await fetch(
-              `${Cypress.env('baseUrl')}/api/Products/${tamperingProductId}`,
+              `${Cypress.config('baseUrl')}/api/Products/${tamperingProductId}`,
               {
                 method: 'PUT',
                 cache: 'no-cache',
@@ -88,7 +88,7 @@ describe('/rest/saveLoginIp', () => {
         if (!disableOnContainerEnv) {
           cy.window().then(async () => {
             const response = await fetch(
-              `${Cypress.env('baseUrl')}/rest/saveLoginIp`,
+              `${Cypress.config('baseUrl')}/rest/saveLoginIp`,
               {
                 method: 'GET',
                 cache: 'no-cache',
diff --git a/test/cypress/integration/e2e/scoreBoard.spec.ts b/test/cypress/e2e/scoreBoard.spec.ts
similarity index 93%
rename from test/cypress/integration/e2e/scoreBoard.spec.ts
rename to test/cypress/e2e/scoreBoard.spec.ts
index 032532af675..1a08de2a37d 100644
--- a/test/cypress/integration/e2e/scoreBoard.spec.ts
+++ b/test/cypress/e2e/scoreBoard.spec.ts
@@ -11,9 +11,7 @@ describe('/#/score-board', () => {
     it('should be possible to solve the non-existent challenge #99', () => {
       cy.window().then(async () => {
         await fetch(
-          `${Cypress.env(
-            'baseUrl'
-          )}/rest/continue-code/apply/69OxrZ8aJEgxONZyWoz1Dw4BvXmRGkM6Ae9M7k2rK63YpqQLPjnlb5V5LvDj`,
+          `${Cypress.config('baseUrl')}/rest/continue-code/apply/69OxrZ8aJEgxONZyWoz1Dw4BvXmRGkM6Ae9M7k2rK63YpqQLPjnlb5V5LvDj`,
           {
             method: 'PUT',
             cache: 'no-cache',
diff --git a/test/cypress/integration/e2e/search.spec.ts b/test/cypress/e2e/search.spec.ts
similarity index 86%
rename from test/cypress/integration/e2e/search.spec.ts
rename to test/cypress/e2e/search.spec.ts
index 7351ca20372..74bf000a92d 100644
--- a/test/cypress/integration/e2e/search.spec.ts
+++ b/test/cypress/e2e/search.spec.ts
@@ -1,4 +1,4 @@
-import { Product } from '../../../../data/types'
+import { type Product } from '../../../data/types'
 
 describe('/#/search', () => {
   beforeEach(() => {
@@ -61,11 +61,11 @@ describe('/rest/products/search', () => {
       cy.request("/rest/products/search?q='))--")
         .its('body')
         .then((sourceContent) => {
-          cy.task('GetPastebinLeakProduct').then((productName: Product) => {
+          cy.task<Product>('GetPastebinLeakProduct').then((pastebinLeakProduct: Product) => {
             let foundProduct = false
 
-            sourceContent.data.forEach((product) => {
-              if (product.name === productName.name) {
+            sourceContent.data.forEach((product: Product) => {
+              if (product.name === pastebinLeakProduct.name) {
                 foundProduct = true
               }
             })
@@ -88,11 +88,11 @@ describe('/rest/products/search', () => {
       cy.request("/rest/products/search?q='))--")
         .its('body')
         .then((sourceContent) => {
-          cy.task('GetChristmasProduct').then((productName: Product) => {
+          cy.task<Product>('GetChristmasProduct').then((christmasProduct: Product) => {
             let foundProduct = false
 
-            sourceContent.data.forEach((product: { name: string }) => {
-              if (product.name === productName.name) {
+            sourceContent.data.forEach((product: Product) => {
+              if (product.name === christmasProduct.name) {
                 foundProduct = true
               }
             })
@@ -106,12 +106,12 @@ describe('/rest/products/search', () => {
       cy.request('/api/products')
         .its('body')
         .then((sourceContent) => {
-          cy.task('GetChristmasProduct').then((productName: Product) => {
+          cy.task<Product>('GetChristmasProduct').then((christmasProduct: Product) => {
             sourceContent.data.forEach((product: Product) => {
-              if (product.name === productName.name) {
+              if (product.name === christmasProduct.name) {
                 cy.window().then(async () => {
                   const response = await fetch(
-                    `${Cypress.env('baseUrl')}/api/BasketItems/`,
+                    `${Cypress.config('baseUrl')}/api/BasketItems/`,
                     {
                       method: 'POST',
                       cache: 'no-cache',
diff --git a/test/cypress/integration/e2e/tokenSale.spec.ts b/test/cypress/e2e/tokenSale.spec.ts
similarity index 100%
rename from test/cypress/integration/e2e/tokenSale.spec.ts
rename to test/cypress/e2e/tokenSale.spec.ts
diff --git a/test/cypress/integration/e2e/totpSetup.spec.ts b/test/cypress/e2e/totpSetup.spec.ts
similarity index 94%
rename from test/cypress/integration/e2e/totpSetup.spec.ts
rename to test/cypress/e2e/totpSetup.spec.ts
index eb352594892..79b46fa9263 100644
--- a/test/cypress/integration/e2e/totpSetup.spec.ts
+++ b/test/cypress/e2e/totpSetup.spec.ts
@@ -30,7 +30,7 @@ describe('/#/basket', () => {
           // console.log($val);
           cy.get('#currentPasswordSetup').type('K1f.....................')
 
-          cy.task('GenerateAuthenticator', $val).then((secret: string) => {
+          cy.task<string>('GenerateAuthenticator', $val).then((secret: string) => {
             cy.get('#initalToken').type(secret)
             cy.get('#setupTwoFactorAuth').click()
 
diff --git a/test/cypress/integration/e2e/trackOrder.spec.ts b/test/cypress/e2e/trackOrder.spec.ts
similarity index 100%
rename from test/cypress/integration/e2e/trackOrder.spec.ts
rename to test/cypress/e2e/trackOrder.spec.ts
diff --git a/test/cypress/fixtures/example.json b/test/cypress/fixtures/example.json
deleted file mode 100644
index 02e4254378e..00000000000
--- a/test/cypress/fixtures/example.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-  "name": "Using fixtures to represent data",
-  "email": "hello@cypress.io",
-  "body": "Fixtures are a great way to mock data for responses to routes"
-}
diff --git a/test/cypress/plugins/index.ts b/test/cypress/plugins/index.ts
deleted file mode 100644
index e0c4ab2a10d..00000000000
--- a/test/cypress/plugins/index.ts
+++ /dev/null
@@ -1,95 +0,0 @@
-// eslint-disable-next-line @typescript-eslint/triple-slash-reference
-/// <reference types="cypress" />
-// ***********************************************************
-// This example plugins/index.js can be used to load plugins
-//
-// You can change the location of this file or turn off loading
-// the plugins file with the 'pluginsFile' configuration option.
-//
-// You can read more here:
-// https://on.cypress.io/plugins-guide
-// ***********************************************************
-
-// This function is called when a project is opened or re-opened (e.g. due to
-// the project's config changing)
-
-/**
- * @type {Cypress.PluginConfig}
- */
-
-import * as config from 'config'
-import * as otplib from 'otplib'
-import { Memory, Product } from '../../../data/types'
-import * as utils from '../../../lib/utils'
-import * as security from '../../../lib/insecurity'
-
-export default (on) => {
-  on('task', {
-    GenerateCoupon (discount: number) {
-      return security.generateCoupon(discount)
-    },
-    GetBlueprint () {
-      for (const product of config.get<Product[]>('products')) {
-        if (product.fileForRetrieveBlueprintChallenge) {
-          const blueprint = product.fileForRetrieveBlueprintChallenge
-          return blueprint
-        }
-      }
-    },
-    GetChristmasProduct () {
-      return config.get<Product[]>('products').filter(
-        (product: Product) => product.useForChristmasSpecialChallenge
-      )[0]
-    },
-    GetCouponIntent () {
-      const trainingData = require(`../../../data/chatbot/${utils.extractFilename(
-        config.get('application.chatBot.trainingData')
-      )}`)
-      const couponIntent = trainingData.data.filter(
-        (data: { intent: string }) => data.intent === 'queries.couponCode'
-      )[0]
-      return couponIntent
-    },
-    GetFromMemories (property: string) {
-      for (const memory of config.get<Memory[]>('memories')) {
-        if (memory[property]) {
-          return memory[property]
-        }
-      }
-    },
-    GetFromConfig (variable: string) {
-      return config.get(variable)
-    },
-    GetOverwriteUrl () {
-      return config.get('challenges.overwriteUrlForProductTamperingChallenge')
-    },
-    GetPastebinLeakProduct () {
-      return config.get<Product[]>('products').filter(
-        (product: Product) => product.keywordsForPastebinDataLeakChallenge
-      )[0]
-    },
-    GetTamperingProductId () {
-      const products: Product[] = config.get('products')
-      for (let i = 0; i < products.length; i++) {
-        if (products[i].urlForProductTamperingChallenge) {
-          return i + 1
-        }
-      }
-    },
-    GenerateAuthenticator (inputString: string) {
-      return otplib.authenticator.generate(inputString)
-    },
-    toISO8601 () {
-      const date = new Date()
-      return utils.toISO8601(date)
-    },
-    disableOnContainerEnv () {
-      return utils.disableOnContainerEnv()
-    },
-    disableOnWindowsEnv () {
-      return utils.disableOnWindowsEnv()
-    }
-  })
-  // `on` is used to hook into various events Cypress emits
-  // `config` is the resolved Cypress config
-}
diff --git a/test/cypress/support/commands.ts b/test/cypress/support/commands.ts
index a35c407ae1d..9c865d551a4 100644
--- a/test/cypress/support/commands.ts
+++ b/test/cypress/support/commands.ts
@@ -1,30 +1,4 @@
-// ***********************************************
-// This example commands.js shows you how to
-// create various custom commands and overwrite
-// existing commands.
-//
-// For more comprehensive examples of custom
-// commands please read more here:
-// https://on.cypress.io/custom-commands
-// ***********************************************
-//
-//
-// -- This is a parent command --
-// Cypress.Commands.add('login', (email, password) => { ... })
-//
-//
-// -- This is a child command --
-// Cypress.Commands.add('drag', { prevSubject: 'element'}, (subject, options) => { ... })
-//
-//
-// -- This is a dual command --
-// Cypress.Commands.add('dismiss', { prevSubject: 'optional'}, (subject, options) => { ... })
-//
-//
-// -- This will overwrite an existing command --
-// Cypress.Commands.overwrite('visit', (originalFn, url, options) => { ... })
-
-import { Challenge } from '../../../data/types'
+import { type Challenge } from '../../../data/types'
 
 Cypress.Commands.add(
   'expectChallengeSolved',
@@ -59,10 +33,10 @@ Cypress.Commands.add(
   'login',
   (context: { email: string, password: string, totpSecret?: string }) => {
     cy.visit('/#/login')
-    if (context.email.match(/\S+@\S+\.\S+/)) {
+    if (context.email.match(/\S+@\S+\.\S+/) != null) {
       cy.get('#email').type(context.email)
     } else {
-      cy.task('GetFromConfig', 'application.domain').then(
+      cy.task<string>('GetFromConfig', 'application.domain').then(
         (appDomain: string) => {
           const email = context.email.concat('@', appDomain)
           cy.get('#email').type(email)
@@ -75,17 +49,17 @@ Cypress.Commands.add(
   }
 )
 
-function walkRecursivelyInArray (arr: Number[], cb: Function, index = 0) {
-  if (!arr.length) return
+function walkRecursivelyInArray (arr: number[], cb: any, index = 0) {
+  if (arr.length === 0) return
   const ret = cb(index, arr.shift());
   // eslint-disable-next-line @typescript-eslint/prefer-optional-chain
   ((ret && ret.chainerId) ? ret : cy.wrap(ret))
     .then((ret: boolean) => {
       if (!ret) return
-      return walkRecursivelyInArray(arr, cb, index + 1)
+      walkRecursivelyInArray(arr, cb, index + 1)
     })
 }
 
-Cypress.Commands.add('eachSeries', { prevSubject: 'optional' }, (arrayGenerated: Number[], checkFnToBeRunOnEach: Function) => {
-  return walkRecursivelyInArray(arrayGenerated, checkFnToBeRunOnEach)
+Cypress.Commands.add('eachSeries', { prevSubject: 'optional' } as any, (arrayGenerated: number[], checkFnToBeRunOnEach: any) => {
+  walkRecursivelyInArray(arrayGenerated, checkFnToBeRunOnEach)
 })
diff --git a/test/cypress/support/e2e.ts b/test/cypress/support/e2e.ts
new file mode 100644
index 00000000000..f32b5bdbf60
--- /dev/null
+++ b/test/cypress/support/e2e.ts
@@ -0,0 +1,18 @@
+import './commands'
+import './setup'
+
+declare global {
+  // eslint-disable-next-line @typescript-eslint/no-namespace
+  namespace Cypress {
+    interface Chainable {
+      expectChallengeSolved: (value: { challenge: string }) => void
+      login: (value: {
+        email: string
+        password: string
+        totpSecret?: string
+      }) => void
+      eachSeries: any
+
+    }
+  }
+}
diff --git a/test/cypress/support/index.ts b/test/cypress/support/index.ts
deleted file mode 100644
index c9561d54932..00000000000
--- a/test/cypress/support/index.ts
+++ /dev/null
@@ -1,37 +0,0 @@
-// ***********************************************************
-// This example support/index.js is processed and
-// loaded automatically before your test files.
-//
-// This is a great place to put global configuration and
-// behavior that modifies Cypress.
-//
-// You can change the location of this file or turn off
-// automatically serving support files with the
-// 'supportFile' configuration option.
-//
-// You can read more here:
-// https://on.cypress.io/configuration
-// ***********************************************************
-
-// Import commands.js using ES2015 syntax:
-import './commands'
-import './setup'
-
-// Alternatively you can use CommonJS syntax:
-// require('./commands')
-
-declare global {
-  // eslint-disable-next-line @typescript-eslint/no-namespace
-  namespace Cypress {
-    interface Chainable {
-      expectChallengeSolved: (value: { challenge: string }) => void
-      login: (value: {
-        email: string
-        password: string
-        totpSecret?: string
-      }) => void
-      eachSeries: any
-
-    }
-  }
-}
diff --git a/test/server/b2bOrderSpec.ts b/test/server/b2bOrderSpec.ts
index 57734288eb4..5b9ae4cb533 100644
--- a/test/server/b2bOrderSpec.ts
+++ b/test/server/b2bOrderSpec.ts
@@ -27,7 +27,7 @@ describe('b2bOrder', () => {
   })
 
   xit('infinite loop payload does not succeed but solves "rceChallenge"', () => { // FIXME Started failing on Linux regularly
-    challenges.rceChallenge = { solved: false, save: save }
+    challenges.rceChallenge = { solved: false, save }
 
     req.body.orderLinesData = '(function dos() { while(true); })()'
 
@@ -36,18 +36,19 @@ describe('b2bOrder', () => {
     expect(challenges.rceChallenge.solved).to.equal(true)
   })
 
-  xit('timeout after 2 seconds solves "rceOccupyChallenge"', () => { // FIXME Started failing on Linux regularly
-    challenges.rceOccupyChallenge = { solved: false, save: save }
+  // FIXME Disabled as test started failing on Linux regularly
+  xit('timeout after 2 seconds solves "rceOccupyChallenge"', () => {
+    challenges.rceOccupyChallenge = { solved: false, save }
 
     req.body.orderLinesData = '/((a+)+)b/.test("aaaaaaaaaaaaaaaaaaaaaaaaaaaaa")'
 
     createB2bOrder()(req, res, next)
 
     expect(challenges.rceOccupyChallenge.solved).to.equal(true)
-  }, 3000)
+  }/*, 3000 */)
 
   it('deserializing JSON as documented in Swagger should not solve "rceChallenge"', () => {
-    challenges.rceChallenge = { solved: false, save: save }
+    challenges.rceChallenge = { solved: false, save }
 
     req.body.orderLinesData = '{"productId": 12,"quantity": 10000,"customerReference": ["PO0000001.2", "SM20180105|042"],"couponCode": "pes[Bh.u*t"}'
 
@@ -57,7 +58,7 @@ describe('b2bOrder', () => {
   })
 
   it('deserializing arbitrary JSON should not solve "rceChallenge"', () => {
-    challenges.rceChallenge = { solved: false, save: save }
+    challenges.rceChallenge = { solved: false, save }
 
     req.body.orderLinesData = '{"hello": "world", "foo": 42, "bar": [false, true]}'
 
@@ -66,7 +67,7 @@ describe('b2bOrder', () => {
   })
 
   it('deserializing broken JSON should not solve "rceChallenge"', () => {
-    challenges.rceChallenge = { solved: false, save: save }
+    challenges.rceChallenge = { solved: false, save }
 
     req.body.orderLinesData = '{ "productId: 28'
 
diff --git a/test/server/blueprintSpec.ts b/test/server/blueprintSpec.ts
index 3cadfe6fe7a..2ada6b4b48f 100644
--- a/test/server/blueprintSpec.ts
+++ b/test/server/blueprintSpec.ts
@@ -1,6 +1,6 @@
 import chai = require('chai')
 import config from 'config'
-import { Product } from 'data/types'
+import { type Product } from 'data/types'
 import path from 'path'
 import { promisify } from 'util'
 import { ExifImage } from 'exif'
@@ -16,7 +16,7 @@ async function parseExifData (path: string): Promise<any> {
   return await new Promise((resolve, reject) => {
     // eslint-disable-next-line no-new
     new ExifImage({ image: path }, (error: Error | null, exifData: any) => {
-      if (error) {
+      if (error != null) {
         expect.fail(`Could not read EXIF data from ${path}`)
         reject(error)
       }
@@ -43,7 +43,7 @@ describe('blueprint', () => {
             pathToImage = path.resolve('frontend/src', pathToImage, product.image)
           }
 
-          if (product.exifForBlueprintChallenge !== undefined && product?.exifForBlueprintChallenge?.[0] !== null) { // Prevents failing test for sample or custom themes where null has been explicitly set as value for "exifForBlueprintChallenge". Warning: This makes the "Retrieve Blueprint" challenge probably unsolvable unless hints are placed elsewhere.
+          if (product.exifForBlueprintChallenge?.[0]) { // Prevents failing test for sample or custom themes where null has been explicitly set as value for "exifForBlueprintChallenge". Warning: This makes the "Retrieve Blueprint" challenge probably unsolvable unless hints are placed elsewhere.
             try {
               const exifData = await parseExifData(pathToImage)
               const properties = Object.values(exifData.image)
diff --git a/test/server/challengeCountryMappingSpec.ts b/test/server/challengeCountryMappingSpec.ts
index e8ad4c67af2..5bda4dd01b7 100644
--- a/test/server/challengeCountryMappingSpec.ts
+++ b/test/server/challengeCountryMappingSpec.ts
@@ -21,7 +21,7 @@ const loadYamlFile = async (filename: string) => {
 
 describe('challengeCountryMapping', () => {
   let challenges: any
-  let countryMapping: { [key: string]: { code: any } }
+  let countryMapping: Record<string, { code: any }>
   before(async () => {
     challenges = await loadYamlFile(path.resolve('data/static/challenges.yml'))
     countryMapping = (await loadYamlFile(path.resolve('config/fbctf.yml'))).ctf.countryMapping
diff --git a/test/server/easterEggSpec.ts b/test/server/easterEggSpec.ts
index 5961df89df3..60679290ae8 100644
--- a/test/server/easterEggSpec.ts
+++ b/test/server/easterEggSpec.ts
@@ -31,7 +31,7 @@ describe('easterEgg', () => {
   })
 
   it('should solve "easterEggLevelTwoChallenge"', () => {
-    challenges.easterEggLevelTwoChallenge = { solved: false, save: save }
+    challenges.easterEggLevelTwoChallenge = { solved: false, save }
 
     serveEasterEgg()(req, res)
 
diff --git a/test/server/fileServerSpec.ts b/test/server/fileServerSpec.ts
index 33662335f8c..02080d7af07 100644
--- a/test/server/fileServerSpec.ts
+++ b/test/server/fileServerSpec.ts
@@ -69,7 +69,7 @@ describe('fileServer', () => {
   })
 
   it('should solve "directoryListingChallenge" when requesting acquisitions.md', () => {
-    challenges.directoryListingChallenge = { solved: false, save: save }
+    challenges.directoryListingChallenge = { solved: false, save }
     req.params.file = 'acquisitions.md'
 
     servePublicFiles()(req, res, next)
@@ -79,7 +79,7 @@ describe('fileServer', () => {
   })
 
   it('should solve "easterEggLevelOneChallenge" when requesting eastere.gg with Poison Null Byte attack', () => {
-    challenges.easterEggLevelOneChallenge = { solved: false, save: save }
+    challenges.easterEggLevelOneChallenge = { solved: false, save }
     req.params.file = 'eastere.gg%00.md'
 
     servePublicFiles()(req, res, next)
@@ -89,7 +89,7 @@ describe('fileServer', () => {
   })
 
   it('should solve "forgottenDevBackupChallenge" when requesting package.json.bak with Poison Null Byte attack', () => {
-    challenges.forgottenDevBackupChallenge = { solved: false, save: save }
+    challenges.forgottenDevBackupChallenge = { solved: false, save }
     req.params.file = 'package.json.bak%00.md'
 
     servePublicFiles()(req, res, next)
@@ -99,7 +99,7 @@ describe('fileServer', () => {
   })
 
   it('should solve "forgottenBackupChallenge" when requesting coupons_2013.md.bak with Poison Null Byte attack', () => {
-    challenges.forgottenBackupChallenge = { solved: false, save: save }
+    challenges.forgottenBackupChallenge = { solved: false, save }
     req.params.file = 'coupons_2013.md.bak%00.md'
 
     servePublicFiles()(req, res, next)
@@ -109,7 +109,7 @@ describe('fileServer', () => {
   })
 
   it('should solve "misplacedSignatureFileChallenge" when requesting suspicious_errors.yml with Poison Null Byte attack', () => {
-    challenges.misplacedSignatureFileChallenge = { solved: false, save: save }
+    challenges.misplacedSignatureFileChallenge = { solved: false, save }
     req.params.file = 'suspicious_errors.yml%00.md'
 
     servePublicFiles()(req, res, next)
diff --git a/test/server/fileUploadSpec.ts b/test/server/fileUploadSpec.ts
index 944e87f2b71..e967136cfb9 100644
--- a/test/server/fileUploadSpec.ts
+++ b/test/server/fileUploadSpec.ts
@@ -26,7 +26,7 @@ describe('fileUpload', () => {
     const sizes = [0, 1, 100, 1000, 10000, 99999, 100000]
     sizes.forEach(size => {
       it(`${size} bytes`, () => {
-        challenges.uploadSizeChallenge = { solved: false, save: save }
+        challenges.uploadSizeChallenge = { solved: false, save }
         req.file.size = size
 
         checkUploadSize(req, undefined, () => {})
@@ -37,7 +37,7 @@ describe('fileUpload', () => {
   })
 
   it('should solve "uploadSizeChallenge" when file size exceeds 100000 bytes', () => {
-    challenges.uploadSizeChallenge = { solved: false, save: save }
+    challenges.uploadSizeChallenge = { solved: false, save }
     req.file.size = 100001
 
     checkUploadSize(req, undefined, () => {})
@@ -46,7 +46,7 @@ describe('fileUpload', () => {
   })
 
   it('should solve "uploadTypeChallenge" when file type is not PDF', () => {
-    challenges.uploadTypeChallenge = { solved: false, save: save }
+    challenges.uploadTypeChallenge = { solved: false, save }
     req.file.originalname = 'hack.exe'
 
     checkFileType(req, undefined, () => {})
@@ -55,7 +55,7 @@ describe('fileUpload', () => {
   })
 
   it('should not solve "uploadTypeChallenge" when file type is PDF', () => {
-    challenges.uploadTypeChallenge = { solved: false, save: save }
+    challenges.uploadTypeChallenge = { solved: false, save }
     req.file.originalname = 'hack.pdf'
 
     checkFileType(req, undefined, () => {})
diff --git a/test/server/insecuritySpec.ts b/test/server/insecuritySpec.ts
index 9461184d9e1..882a5ef1ed5 100644
--- a/test/server/insecuritySpec.ts
+++ b/test/server/insecuritySpec.ts
@@ -3,8 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
-// eslint-disable-next-line @typescript-eslint/prefer-ts-expect-error
-// @ts-ignore no typescript definitions for z85 :(
+// @ts-expect-error FIXME no typescript definitions for z85 :(
 import z85 from 'z85'
 import chai = require('chai')
 const expect = chai.expect
diff --git a/test/server/premiumRewardSpec.ts b/test/server/premiumRewardSpec.ts
index 5929d482c5e..fbd69856e06 100644
--- a/test/server/premiumRewardSpec.ts
+++ b/test/server/premiumRewardSpec.ts
@@ -31,7 +31,7 @@ describe('premiumReward', () => {
   })
 
   it('should solve "premiumPaywallChallenge"', () => {
-    challenges.premiumPaywallChallenge = { solved: false, save: save }
+    challenges.premiumPaywallChallenge = { solved: false, save }
 
     servePremiumContent()(req, res)
 
diff --git a/test/server/redirectSpec.ts b/test/server/redirectSpec.ts
index 6c3bc5dafeb..f2d05e170e3 100644
--- a/test/server/redirectSpec.ts
+++ b/test/server/redirectSpec.ts
@@ -49,7 +49,7 @@ describe('redirect', () => {
 
   it('redirecting to https://blockchain.info/address/1AbKfgvw9psQ41NbLi8kufDQTezwG8DRZm should solve the "redirectCryptoCurrencyChallenge"', () => {
     req.query.to = 'https://blockchain.info/address/1AbKfgvw9psQ41NbLi8kufDQTezwG8DRZm'
-    challenges.redirectCryptoCurrencyChallenge = { solved: false, save: save }
+    challenges.redirectCryptoCurrencyChallenge = { solved: false, save }
 
     performRedirect()(req, res)
 
@@ -58,7 +58,7 @@ describe('redirect', () => {
 
   it('redirecting to https://explorer.dash.org/address/Xr556RzuwX6hg5EGpkybbv5RanJoZN17kW should solve the "redirectCryptoCurrencyChallenge"', () => {
     req.query.to = 'https://explorer.dash.org/address/Xr556RzuwX6hg5EGpkybbv5RanJoZN17kW'
-    challenges.redirectCryptoCurrencyChallenge = { solved: false, save: save }
+    challenges.redirectCryptoCurrencyChallenge = { solved: false, save }
 
     performRedirect()(req, res)
 
@@ -67,7 +67,7 @@ describe('redirect', () => {
 
   it('redirecting to https://etherscan.io/address/0x0f933ab9fcaaa782d0279c300d73750e1311eae6 should solve the "redirectCryptoCurrencyChallenge"', () => {
     req.query.to = 'https://etherscan.io/address/0x0f933ab9fcaaa782d0279c300d73750e1311eae6'
-    challenges.redirectCryptoCurrencyChallenge = { solved: false, save: save }
+    challenges.redirectCryptoCurrencyChallenge = { solved: false, save }
 
     performRedirect()(req, res)
 
@@ -75,8 +75,8 @@ describe('redirect', () => {
   })
 
   it('tricking the allowlist should solve "redirectChallenge"', () => {
-    req.query.to = 'http://kimminich.de?to=https://github.com/bkimminich/juice-shop'
-    challenges.redirectChallenge = { solved: false, save: save }
+    req.query.to = 'http://kimminich.de?to=https://github.com/juice-shop/juice-shop'
+    challenges.redirectChallenge = { solved: false, save }
 
     performRedirect()(req, res)
 
diff --git a/test/server/verifySpec.ts b/test/server/verifySpec.ts
index 6cd0da69f80..876abc5a37d 100644
--- a/test/server/verifySpec.ts
+++ b/test/server/verifySpec.ts
@@ -40,7 +40,7 @@ describe('verify', () => {
           email: 'test@juice-sh.op'
         }
       })
-      challenges.forgedFeedbackChallenge = { solved: false, save: save }
+      challenges.forgedFeedbackChallenge = { solved: false, save }
     })
 
     it('is not solved when an authenticated user passes his own ID when writing feedback', () => {
@@ -82,7 +82,7 @@ describe('verify', () => {
 
   describe('accessControlChallenges', () => {
     it('"scoreBoardChallenge" is solved when the 1px.png transpixel is requested', () => {
-      challenges.scoreBoardChallenge = { solved: false, save: save }
+      challenges.scoreBoardChallenge = { solved: false, save }
       req.url = 'http://juice-sh.op/public/images/padding/1px.png'
 
       verify.accessControlChallenges()(req, res, next)
@@ -91,7 +91,7 @@ describe('verify', () => {
     })
 
     it('"adminSectionChallenge" is solved when the 19px.png transpixel is requested', () => {
-      challenges.adminSectionChallenge = { solved: false, save: save }
+      challenges.adminSectionChallenge = { solved: false, save }
       req.url = 'http://juice-sh.op/public/images/padding/19px.png'
 
       verify.accessControlChallenges()(req, res, next)
@@ -100,7 +100,7 @@ describe('verify', () => {
     })
 
     it('"tokenSaleChallenge" is solved when the 56px.png transpixel is requested', () => {
-      challenges.tokenSaleChallenge = { solved: false, save: save }
+      challenges.tokenSaleChallenge = { solved: false, save }
       req.url = 'http://juice-sh.op/public/images/padding/56px.png'
 
       verify.accessControlChallenges()(req, res, next)
@@ -109,7 +109,7 @@ describe('verify', () => {
     })
 
     it('"extraLanguageChallenge" is solved when the Klingon translation file is requested', () => {
-      challenges.extraLanguageChallenge = { solved: false, save: save }
+      challenges.extraLanguageChallenge = { solved: false, save }
       req.url = 'http://juice-sh.op/public/i18n/tlh_AA.json'
 
       verify.accessControlChallenges()(req, res, next)
@@ -118,7 +118,7 @@ describe('verify', () => {
     })
 
     it('"retrieveBlueprintChallenge" is solved when the blueprint file is requested', () => {
-      challenges.retrieveBlueprintChallenge = { solved: false, save: save }
+      challenges.retrieveBlueprintChallenge = { solved: false, save }
       cache.retrieveBlueprintChallengeFile = 'test.dxf'
       req.url = 'http://juice-sh.op/public/images/products/test.dxf'
 
@@ -128,7 +128,7 @@ describe('verify', () => {
     })
 
     it('"missingEncodingChallenge" is solved when the crazy cat photo is requested', () => {
-      challenges.missingEncodingChallenge = { solved: false, save: save }
+      challenges.missingEncodingChallenge = { solved: false, save }
       req.url = 'http://juice-sh.op/public/images/uploads/%F0%9F%98%BC-%23zatschi-%23whoneedsfourlegs-1572600969477.jpg'
 
       verify.accessControlChallenges()(req, res, next)
@@ -137,7 +137,7 @@ describe('verify', () => {
     })
 
     it('"accessLogDisclosureChallenge" is solved when any server access log file is requested', () => {
-      challenges.accessLogDisclosureChallenge = { solved: false, save: save }
+      challenges.accessLogDisclosureChallenge = { solved: false, save }
       req.url = 'http://juice-sh.op/support/logs/access.log.2019-01-15'
 
       verify.accessControlChallenges()(req, res, next)
@@ -148,7 +148,7 @@ describe('verify', () => {
 
   describe('"errorHandlingChallenge"', () => {
     beforeEach(() => {
-      challenges.errorHandlingChallenge = { solved: false, save: save }
+      challenges.errorHandlingChallenge = { solved: false, save }
     })
 
     it('is solved when an error occurs on a response with OK 200 status code', () => {
@@ -212,7 +212,7 @@ describe('verify', () => {
       const products = require('../../data/datacache').products
 
       beforeEach(() => {
-        challenges.changeProductChallenge = { solved: false, save: save }
+        challenges.changeProductChallenge = { solved: false, save }
         products.osaft = { reload () { return { then (cb: any) { cb() } } } }
       })
 
@@ -251,8 +251,8 @@ describe('verify', () => {
 
   describe('jwtChallenges', () => {
     beforeEach(() => {
-      challenges.jwtUnsignedChallenge = { solved: false, save: save }
-      challenges.jwtForgedChallenge = { solved: false, save: save }
+      challenges.jwtUnsignedChallenge = { solved: false, save }
+      challenges.jwtForgedChallenge = { solved: false, save }
     })
 
     it('"jwtUnsignedChallenge" is solved when forged unsigned token has email jwtn3d@juice-sh.op in the payload', () => {
diff --git a/tsconfig.json b/tsconfig.json
index af9914654d4..9628e705c86 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -4,7 +4,7 @@
     "outDir": "./build",
     "allowJs": true,
     "module": "commonjs",
-    "target": "es2018",
+    "target": "es2020",
     "moduleResolution": "node",
     "sourceMap": true,
     "strict": true,
@@ -13,7 +13,7 @@
     "forceConsistentCasingInFileNames": true,
     "resolveJsonModule": true,
     "lib": [
-      "es2018",
+      "es2020",
       "dom"
     ]
   },
@@ -28,8 +28,7 @@
     "views/**/*.ts",
     "views/**/*.js",
     "rsn/**/*.ts",
-    "*.ts",
-    "*.js"
+    "*.ts"
   ],
   "exclude": [
     "node_modules",
@@ -38,7 +37,6 @@
     "build",
     "vagrant",
     "data/static/codefixes/**",
-    "**/*.d.ts",
-    ".eslintrc.js"
+    "**/*.d.ts"
   ]
 }