An interactive museum of vibe-coded software. 19 tiny apps that "work perfectly", each hiding one catastrophic bug: an AI chatbot leaking its API key, a checkout that trusts your price, admin via ?isAdmin=true, SQL injection, XSS, race conditions and more. Exploit them right in your browser, earn fake bug bounties (critical = $10k), unlock ranks, and buy hints if you're stuck. Every exhibit explains what went wrong and how to fix it for real. Nothing real gets hurt.