9F60

CVC3 (Track1) is the track 1 counterpart to the CVC3 (Track2) already covered in this dictionary (9F61): the same dynamic, per-transaction verification value, computed for Kernel 2's mag-stripe-mode contactless flow, but folded into the track 1 discretionary data instead of track 2's. Related to 9F6A (which the card also uses in the same mag-stripe flow) alongside 9F61, it exists because some host systems built for legacy magnetic-stripe processing read both tracks rather than just one, and a mag-stripe-mode contactless transaction needs to give each of those host paths the dynamic protection it expects, in the exact data location each one already knows how to parse. Because it mirrors 9F61's role so closely, the two are best understood as a pair rather than as independent fields: a terminal or host validating one but not the other has left half of the intended replay protection unchecked, which is a much easier gap to miss than a single obviously-missing field would be. See EMV Contactless Book C-2.