Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dupe of Crownfall tokens: How a cheat developer steals money from Valve #23603

Open
FINNGT-exe opened this issue Jan 8, 2025 · 3 comments
Open

Comments

@FINNGT-exe
Copy link

Description

Since the release of the first act of Crownfall, there has been a vulnerability in Dota’s protobufs that allows users to exchange any Crownfall tokens for any others, including paid ones from the Crownfall Pathfinder Packs.

The core issue lies in the fact that these tokens hold the same weight in the token exchange system, and a cheat developer is exploiting this by selling a feature that lets users unlock rewards for free without purchasing Crownfall Pathfinder Packs from Valve. As a result, Valve has lost a significant amount of money.

Recently, this process has been automated, and the cheat developer is now selling this functionality to bot users who are mass-claiming rewards using new accounts.

I urge Valve to take action against cheaters and bots exploiting this feature, as it will harm the in-game skin economy. Additionally, new accounts abusing this exploit are earning level 5 Dota trophies for completing all acts, effectively leveling up accounts for boosters and bots that will later ruin games.

Example Match ID (and possibly Timestamp)

No response

Screenshots

photo_2025-01-08_20-12-34
Снимок экрана 2025-01-08 в 20 08 52
Снимок экрана 2025-01-08 в 20 09 59

@Avarise831
Copy link

#23519

@SC20K
Copy link

SC20K commented Jan 9, 2025

cry about it

@discoart
Copy link

discoart commented Jan 9, 2025

Keep. Yourself. Safe.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants