This article isn’t going to be very long, but I thought it might be interesting to share why you have to be very careful while developing anti-exploits, and despite the testing you might put it under, things can still go wrong. Always think about everything, and then think about it…

Before I start, I just want to let everyone know that I’ve sent the code used and videos of this working to the relevant people, who have, in turn, got in contact with the developers of the Halloween event. I did this in November, 2 months ago, and so I feel that enough time has passed for it to be acceptable for me to share these vulnerabilities, how I found them, and how to avoid them in your own games.

This article would be on the roblox forums, but since they have extremely over the top moderation (although the presence of moderation is understandable on a majority under 15 site); and there is no possible way of adding images without using roblox+ or providing roblox decal links to each one, therefore I am here. — It all started in late February this year, I was snooping around the roblox website, replying to forum posts, occasionally checking twitter and looking things up on the wiki that interested me. Then I thought to myself; “I wonder how the advert system works…”. Of course, we all know that…