Duplicate Usernames

Bug Reports Website Bugs
#1

Exploit found by one of our new members, @NicholasDev, who authorized me to post on his behalf.

Just as the title says, new accounts are being created with duplicate name. Here are some examples:
https://www.roblox.com/users/191133565/profile
https://www.roblox.com/users/191132504/profile
https://www.roblox.com/users/190990774/profile

UserIds are not the same, so if your game is using UserId to check if you’re in the game, good job :thumbsup:
Otherwise, your game may be vulnerable, so watch out!

No they cannot get into your real account from this, according to Nicholas

Lets hope this gets fixed soon because I don’t want anyone impersonating me.

EDIT:
For any admins seeing this thread, contact @NicholasDev about how the exploit works.

3 Likes
Cloning ROBLOX account usernames
Cloning ROBLOX account usernames
#2

We’re aware of how it works, and names aren’t quite duplicated either so games checking the name aren’t vulnerable. Fix coming!

7 Likes
#3

Great thanks :slight_smile:

#4

Great :smile:

Can’t wait!

#5

Will these usernames be removed/changed or can they get away with that? It’d be quite the commotion with impersonators.

#6

There’s a space at the end of the username. Interesting.

edit: uses %0A character rather than space

1 Like
#7

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.