Hacking/Stealing assets

Some “Devs” steal assets from my game and if they do, I get this notif on my discord. It includes their username and ID then I report their accounts.


I get at least 2 notifs a month and it kinda annoying that someone is stealing my assets. I don’t mind if they put it on their games but at least inform me or add credits. In fact, I’ll even visit their games.

Just wondering how you guys effectively deal with this kind of stuff. I know about DMCA but never filed(lmao)

2 Likes

I would recommend just having them do stuff of the studio if possible & getting close w devs yk so you can trust them and then you won’t really find any ppl like that or have to deal with that. :slight_smile:

Can you please teach me how you do the discord thing how does it work

I would assume a discord bot with Python for API integration from Roblox! But that is just my guess as a programmer so probably Discordpy & Python :slight_smile:

How did you find out who is stealing your assets?

1 Like

Nothing special. Its just a discord webhook. and httpservice. Basically when the asset with a script I hid or the place was run on a studio. Place Ids are compared, if not match. it sends me the notif:


local RS = game:GetService("ReplicatedStorage")
local HTTPS = game:GetService("HttpService")
local Remotes = RS:WaitForChild("Remotes")
local UpdateEvent = Remotes:WaitForChild("UpdateEvent")

local WEBHOOK_URL = "YOUR WEBHOOK URL HERE" 

UpdateEvent.OnServerEvent:Connect(function(player, placeName, placeId)
	-- fomat message
	local message = string.format(
		"Player: %s\nUser ID: %d\nPlace Name: %s\nPlace ID: %s",
		player.Name,
		player.UserId,
		placeName or "Unknown",
		tostring(placeId) or "Unknown"
	)

	local data = {
		["content"] = message
	}

	-- Encode to JSON
	local jsonData = HTTPS:JSONEncode(data)

	-- Send to webhook
	local success, response = pcall(function()
		return HTTPS:PostAsync(WEBHOOK_URL, jsonData, Enum.HttpContentType.ApplicationJson)
	end)

	if success then
		print("Successfully sent data to Discord webhook")
	else
		warn("Failed to send data to Discord webhook:", response)
	end
end)

That’s cool and all, but if they find this, they could totally spam it and potentially get your Discord account moderated.

how r they finding ts

If they disable Http Requests, the script announces it’s location by printing to the output. Not very wise, in my opinion.

and how do they disable http requests cuh

also its*

they dont have access to your game, and if they do, you have bigger problems than a webhook :wilted_flower:

¿?

I believe OP is having their assets stolen, not the rights to their game.

AKA people who are in OP’s Team Create sessions copy/paste OP’s models and scripts, and they end up in other people’s games, and “Allow HTTP Requests” is a setting turned off by default on new games

well…

you can delete webhooks if you know the url.
infact my friend did htat with the official forsaken one, it got leaked LOLZ
i hate forsaken anyways
im not snitching btw, its auraful to be the one to do that anyways

its impossible to have people that are working with you in TC not steal your game. at least, its impossible to prevent that

also its not possible to detect when someone saves your game

read the context

okay? that’s a lot of irrelevant information in this case.

there’s no need to go lecturing people on the risk of Team Create collaborators stealing your assets, especially on a post specifically about how OP is repeatedly being notified that people are doing exactly that.

You must be very confused with

also its not possible to detect when someone saves your game

since, at least for me, every time the game is saved in studio, a message saying “Game saved” or whatever appears in the console in purple text. Rather, this topic is about people copying individual assets (models/scripts) and pasting them in different games, not OP’s game. In which case, OP is detecting when that happens due to the webhook.

Perchance

it is impossible to detect when a team member copies and pastes something from the game.

the post is very clearly not about TC

sorry, it’s not possible to detect when someone ELSE saves your game

It doesn’t matter if it’s impossible to detect it at that stage because OP is alerted of their assets being created in an unknown place during runtime

Some “Devs” steal assets from my game

How are you not interpreting this as Team Create?

Dev is not limited to “people I am working with”, it could literally be any developer

?? Wtf does this even mean kek

you don’t know what runtime is?

Whether in studio or in the roblox player, when the game instance is created, the server scripts begin running. Inside OP’s assets is a script that checks the PlaceId of the game. If the PlaceId is different than the OP’s, it sends an HTTP request to notify them.

And how are you supposing that complete strangers, not involved with OP in any way, are accessing OP’s games?