I was able to get my Robux back that I lost from this, but Roblox Support took away my one-time courtesy option as if my account was hacked or compromised – it was neither the two as you know.
Any options to get around this? I’m trying my best to work with the support agent but I can only do so much.
No. There’s no way for the Roblox employee to distinguish between you being legitimately scammed and you prompting yourself with any gamepass and playing it off as if your purchase was hijacked.
I didn’t click on a purchase prompt, I never did. The whole Bug Report is about malicious code being able to show over a UI purchase prompt. I had no clue that there was a purchase prompt under, and this shouldn’t be my responsibility at all.
I really hope for more clarification or instructions on what to do about this. Not just for me, but for the many other users that have also been impacted by this as well.
EDIT: I’d also like to point out that this can happen to literally anyone. This shouldn’t even be considered something along the lines as, “you fell for it” or “you accidently bought it” as no visible purchase popup was shown anywhere on the screen.
Most backdoors hide the PurchasePrompt and align the “continue” button right on the position of the Confirm purchase button. I messed randomly with the PurchasePrompt CoreGUI and managed to get it to purchase instantly without confirmation with it being invisible, sure works better than their scams, but I want to get this patched. Unfortunately I lost the code, but Roblox was very vulnerable to these things from the beginnings. I hope they fix this before this could lead to more important problems.
The coregui didn’t really “crash,” more like the renderer doing it’s job… too well.
When there are too many UIs, it starts to hide some. This even happens with too many UIs in the workspace, hiding other player UIs (which includes coregui) with it.
Still, I intentionally added “visible or not” because I’m really skeptical that he managed to make it activate with no further interaction from the player (such as moving over the button, clicking on it, etc). And again, you just believe you didn’t click on a purchase prompt because you didn’t see it.