NetworkOwnership Exploit Patch (Outdated)

Resources Community Resources
#14

Yes, I just checked this, you’re right actually - my apologies there. If anything then, the above is a method to perhaps bypass the check then.

1 Like
#15

So if I use this script to ban exploiters, would there be false bans for players that did nothing?

1 Like
#16

I have to inform you that this patch has recently been rendered useless, as exploiters have found a way around the detection, somehow.

2 Likes
#17

It seems that exploits now have a bypass for this method; using this will only affect their outdated scripts.

1 Like
#18

Thank you for releasing this patch, this is a wonderful method to get rid of all the annoying exploiters.

Nowadays, exploits like Synapse offer custom functions such as SetSimRadius which doesn’t send a Changed packet but this is still a wonderful patch.

1 Like
#19

This was released on v3rmillion as well.

I can confirm this patch is real and does actually work for those outdated scripts but I’m pretty sure there’s a new workaround.

#20

I’ve seen the new workaround, in a nutshell they fire a event called SimulationRadiusChanged, which doesn’t get triggered by the server so I’ll be looking for an alternative way, and if I cant then there will have to be a dedicated script to check the controlled parts

1 Like
#21

This won’t help. I’m pretty sure exploiters already found method how to bypass it.

#22

They have, but the people who make the scripts haven’t. The real exploit creators have their own functions to set the simulation radius; also, Roblox made SimulationRadius a hidden property it seems. But theres also a sethiddenproperty function so not very effective, not that I think it was meant to stop SimulationRadius exploitation.

#23

Wrong method, easily bypassable, and yet you cannot read changes from a localscript.

#24

What? Can you elaborate?

This method isn’t bypassable - it will not stop, however, people who exploit stuff they already have network ownership of

#25

It is bypassable; see above replies and not just mine.

I don’t know what he’s talking about though. SimulationRadius is meant to replicate. It’s part of physics.

#26

As long as Roblox doesn’t allow us reading out SimulationRadius from players (which isn’t going to happen since they just marked it as hidden), you shouldn’t use automatic part ownership system. Use SetNetworkOwner instead. When I find the motivation I would make a replacement for the automatic system in the future which isn’t exploitable.

#27

Values aren’t replicated in any way, exploits have a trick behind their sleeve to set the value and yet there are better ways to fix it.

#28

They are replicated, otherwise this server script would not work.

The way Network Ownership works is best detailed on the DevHub: Network Ownership
However, to summarise:

  • Roblox Physics is generally not handled by the server, but by individual clients
  • The server decides who is the best player to give that network ownership to, based on range
  • The SimulationRadius property tells the server how close players should be before they are considered as a Network Owner for a physics instance
  • Since this value is used by the server as-is, it can’t be “bypassed” without also negating the point of this exploit.

Exploiters can still screw with Network Ownership - this won’t patch that. However it will patch them arbitrarily extending their network ownership reach to wayy beyond usual.

#29

As @H4XERZZZZ already pointed out, certain exploits fully bypass this patch by apparently firing the SimulationRadiusChanged event with a custom function, which does not trigger the Changed event but does set the property to an arbitrary value. I can confirm that it works and that it does bypass the patch.
Hence why I said in my last reply that with no direct access to the property, the automatic ownership system is unsafe and should be avoided.

#30

Has anyone found a patch to the workaround yet?

#31

The replies on this thread have been a little unclear, does that patch work effectively or not?
I’ve been experiencing this in my game and we had to shut down because of it right after we hit 1 million visits.

Is there any way to counter it?

#32

You can just set all unanchored parts, network owner as server, so exploiters will be unable to control them

local Part = workspace.Part
Part:SetNetworkOwner(nil) -- will set owner as server since there no player instance as argument
1 Like
#33

Simplest solution would be imo to then make sure that networkownership of things like vehicles are only given when the player is seated and that you go thru some form of serverside whitelisting of the driver to make sure they are a legit player before giving ownership if this is in a game or group type thing where vehicles are restricted to specfic groups or people. If no one is seated then the SetNetworkOwner should be nil to set access to server only and not Automatic. You can check randomly who is the current Network Owner with GetNetworkOwner() and then again if no one is seated in driver seat or the NetworkOwner shown isnt the driver seated you can kick or do whatever is needed to rectify situation. Imo should be a simple fix for most games in my eyes but who am I to say for sure lol.

1 Like