Roblox Experience Artificially Inflates User Followers, Favourites and Group members

Note, this isn’t a bug but rather An Advanced Game Report/Datastore Vulnerability
There is this experience called “Nexus Services” that offers botting services using a small botnet of around 30,000 bot accounts.

Link To The Game
This game misuses datastores and/or webhooks to store purchase information (Of how many bots they bought, not credit cards) of the users that use their service.
The game uses a currency called diamonds to sell followers favourites and group members.
I spent 14 robux on 10 followers and received them all within 5 minutes


Expected Behaviour
All bots, experience owner and the experience get poison banned and add restrictions to datastores and webhooks.

2 Likes

Also don’t ban GeorgeNeutru he has nothing to do with it!

Bug reports is not for reporting experiences… you can read how to submit an abuse report here: https://en.help.roblox.com/hc/en-us/articles/203312410-How-to-Report-Rule-Violations#:~:text=Select%20the%20menu%20button%2C%20located,the%20top%20of%20the%20menu.

1 Like

Its a vunerabillity report mixed with a report!

I am curious as to how you determined the game misuses these resources? Do you have access to the game code? You also mention in your first sentence that this is not a bug report, in the bug reports section? :exploding_head:

1 Like

The game bots followers, it is misusing these resources to bot.

Knowing that the game breaks tos, why would you use it?

I was curious, so I asked a few friends up high. The game and those like it are already being hunted down by roblox, previous versions of the game were shut down as recent as last week. So, a non-bug report may not really be necessary as roblox staff is already aware of this. :saluting_face:

Roblox is also already aware of this group, that doesn’t mean they’ll do anything about it.

Why would Roblox care to moderate a popular botting group if they refused to even moderate condo groups?

You are assuming you know the specifics of two separate situations and groups via a department that does not post or interact here. I don’t know, no one knows. We can’t always assume that nothing happens because the staff will it to not happen. :thinking: