Spamming UGC animations can crash entire servers

I’ve experienced exploiters lagging games / crashing servers and everyone in it within the past 24 hours. This seems to be a roblox exploit as this is happening in other games such as Mic Up and Natural disaster survival.

It is imperative to note that this works in R6/R15 and is almost impossible to prevent.

Please refer to this thread for more details if necessary: https://devforum.roblox.com/t/server-lag-exploit/4197979

Attached is the animation track that causes the server lag / crash:

132120738166011.rbxm (42.1 KB)

Please also ban the group that seemed to have uploaded it http://roblox.com/library/132120738166011

Please fix ASAP

A private message is associated with this bug report

37 Likes

Sorry about the small bump, but roblox’s inaction against this is severely disappointing

As you can see from these analytics from my game, exploiters are constantly taking down servers. Please fix immediately.
image

8 Likes

This is the animation track

132120738166011.rbxm (42.1 KB)

Please also ban the group that seemed to have uploaded it http://roblox.com/library/132120738166011

6 Likes

Happening in a few games that I work on as well. Pretty serious vulnerability here. Attempted patches using Animator.AnimationPlayed and Humanoid:GetPlayingAnimationTracks() are not quick enough to prevent servers from crashing once the exploit’s code has been run. The AnimationId that OP provided (132120738166011) is the same one that has been reported to me as being the culprit, as well.

Hoping for a patch soon!

6 Likes

BUMP. Also running into a similar issue. I did a little looking into it on the Server and the animation ID is this for some reason?

6 Likes

Same thing here according to my animation logs, they seem to be using a GUID to prevent immediate detections.

3 Likes

Seems they had 257 playing animation tracks too somehow just FYI for any roblox staff.

3 Likes

This is occurring across multiple games as well. It is so severe it freezes and crashes the entire server.


.

7 Likes

Hey @OnceCrowned, Thanks for the report! We are aware of the issue with UGC animations and are actively looking into it.

17 Likes

Can confirm this is happening to us as well.

3 Likes

You can add a temp patch by reading on the server if they have animations like 132120738166011 playing or if they have more than 255 animations playing at once. Now of course they can keep re-uploading animations. But this should stop some of them until Roblox does something

1 Like

Dev for Kotojo here, I threw a quick and dirty script together to patch for until ROBLOX fixes it. (Just shove this in a Script on server)

EDIT: forgot to add the CharacterAdded part so it works on respawns

local Players = game:GetService("Players")
local AnimationClipProvider = game:GetService("AnimationClipProvider")

local function handleAnimation(player : Player, animationTrack : AnimationTrack)
	local animationClip = AnimationClipProvider:GetAnimationClipAsync(animationTrack.Animation.AnimationId)
	local instanceAmount = 0

	for _, badInstance in animationClip:GetChildren() do
		if badInstance:IsA("MarkerCurve") then
			instanceAmount += 1
		end
	end

	if instanceAmount >= 50 then
		player:Kick("Crashing")
	end
end

local function handleCharacter(player : Player, character : Model)
	local Humanoid = character:WaitForChild("Humanoid", 10)
	local Animator = Humanoid and Humanoid:WaitForChild("Animator", 10)

	if not Animator then
		player:LoadCharacterAsync()
		return
	end
	
	Animator.AnimationPlayed:Connect(function(animationTrack : AnimationTrack)
		handleAnimation(player, animationTrack)
	end)
end

local function handlePlayer(player : Player)
	if player.Character then
		handleCharacter(player, player.Character)
	end

	player.CharacterAdded:Connect(function(character : Model)
		handleCharacter(player, character)
	end)
end

Players.PlayerAdded:Connect(handlePlayer)
for _, player in Players:GetPlayers() do
	handlePlayer(player)
end
10 Likes

Sorry to reply but if’s possible plz forward this emote to someone within moderation. This is the emote that is linked to the malicious keyframe I provided earlier. That would mitigate the problem while engineers fix the root problem:

3 Likes

Most of Roblox’s engineers are on break and will probably not respond until January 2th or so.

1 Like

exploiters crashed alot of servers in my game. this NEEDS to be fixed ASAP.

1 Like

This is still occurring and causing a lot of servers to crash. The most likely have multiple animations being used, basically not much success in just deleting the animations. Roblox engineers need to actually patch this.

BUMP, I am also experiencing this issue in my experience.

Thanks for the report. Our engineering team has released a partial fix that should help resolve this issue.

We will continue monitoring the situation and releasing additional fixes over the next few days.

5 Likes

Every hangout game is being major lagged by this, its still going on even in new servers.

A partial fix has been released so far. Our engineering team is actively working on additional fixes at the moment.

We’ll post another update once those have been fully rolled out.

2 Likes