Published: May 6, 2025
12
362
1.5k

🧵13 years ago, a second, much lesser known 2012 "Hack" took place on Roblox, during a week in May. Many people don't know of these May breaches, or as I've dubbed, the "May Madness" event. As a result, it has gone largely undocumented. Names involved accidentally got mixed

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

Before I start this, I'd like to point you all to my April Fools thread! If you want to know the true people behind the April Fools incident and what happened, take a look! There's lots of misinformation about it, and contrary to popular belief, iTrapped, Ellernate, and

I'd also like to say sorry for the wait! I planned on a thread like this for May 1st, but I bit off more than I could chew. The 4/1 thread took me a day but this one took me a few, especially since I found a bunch of stuff right before release. It is worth mentioning trying to

This incident was much less flashy and a lot more hush-hush, and as a result, I'm missing massive context. But with context clues we can understand what happened. Also, this thread is gonna be looooong. BEFORE we talk about the incident itself, it is important that I give some

ELLERNATE Ellernate was game dev and LMaD trader, spending most of his time trading and sniping limited items, and flipping them for profit. It actually was a supposedly a joint account shared between (at least) two people; Preponderance (Travis), and Nate, who was the main

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

VILICUS Vilicus was an account originally created by the user The_Richest/sseggs, (aka, Scott) before being given to the user wwekyle, (also known as RetroTurtle or just Kyle). Scott and Kyle were seemingly "brothers", or at the very least, good friends. Vilicus would often

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

TWISTER92 and JOHNATHAN777 (Jayden) Twister and Jayden were best friends in the early 2010s, and were scripting buddies. Around 2009-2010 they would film videos and machinimas inspired by JJ5x5, and would also create the account 'Jwister' to collaborate on games. This account

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

SANS SITES SANS sites were forums with 2D avatars and games. They were infamous for being Roblox-inspired clones. They were a popular trend back then. Some famous examples were world2build/worldblocky (ran by Bannana97), thepheed (ran by Pheedy), & TheGamerLand. Twister and

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

With these passion-driven websites came a small audience who were all friends with each other. Many forumers/traders like Ellernate and Vilicus would hang out on these sites, sometimes even moderating them or helping code. Every time a new website project would come up,

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

iTrapped iTrapped, also known as Isaac Hymer, was a Roblox forumer, trader, and Roblox clansman. Isaac became friends with Jayden and Twister, and the others, and would help host the "Jwist" website domain. Inspired by Shedletsky, and given his love of math, he would also

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

Isaac, as were a lot of others here, was a kid. He often had an odd affinity for hackers and the "Anonymous". Jwist would stay open until an incident that involved Isaac hiring a new moderator on Jwist, known as Shootingraw1 (aka Trent), who was a famous Roblox clan user. This

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

Feuds and fights between competing SANS sites was common, sometimes leading to raids, DDoSing, or hacking incidents on other sites. Weaponizing web dev skills might've been pretty common. Around early 2012, Isaac would begin gaining a reputation for scamming other people, as

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

The last member I'll talk about here was Caleb244. Caleb, also known as Gliza, and whos actual name was Nick, was a common clans user and trader on Roblox. However, he was a very devious player. He exploited, scammed people, threatened people, created RATs and Viruses,

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

Caleb was a huge bluffer, constantly lying. He has lied about being part of the 4/1/12 hacks He has lied about having admin panel access in 2014 He has lied about having Roblox stock and making PSAs about destroying Roblox. He was just a menace.

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

Caleb also was a crossdresser. He once infamously befriended the well known developer KirbyCaden, pretended to date him, tricked Kirby into giving him his email for 'pics', then stole all of his accounts, including his items and games (which he would later reupload) All because

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

Caleb was pretty good friends with an old clan user iBurning (Alexa) and sometimes shared accounts with her, such as NovaQ, and even Kirby's account. It also seems like they were a thing back then. (At least for a short time before Caleb had a falling out and doxxed her, which

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

So that's a lot to process, a lot of people to think about. All you need to know is these guys all hung out on sites they built together, as well as the LMaD forums. Lots of them had their own friends and motives, which led to a lot of what they did. Basically; Ellernate,

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

ACTUALLY TALKING ABOUT THE INCIDENT! Everything started around April 29th, 2012. Isaac and Ellernate were bored and attempting to find faults in the Roblox website, one such case was in the form of creating fake groups using a Unicode character that appeared invisible. With

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

While Ellernate and iTrapped were discussing what else they could find, they began talking about Bannana97's Roblox Rewards Phishing site. While discussing if it was possible to edit browser cookies, Ellernate ended up finding an exploit that let him access the admin panel.

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

Courtesy of Johnathan777 who explains how the bug worked perfectly: "Basically we had a google extension that can show you cookie data for all saved cookies on each site. You could go to the http://test.roblox.com site and sign up with an admin/mod account of Roblox who

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

It's unknown what mod account he breached into, but after the discovery, Ellernate had access to the admin panel. He was able to do anything. Except instead of mess around like the 4/1/12 people did, he used the admin panel in secret. Around April 30th, it's possible that

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

It appears on this day that Vilicus was then told about the exploit. Vilicus then began breaching some accounts. The most known of is well known user Pieperson50's alternate account, McKramer. Vilicus logged in, and began selling all the items on McKramer to his alt account,

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

Pieperson50 around this time was heavily disliked by some LMaD users, because Pie had previously gotten cancer, and as a result, earned a Domino Crown. This made a lot of people salty on the forums; it's also possible people disliked him for other reasons. Some people said he

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

Vilicus was draining the McKramer account by selling all of its items really cheap and purchasing it on TinyTalks. This was because the trading feature hadn't been released yet. Merely, on his alt Elidure, noticed this behavior and sniped one of the items mid-transfer, a

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

Around 10:30pm EST on April 30th, Ellernate then shared the method with his other friend, Twister92. Twister tried it, using the newly hired customer service account iltaLumi, and successfully managed to log into it. After this, Twister began to record footage of him trying

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

From testimonies of the video, it has been described that they had access to everything. This included logins, item creation, and site banners, but apparently Twister and Nate didn't want to post site banners in fear of being found out. It has also been explained that the video

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

The only other thing Twister may have done was take the 2006 account "Twister" as he has his email attached to it, but that's probably it. Twister would later go on to report the bug to Roblox staff, and seemingly left the exploit alone after that, as far as we know.

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

Later that night, around midnight May 1st, Ellernate then decided to use the admin panel himself. He was originally going to report the bug to Roblox staff, but before he did, he decided to use it """for good""" Ellernate wanted to punish someone he deemed a scammer, known as

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

It's also possible the other person(s) who shared Ellernate may have had a play in this, but I can't confirm that. I say this because of the screenshot attached, and, because DrRoblo and DrRobloxian were selling all their items (while hacked) on the forums for hours on end after

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

After Ellernate told Vilicus and Twister, the method then was told to Johnathan777 (Jayden) by someone (maybe Twister?). After midnight, similarly to what Twister did, Jayden used the admin panel, and took the 2006 account "Jayden" and began posting on the forums with it later.

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

On May 1st, Jayden asked iTrapped what two items he wanted on Roblox. Isaac told him, then Jayden spawned in a Darkheart and a Dominus Frigidus for him via the AP. Most people immediately thought this was suspicious, as iTrapped's items did not have any serial IDs attached to

Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)
Image in tweet by Dynabroth - Roblox Trivia (VoxelizedBits)

Share this thread

Read on Twitter

View original thread

Navigate thread

1/31