FIMUS

🚨 CROSSWOODS IS BACK… There is a NEW method that can FORCE your account to send messages → leading to chat suspensions.🚫 • Malicious games can abuse SendAsync() • You say things you NEVER typed • Moderation hits YOU • Appeals may get auto-rejected This has happened before. ⚠️ Temporary fix: disable chat in settings This is getting serious. @Roblox @SharkBloxYT @KreekCraft @Roblox_RTC

@c0re0s What about the victims who got banned due to this exploit?

@FIMUSFIM we're looking into the reported vulnerability. To keep things safe, we're temporarily restricting the upload API while we dig into the root cause. We'll share a fuller update on the dev forum soon.

⚠️ Roblox players: this can happen to YOU. On April 18, my account was permanently banned. No warning. No reason. Years of work, rare limiteds, and my income - gone instantly. All I did was join a popular game. My screen spammed “allow captures.” I left. Came back - terminated. There’s an exploit where developers can abuse CaptureService to upload content under YOUR name and get you banned - they target players with valuable items. Appeal? Denied by a bot. New violation? For a video/images I NEVER uploaded. No human ever checked. If you own limiteds, you are NOT safe. @Roblox - one real review is all I’m asking. @SharkBloxYT @KreekCraft @Roblox_RTC @LukasThePickle

@xxx1169670 💀

someone got banned on roblox because of a bench😭😭😭 #roblox

Next, Roblox chat - the pipeline: client, filtering, sending, logging, and moderation. If a game generates a string, manipulates input through the UI, or passes it through a RemoteEvent, the system treats it as if the user typed the text themselves. It's better to move on to Capture right away, since this will take too long. Capture itself is client-side framebuffer extraction, UI render capture. But in combination, it can be used as a data generator (images), a payload source for the upload API. So the scheme is this: it's not Capture itself that bans you, but the formation of content that is created against your will. The system doesn't distinguish this because Roblox uses an event-driven architecture model, violation classification with event-level logging, and automated moderation.

Inside Roblox, the entire model is built on client-server interaction with partial trust in the client. So the client itself is an active participant that initiates API calls. It sends events, triggers services, formats data, etc. If a call comes from your client, it gets logged as yours. So Crosswood itself isn't a glitch - it's the use of an entire chain consisting of: RemoteEvents/RemoteFunctions, the chat pipeline, the asset pipeline, and sometimes auxiliary services like Capture. In short, if you go step by step, it works something like this: an API call, then the server, then logging, and all of this passes through moderation. And this is the weakness - the server often accepts unsafe data. This doesn't break the API itself it makes calls in such a way that they look like user-initiated, but the player doesn't actually control them. This is when the system performs actions on behalf of the user, who cannot influence them.

🚨 CROSSWOODS IS BACK… There is a NEW method that can FORCE your account to send messages → leading to chat suspensions.🚫 • Malicious games can abuse SendAsync() • You say things you NEVER typed • Moderation hits YOU • Appeals may get auto-rejected This has happened before. ⚠️ Temporary fix: disable chat in settings This is getting serious. @Roblox @SharkBloxYT @KreekCraft @Roblox_RTC

🚨These people are victims (austn759), (hasanedzone, UniverseUGC, CleaverGroup, HasanBroker - same guy), and THEY NEED HELP. Moderation always gives different reasons for the ban, and it's only a bot that responds. They need a REAL HUMAN They've lost MILLIONS - they've lost their entire INCOME. Just like that.

People are saying disabling chat might stop it for now… not a real fix, but worth doing until Roblox addresses it.

This is the scary part - you don’t even have to type anything. A malicious game could force messages through your account and get YOU moderated.

@xxx1169670 I will make a post about it soon.

#roblox ‼️ATTENTION ALL RBLX PLAYERS‼️ please do not purchase any robux or anything until they fix this massive banwave. people are getting banned for being linked to random accounts they dont even know. unfortunately i was a victim of this. i am a college student so i share ips with multiple people. i got banned because some random account was linked to mine. how is that far?? ive seen many people get banned because they share ips/wifi with their siblings. so if one sibling gets banned u get banned aswell. how is this fair?? please fix enforcement bans! roblox i am NOT an alt account for anyone. ive had this account since 2017 and logged on almost everyday?? this is unfair to me and many people PLEASE STAY SAFE GUYS. @Roblox @Roblox_RTC @KreekCraft

@xxx1169670 i hope so

@FIMUSFIM does that mean they gonna fix enforcement bans too???

📌ADMIN UPDATE:

@Habis8151 no unban, still nothing🫡 im making post about another big exploit

@FIMUSFIM any updates? did they unban?

@oeeer_ I have no words, I'm really sorry, but don't give up! I believe you will get your account back

@FIMUSFIM I'm so tired of roblox support, I was a ugc creator with a million+ sales and got my account hacked + banned and roblox is taking a while to respond. It feels incredibly unfair and I'm trying not to lose hope. I hope support gets back to you & you get your account back!!

@x_lncy Unfortunately, these posts have been on the dev forum for over a month and no one has received any support or response🫡 but it will still help to find the victims

@FIMUSFIM for anyone who has an issue like this happen go into dev forum and go into site bugs, roblox actually checks those

@DSCreationsYT Thank you! First of all, I want Roblox to fix this exploit and there will be no more victims

@FIMUSFIM I really hope you get proper support and get this sorted out

@BLOX @divstudio_ They're not very interested in banning regular people. It will be hard to get visual proof. They did this to me because of my horns. Also, in one of my tweets, I included a link to posts on the Dev Forum - there is visual evidence there as well, just not video

@divstudio_ @FIMUSFIM it's true i'm only trying to find the specific place so that people can make videos on alt accounts showing examples of what happened if you dont have visual proof its hard to get peoples attention is all, im not saying that fimus isn't telling the truth or anything

I'm sorry, I can't say exactly - I only joined once

@FIMUSFIM Do you know if the game actually had a decent amount of players? There's one with 500+ players, one with 4, and one with 0.

As far as I can tell, this place keeps getting banned, since the worst people are there - people who say and do the most horrible things.

@FIMUSFIM @MeloettaMr May I ask what "so crying rn" is? I see it has 500+ in it right now. Is it the real game?

@tyrantuladied i have to make another post about it too.

@FIMUSFIM i got wrongfully permabanned by the EF banwave for "having an alt account" so youre not the only one hit with these dogshit AI bots

It was called 'so crying rn', but there are a lot of fake versions. I won't be able to tell which place it really was because I only went there one time

@FIMUSFIM So you don't have a link? If there's a bunch of fake versions they're not going to know which ones to join