Tree of Savior Forum

[Exploit] Infinite quest rewards and unrestricted Class switching

fixed? 20 chars here

I thought I remember reading somewhere that they wanted really bad exploits to be sent to them directly. Either way this is hilarious to be messing around with the last 3 days of closed beta. If people think they won’t wipe all characters at the end of the beta now then I don’t know what will convince them that it happens.

I reported something similar to this near the start of the beta, but all I got was a generic “Thanks for your report!” reply. It wasn’t fixed for the entire beta, might as well cause some chaos with it so they’re forced to fix it.

2 Likes

Those with people custom text involved? I’m not even surprise

Hey guys! I heard there was a party-OH SH-!?

9 Likes

perhaps this was intentional :slight_smile:

I found one too

I wonder if this can be done on quest with stat increase potion?

INCOMING OVER 9 0 0 0 STATS

yep, seen several post of people with lv20 skills and 1k+ base stats

I see… so that’s why I saw two !@#$%^ Lv200 doing the same quest over and over again for that free stat point as a reward in a quest… RIP ToS iCBT :skull:

Oh… well… everything will be wipe on 9th, just dont let this happen on the next cbt/obt
I suggest to closed this thread before MOREEE sh*t happens (oh its too late…)

Well, this bug proved how slow, or how the dev don’t care about the CBT.

bad exploit, shame on the players that use it, hopefully IMC don’t let them into next CBT/OBT

7 Likes

It’s the end of the beta anyways. More people will get tests done now that they’re capped.

3 Likes

Good work finding this.

You may not have heard, but we’re going to have everything wiped in a few days. At this point in time no damage can be done by abusing this. Hiding it accomplishes nothing.

More importantly, making it public today is doing a huge favor to Korean open beta players. If imc is unable to fix it in time, their open beta will be a circus from day one, so nobody’s time will be wasted, there won’t be any concern over whether or not their open beta characters will get wiped, and everyone will be on a level playing field. Imagine how painful it would’ve been if they got a “your characters won’t be wiped” announcement and this bug came out after a month of playing.

It’s clear imc didn’t put much thought into security yet (they apparently don’t have the manpower to assign someone to focus on it) so the right move is to stay in everything-will-be-wiped beta mode and invite the community’s hackers to go wild and share their findings.

10 Likes

This exploit can be use in ktest server right now.

6 Likes

I love how people get mad about others finding out bugs on a beta.

7 Likes

how fitting that this beta ends the way it started.

in confusion and insanity.

14 Likes

There’s this thing called private message, which would let the dev know about the flaw in security without opening the floodgate.

A time they have even less since this whole thing is announced with fanfare and megaphones.

So let’s say this bug is exploited to hell, IMC will have to wipe beta constantly, yeah that’s a huge favor you’re doing making anyone who just want to enjoy the game without exploit lose all progress constantly. (you may not realize, but not everyone will abuse exploits)

Or maybe they’ll delay the beta, good job that’s one huge favor golf clap
Not to mention the non-player side of things, if the game lose reputation because of such abuses, one of the worst case scenario is Nexon demand IMC just cancel the OBT to fix this stuffs.

Or how about this, since this is based on security flaws, even if IMC somehow put a stop-gap solution for THIS bug, other people might find different loophopes to abuse.
So instead of IMC just acknowledging the problem and fix it behind the scene, ensuring all holes are closed in a single solution, now they must come up with something quickly and that usually is never a proper solution.

I’m not saying don’t report this, I’m saying do it in private and don’t spread the info, the more people abusing the exploit the more manpower have to be shifted to deal with it which means less for everything else.

4 Likes

Klaipedia mad crash since this exploit

they are prob going to have to delay OBT several months maybe a year