On April 1, 2012, a major incident on Roblox caused many elements of the site to be changed, including banners, catalog items, and user accounts. Users affected by the incident reported that their accounts could no longer be accessed until after the incident. David Baszucki, the founder of Roblox, responded after the incident saying that the site was restored, and former administrator Gordonrox24 responded 5 years after the incident saying, "It was nothing... You won't see it happen again". This incident was the the first and only time a person/group hacked the main ROBLOX interface.
Timeline of Events
The incident first occured when ROBLOX user Ellernate, along with users iTrapped and Caleb244 accessed the Admin Panel sometime during April 2012. One of the users created an account on SiteTest3 under a Roblox Administrator's Username.
A month after, around early May, One of the three users used the Admin Panel to duplicate the Domino Crown numerous amounts of time. Due to the duplication, when using R+, there were almost twice the amount of Domino Crowns, this was on par to how weak the security system for ROBLOX was at the time.
On April 2, 2012, Ellernate was terminated due to gaining access to the Admin Panel. Additionally he was also terminated due to being involved with the incident and for compromising RobloTim, a ROBLOX staff member at the time. Everyone else that accessed the panel were also caught and deleted. Another account, Builderkid, was also deleted after it was revealed thatit was Ellernates account. When viewing Builderkids posts, it shows Ellernate talking about the admin panel. Ellernate eventually came back on an alternate account around June 1, 2012 known as "EllernateAlt." The account stated that he recorded a 30 minute long video about the admin panel as seen here. He also claimed his account was IP-Banned. Ellernate eventually helped run an external competitive site known as Brickplanet with user iTrapped.
New Catalog Items
During the event, multiple new Roblox assets were released. A new face was released into the catalog with the title c: on the official Roblox Catalog for 100 Robux. The only account to purchase it was Stickmasterluke, whose account was assumed to be compromised. The face's image asset can be retrieved from the Roblox website. Another c: face was made, which can also be retrieved on the website. A third face called "hai guize derp" was also released and can be accessed via the Roblox website. A year's worth of hats was released for small prices ranging from 10 to 100 Robux. As well as this, three off sale hats were put on sale for 1 ticket. These were Crazy Skull, Steampunk Elephant, and Toxic Nemisis. After the admins regained control of the website, these three items were taken off sale again.
Banners were added to the top of the site and frequently changed colors and displayed questionable content. Examples include (but were not limited to):
- "thank you minish for messing up the economy. nub.",
- "always share your passwords with strangers, kids!"
- "Haha these are so funny let's go spam the forums about them :D"
- "Remember kids tell your parents to vote Ron Paul"
- "Yo gonna give a shout out to the homies in dah hood"
- "OMG like srsly Becky?","JOIN BUILDERS CLUB! ITS FREEEEEEEE!!!!"
- "Yo RT stop yo ranting homies"
- "Playing Roblox is better then going outside!"
- "pink. Its my new obsession,pink. it not even aquestion."
- "I'm the annoying orange banner. AHHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHHAAHHAHAHAHAHAHAHAH. "
- "NO TOMATO IS ALWAYS BEST SILLY ORANGE"
- "minish is a stupid noob. nah not rly."
- "Do a Barrell Roll"
- "jaredvaldez4 best builder on roblox kthxbai"
- "minish is climbin in yo windows. snatchin yo people up."
- “these aren’t the droids you're looking for!”
- "Go out and buy some peanut butter yo"
- "You put the peanut butter in the potato and stir it all up"
- "WHO IS IT? 1x1x1x1,Dignity,Minish,Jared,The Admins? The world may never know :o"
- "WII GONNA FIN WII GONNA FIN U"
- "You lik these headers? Tell me how you’ve always been such a fan"
- "APRIL FEWLS”
- "SKRILLEZ BANGARANG WUBWUBWUBWUBWUBWUBWUB"
- "Proscribe stop posting your gonna get proscribed BROO"
- "Bro chill we get it"
- "Yo dog ya'll need to chill it"
Multiple users were granted large amounts of Robux throughout the event. Although most of these accounts were apparently rolled back, it is speculated that some users managed to evade losing the entirety of their newfound wealth.
Misteroe managed to evade a ban and successfully trade away and launder an estimated 100,000 to 350,000 Robux. There is also some speculation that Misteroe was directly involved with the event. This claim is supported by the fact that Misteroe would later go on to be responsible for the firing of 3 Roblox administrators, most notably JacksSmirkingRevenge.
Similar to Misteroe, EXFamous successfully got away with owning Dominus Frigidus #16 and #59 Ghostwalker, two items combined worth around 8 million Robux. However, in 2016 he was terminated for asking how the subforum Clans and Guilds was doing.
Gaara51, a LMaDer was also one of the players that got away with getting free items from the incident. This included Dominus Empyreus. He was later hacked on an unknown date which caused him to lose the limiteds. Possibly due to this, he has quit Roblox since.
Rippinz was also one of the few players that got away with obtaining free items from the April Fools Incident. Some limiteds seen from the April Fools event in Rippinz's inventory includes two copies of the Scary Hood.
It is confirmed that 1dev2s account was one of the accounts that were also compromised. Many items were put into his inventory during the event, and his avatar was changed multiple times. His account was subsequently terminated by a moderator. This ban was never revoked, but 1dev2 was possibly allowed temporary access into his account after the event, which during that time, he uncopylocked his game "Welcome to the Town of Robloxia". He is currently active on his other account, 1dev3.
Merely was banned as a result of his discussion with Minish. Several users claimed Merely gave them false bans and was responsible for the attack, but these claims have been proven false. After the website went back up, Merely was unbanned.
Qman1245 was a rich trader. During these events his account was compromised. The account gained the Dominus Empyreus, Domino Crown, Ban Hammer and the Admin Badge. This account was later terminated.
Stickmasterluke was the only user to ever own the C: face, but his account was otherwise unaffected.
After all this activity occurred, Roblox staff brought the site offline and reported that they were attempting to patch up the currency system. The website was brought back online during the late evening of April 1 at around 8 PM PDT. The Trade Currency system and Roblox Catalog were offline until the following evening.
A blog post was later made about the incident.