How Blitzedzz, Hexxa, and Pablo, Ehtra, all participated in project chatbox
The Beginning
It started off by me getting unbanned on roblox after 6 months. roblox had changed alot in those 6 months such as adding age verification, making stricter content rules, and out of all those changes them getting rid of chat was what started this story. the group behind this part of the story is Roblox community hub club (go and attack it if u want the group is pretty much dead)
I was looking for games to exploit that have vulnerabilitys until I found a game genre called Chatboxes (aka roblox games that add back chatbox for all users which raises multiple secruity issues) and I realized that all the chatboxes used about the same system.
Finding exploits
The very first exploit we found was that there was no ratelimiting in the chat meaning we can spam as fast as we wanted to. and after a little bit of testing we perfected it and was able to crash roblox on these devices.
Another exploit we found was in the nametag system that we found the remote event would accept any text we gave it and would advertise it to the nametag. which it also had no filter because they prolly didn't account for people to exploit it lol. they fixed this exploit fast.
Using these vulnerabilitys we were able to get ehtra into admin and me into dev position as dev I planted a backdoor which allowed for REAL damage.
The the owner of Roblox community hub club then quit after a month saying he was done because of hackers (aka ud gang), he made enemys. etc
New group of people
These people would reupload a stolen copy of another chatbox lied about being the "originals" and then tried to "dox" me afterwards.
This story starts in march. when I was off of school and was lowkey bored. so I decided to look for chatbox games. this game was popular and after I botted and spammed their game I manipulated them into giving dev and I added a backdoor into their game.
Then I added it to UD gang serverside (now deceased) and allowed other people to troll in the game using the serverside and then I got "fired" then I realized that they said they don't have studio files so I just deleted their shit and published it and they attempted to then dox me using fake emails, fake ips, and fake names. like a fucking idiot.
Story written on 7/5/26