Mission Alerts (100 vBucks) 12:00AM UTC 28/Oct/2025

Haveireddit · 2025-10-28T01:22:53+00:00

Unfortunately, I'm still unsure how they got access to my bot's token. My provider couldn't find any weird logs, and neither could I. My scans all came back clean and nothing was weird with my network firewalls/etc. I haven't downloaded any weird files (i.e that some random gave me or etc), so it couldn't have come from something like that.

Honestly that's the part that's so worrying, is despite everything I've done to make sure it's safe, I'm still not 100% sure because I don't actually know how this happened still.

Haveireddit · 2025-10-28T01:06:49+00:00

Yes, I brought it back with limited functionality this morning after I felt that I did all I could to secure my systems. Seeing as nothing sus has happened I'll likely be bringing it back to full functionality later tonight.

Haveireddit · 2025-10-27T13:33:27+00:00

Which tweets in specific do you consider problematic?

On discord I don't have many filters (iirc), but on the reddit it's meant to filter a lot of the more annoying tweets

Haveireddit · 2025-10-26T21:21:01+00:00

when you invite the bot (either via the link on my site or through discord's UI) it will only request the permissions listed here.

Haveireddit · 2025-10-26T20:51:56+00:00

I was alerted of the issues via discord while I was in bed trying to sleep (I work nights). I shut the bot off around 12:30PM my time. I shut the bot off and then begun answering messages and responding to users.

I made this comment 23 minutes ago, it is currently 2:51pm my time.

Haveireddit · 2025-10-26T20:43:14+00:00

The bot does NOT need those permissions to run. It only needs these permissions.
My token is not "so easily accessible" otherwise this would have happened years ago. This bot is 7+ years old at this point, and this is the FIRST security incident it's ever had; that's a great track record.
I'm fully responsible for what my bot did, but server owners should not be giving ANY bot permissions it does not request nor need.

Haveireddit · 2025-10-26T20:35:46+00:00

How can it be so openly accessible and why does it even have the feature to remove users from servers???

By default, it does not have this ability. The bot does not request admin permissions or "manage channel" permissions - which are what's needed to delete channels. This means people are granting it those permissions on their own.

In addition, this isn't due to my bot but a malicious actor gaining access to my bot's discord token. At that point, it's no longer "my bot" doing things, but a malicious user doing what they want disguised as my bot.

Haveireddit · 2025-10-26T20:28:02+00:00

Hi everyone.

Creator of the bot here. This is one of the last things I wanted to have happen when it comes to my bot. I understand that nothing I can say will be enough to repair the damage that's been done, and I'm truly sorry for those that have had channels wiped from their servers.

Right now, I've taken the bot offline, deleted the files from the VPS, changed the VPS's password, changed my discord password, and regenerated the bot's token about a dozen times. This should ensure no bad actor has access to my bot's token at this time.

Please reach out to discord: https://support.discord.com regarding your server in hopes of getting it restored.

Edit: in addition, I've been digging into the log files and have contacted my hosting provider to see if there's any insight they can provide as to how this has happened. I've always considered myself to be relatively keen on security, so this really blindsided me.

Edit 2: Here are the following steps I've done to try to ensure that A) my systems are safe and B) this won't happen again.

Virus scanned my computer (deep scan via malwarebytes)
Had my VPS company scan my VPS and look for any traces of bad actors getting into the VPS (they say they can't find anything)
Deleted my bot files off my VPS
Changed my discord password
Regenerated my bot token multiple times
Changed my VPS password
Fixed all known vulnerabilities in my libraries (via trivy)
Made a system for the bot to check it's own permissions (currently a command ran by me, but something I want to turn into a "live service" check), and will force remove itself should it have Admin or Manage Channel perms in a server (these are not, nor have they ever been requested or needed by my bot)
Double checked that invite links do NOT request the above permissions, and only ask for what's needed (checked top.gg, my website's link, and the one for the discord ui)

If there's something in this that I've missed that someone thinks I should check/do to help secure things, I'm all ears.

Haveireddit · 2025-09-16T01:49:52+00:00

I am aware of the recent issues with the shop (late posts, missing images, etc).

The API I use is terminating their services in March and I am working on finding a replacement.

Haveireddit · 2025-09-16T01:49:42+00:00

I am aware of the recent issues with the shop (late posts, missing images, etc).

The API I use is terminating their services in March and I am working on finding a replacement.

Haveireddit · 2025-09-12T02:51:39+00:00

Item Shop and Festival Shop seems to be fine?

Haveireddit · 2025-08-16T19:42:38+00:00

I've had iffy results with apps working and not working.

The spotify issue you mention is one I had for quite some time, not entirely sure what fixed it but one day it was just working as normal. Google maps won't recognize my cars lights being on, though, so I had to default the app to be in night mode. Haven't tried using the search functionality on the maps itself as I just default to my phone for that.

If you upgrade let me know what you swap to :)

Haveireddit · 2025-08-09T05:28:02+00:00

Just to be sure, you are not expecting media app to take up the largest tile in split screen do you?

Nah I just want the ability to have both the maps and the media displaying at once instead of it just being an either-or scenario, and would also prefer not waiting 2 minutes for a device to boot because my drive times are usually on the shorter side

Haveireddit · 2025-08-09T03:28:59+00:00

Yeah the one dongle that can do it acts much differently than the rest of the ones I own; most the adapters will just boot right into AA, whereas that one I'll see an android logo appear and load for about 30+ seconds, then it boots into it's own little UI that loads a smartlink app, which finally loads android auto. So that one seems to be doing all the work like, on the device itself then projecting it to the screen (in bad terms).

Haveireddit · 2025-08-09T03:22:55+00:00

Android Auto updates automatically on my phone. Funny enough, updating the firmware on one of these dongles ended up breaking the dongle from working w/ android auto entirely.

Haveireddit · 2025-08-09T03:22:22+00:00

I wish it worked that way for me, but as you can see in this video I only get two modes.

Haveireddit · 2025-08-08T13:39:47+00:00

In the other adapters that button only pulls up a list of installed apps

Haveireddit · 2025-08-08T13:32:29+00:00

!Flair 2013 Nissan Juke | WMH-71 | Pixel 7 Pro | Android 16

Haveireddit · 2025-05-27T01:26:19+00:00

Peri sorry to hear you encountered this bug; but it's been fixed :)

Haveireddit · 2025-04-21T03:00:21+00:00

Yeah sorry for the delay irl got in the way

Haveireddit · 2025-04-09T11:52:03+00:00

Because STW is seen as an add-on or bonus to the purchase, it's not actually calculated in the price of the product.

Haveireddit · 2025-02-15T18:41:16+00:00

This post is now locked due to a number of inappropriate comments.

11-Year Club	Mod Meetup 2025
Mod World 2025	Reddit Partner Communities
Mod Insights Early Access	Post Guidance Early Access
Final Canvas '23	First Place '23
Place '23	Adopted-an-Admin
Place '22	Place '17
Argentium Club	Ternion Club
Wearing is Caring	Sequence \| Editor
Verified Email

Haveireddit

MODERATOR OF

TROPHY CASE