Epic Minecraft Mob Vote Scandal Exposed!

It doesn’t make sense every single poll on the internet indicated that the crab should have won and not by just some small margin either but it seems like 50% of people voted for the crab 5 million total votes 1.5 million more votes than last year that’s a lot so how

Did the armadillo win and by such a significant margin as well well when rumas first began spreading that the mob vote was buttered I was very skeptical but as it turns out there is strong evidence to suggest that the mob vote may have indeed been exploited let’s

Talk about it one player in the Minecraft Bedrock Community named determinated decided to make a bot that allowed you to vote in the mob vote through Discord with a linked account this worked by sending a request to the database Minecraft Bedrock users called the play faab database of which would

Return a session token with the session token you can make another request to play Fab to gain an MC token a token normally used when you begin in a Minecraft session once you have this MC token you can manually send a request to the voting API to vote for a specific

Mob which is what was done and you can see players voting through the Discord here however this is where the exploitation would be discovered determinated users play Fab often when creating Bedrock programs for a variety of other things including checking a user’s Marketplace purchases minecoin balance and more a while ago

Now while looking for an efficient way to log into playfab as Xbox log tokens expired too quickly and by the way Xbox tokens are what’s normally used when logging in and accessing playfab he discovered something with iOS devices when logging into playfab through an iOS device the iOS device was not considered

To have a valid device ID and instead of giving you a session token for your account created a new account for you and then gave you a session token this meant that if you sent a request to play faab through a supposed iOS device you could effectively generate infinite MC

Tokens now you you may be thinking since playfab handles many of the other features of Bedrock how could such an exploit go undiscovered for so long well normally while you can get an MC token with just an iOS device you would need further Xbox authentication to do

Anything else like making a purchase on the marketplace thus preventing exploitation however likely due to an oversight you were able to send a Minecraft mob vote with just the MC token as authentication no additional Xbox verification required and since you could additionally generate infinite MC tokens with the method of sending a

Request from an iOS device this could be a big problem a big problem that even the penguin got more votes than my subscribe count we need to change that hit that subscribe button no pressure anyways upon realizing this the Terminator decided to create a version of the original voting bot that could

Infinitely vote as a proof of concept he showed it to some friends to display how cool the concept was and display the flaw he had found but his script was leaked and malicious users eventually got their hands on it modif Ying it now I’m no developer and I don’t understand

Anything about code so bear with me here but according to determinated who I talk to they modified the memory to make the program seem more legit this is because when you send a request for an MC token the memory of the account can be used as an identifier so them randomizing it

With this formula makes it harder for logs to detect exploitation furthermore they also added Randomness to the time at which the program’s functions were called basically meaning there were slight delays and differences in the times at which requests are sent to playfab and votes are sent to the API

Making them seem more realistic they also changed the user agent which is a string that determines the identity of the sender they changed it from determinator user agent to the Minecraft launcher which means that the votes are received from the Minecraft launcher with this they were able to choose a mob

And then effectively generate infinite valid voting MC tokens and now all they had to do was choose a mob and bought it the malicious users now had their their chance to change Minecraft history forever amongst the group they had an internal vote determining who they believe should win the mob vote

Ultimately deciding on the armadillo and they ran the script tracking the votes as they were sent however they weren’t the only ones who had gotten their hands on the script as it was leaked to another group this group decided to bot the vote in favor of the crab I should

Mention that this was all supposedly happening in the final hours of the mob vote and as such these groups didn’t have as much time additionally one of the original developers named optic spider ant who worked with determinated would report that there was malicious behavior going on to a Minecraft Bedrock

Developer by the end of it all team armadillo supposedly had botted over 3 million votes with Team crab botting almost 1.3 million but this is where the story doesn’t add up according to the Minecraft official Twitter account there was only a total of just over 5 million votes with the armadillo receiving

Roughly 2.1 million of those so how is it possible that these users are claiming to have added so many votes to the totals it doesn’t make sense there is an explanation though as told to me by optic there was a higher likelihood that a significant number of the votes

Were either rate limited which means that a large number of the requests received were limited by the voting API to prevent dos attacks as such there’s a good chance that many of the votes did not in fact go through or be counted furthermore there’s also a very good

Chance that Mojang caught on especially after the issue was reported in fact this was actually later confirmed by a Minecraft developer who stated that the team was aware of the attempts to taint the vote but also mentions that these attempts did not impact the results and that this year’s mob vote winner was

Legitimate so it’s clear that there are some inconsistencies in everything going on so I’m going to present you with some evidence and leave it up to you guys to decide if you think the vote was botted or not let’s start with the evidence that indicates the vote was botted

Number one this mob vote received a total of over 5 million votes which is 1.5 million more votes than last year’s mob vote which in total received around 3.5 million votes over 3 and2 million Minecrafters could this be that the drama cause this year made individuals more likely to vote and brought more

Attention to it well it’s uncertain the only metric we can look at is Google Trends which seems to indicate that this year’s mob vote wasn’t as popular as the last but that is far from concrete number two many polls online on various platforms display that Not only was the

Crab more popular than the armadillo but was so by a significant margin and like I mentioned this of course was the result across multiple platforms with multiple different YouTubers and individuals with different followings and audiences number three even including the fact that many of the votes likely were rate limited if you

Factor in the roughly 1.3 million supposed crap votes that were botted and the over 3 million that were supposedly botted in favor of the armadillo but reduced the totals by a lot it still does somewhat line up with the percentage distribution the mob vote finished on number four the fact that a

Developer even acknowledged that the vote may have been externally influenced May indicate that the botted votes did in fact work although Mojang became aware of them and why was it only acknowledged in an exclusive Discord why wouldn’t they just make a public statement all right let’s now talk about

The evidence against the notion that the vote was botted number one while yes the mob vote did in fact receive many more votes this year that could be due to the supposed inclusion of Chinese votes in the total this is unlike past years and maybe why we saw an additional 1.5

Million votes furthermore Google Trends isn’t always necessarily representative of the number of users who actually voted number two while it is in fact true that many polls indicated that the crab received almost 50% of the vote there were polls especially from less invested Minecraft audiences and even other demographics that indicated that

Even the penguin was favored by some so once again these polls aren’t entirely representative of the Minecraft player Base number three who’s to say that the boded votes even went through in the first place while all the code was verified by developers to be legit and functional what if the voting request

Just didn’t end up going through or was in fact blocked by Mojang and finally number four Mojang may still be in the process of investigating the botting and we may get a public statement sometime soon additionally they may not want to cause further outrage on Twitter overall

It’s up to you guys to decide personally I believe that some of the botted votes did end up going through although not nearly to the degree that was claimed and I believe Mojang caught on and stopped it from going too far but that’s just me let me know in the comments what

You think be sure to subscribe thank you all so much for watching