Torn only needs to approve the concept, technical design, and acceptable use, not the code base unless circumstances warrant this in-depth review. This will significantly reduce the need for a team of code reviewers. Any releases that expand the use or players misusing the scripts beyond it's original approved usecases without approval and ended up violating Torn's TOS run the risk of getting fedded.
How to Make $10b by breaking Torn Rules
Started by cats [2155267] on in General Discussion.
Posts archived: 549 / 549 posts (100%) · the total is Torn's reply count + the opening post at the last fetch
I heard about this guy that robbed a bank. After he was caught, he told the police he was very remorseful, that it wasn't even his idea, and that he only drove the getaway car. The police considered all of this and decided he should spend 30 days in jail but that he could keep his cut of the bank job.
Thank you for the additional details on the decisions. Could you please elaborate on
After AQ was aware of this he still, admittedly under duress, kept it active.
Based on the SS, AQ appeared to be both the enabler and someone who intentionally takes advantage of the illegal script and yet he received a slap on the wrist. You have mentioned in at least 2 posts that he acted under duress but all evidences suggested he is a willing and active participant.
Going back to what I believe is OP's main point in this thread, why did he get special treatments compared to others?
Live updates were what Ched wanted as I understand it. They're quite popular and fun, I doubt we revert back to a page that needs to be refreshed. (I won't speak for Ched though!)
As I understand it:
You can read a websocket, but only on a page you are actively viewing and focused on.
An open page is not necessarily being actively viewed and focused on.
Unless you're super-human, your eyes cannot read three sentences on three screens at the same time.
If you're reading three sentences on three screens at the same time, you're a robot.
If you're reading a screen that is 2 miles from you, you're a robot.
You're allowed to share the data you see, but that sharing cannot be automated. You must be involved in the sharing unless it explicitly uses the built in game API. ie. you must type it or voice chat it.
Most people could easily have multiple windows arranged across a screen and watch them all for changes at the same time. It doesn't require any reading.
Not more than 20, for 24 hours a day, which as we can see gets you rightfully fedded. Crazy how all the people who only open 4 - 5 tabs like a normal person haven't even been warned that a fed is possible.
Staff giving an M player a free pass for cheating definitely wasn’t on my 2026 Torn bingo card.
if your name is Marty Mcfruitfly - sure you can!
Such a good read!!! I don’t know anything about making scripts and stuff like that at all, could someone explain to me if they can in a simpleton way for me to understand how staff can tell that someone is running a script?? Sorry for the stupid question in advance
The mug bot used is bad, definitely unfair vs the average player. I'm a Neanderthal in the technicalities of any form of scripting/Botting/we sockets etc.
But was this tool used in June 2026? Because I have a couple of logs which baffle me still to this day.
Somehow mugged shortly after anonymous sales of RW armour.
CASE 1
21:31:50 - 11/06/25 You anonymously sold 1x Riot Boots on the Item Market to Tankyphil for $90,299,998 after $14,700,000 in fees.
21:33:10 - 11/06/25 Someone mugged you and stole $8,662,319 [view]
CASE 2
08:32:42 - 11/06/25 You anonymously sold 1x Riot Pants on the Item Market to RyukTheKami for $68,799,999 after $11,200,000 in fees.
08:33:59 - 11/06/25 Brizo mugged you for $5,387,039 sending you to the hospital for 0h 41m [view]
Key word, ANONYMOUSLY, and inb4 "should of self hosped", I paid the extra anon fee to not have to and sleep IRL. I did send a report and got dismissed by staff as "no detection of illegal activity at this time".
These mugs felt dirty, and they aren't even my biggest received mug, my biggest loss was over 100m and done the right way (foolish me medding, closing bazaar, adjusting prices and opening bazaar, then rebagging too slow on mobile). I even had a laugh with the guy who did it, and he taught me valuable lessons in avoiding it in the future, #1 don't try cache selling on mobile.
This may be completely unrelated to the bot in question. Has anyone else had experience with anon sale mugs? Is there a legal way that it could have been done? (I'm not interested in doing it myself, not my playstyle)
Would resetting API keys and being selective on the sharing even help combat web socket bots?
if you have been following the drama, your cases are the examples of the same mug bot related feddings
they track who bought what from auction/rw market and then track the same weapon pop up on item market, and then get pinged on discord to mug you (the probable seller of weapon) when the item is sold from item market
Edit- Exactly what heath said
That's so clever and I hate it.
2 anonymous buy mugs on the same day, seems suspicious... Brizo is one of the mug script offenders that got fedded, makes me wonder if the script was not just used for automation but also able to circumvent anonymous listing.
dun worry nothing to see here. slap on the wrist for equal to or greater levels of crime.
Unrelated actually.
{ "itemmarket": { "item": { "id": 14, "name": "Ruger 57", "type": "Secondary", "average_price": 525 }, "listings": [ { "price": 950000000, "amount": 1, "item_details": { "uid": 16893622177, "stats": { "damage": 44.98, "accuracy": 66.42, "armor": null, "quality": 233.97 }, "bonuses": [ { "id": 1, "title": "Expose", "description": "15% increased critical hit rate", "value": 15 } ], "rarity": "red" } }, { "price": 2499999992, "amount": 1, "item_details": { "uid": 16073626612, "stats": { "damage": 46.22, "accuracy": 64.59, "armor": null, "quality": 228.09 }, "bonuses": [ { "id": 61, "title": "Motivation", "description": "27% chance to Motivate self increasing all stats by 10% (x5)", "value": 27 } ], "rarity": "red" } } ], "cache_timestamp": 1768619706 }, "_metadata": { "links": { "prev": null, "next": null } } }
Various endpoints track the UID of items, that mug occurred roughly 2 minutes after the sale, even prior to the release of the Auction House API if a specific UID was obtained from the Auction House you could hypothetically create your own tracking for various UID's.
The examples of people getting fedded are more so occurring beyond what's capable with the existing API systems, which a scenario like this very much could be tracked.
I will add though; these bots have been operational for longer than a year - As far as I'm aware the people who have been punished have only been operational since November 8th, 2025.
I know because it was suggested to me back in June of 2025 as an a route to making a mugbot, but I declined due to the ambiguity of the rules around such.
Maybe a fix to this would be to make anon sale withhold the UID until sold?
I know the UID is linked to me as first owner too, since these items were opened by me via a cache.
I'm deviating from topic, sorry, but it seems like a relatively poor oversite from the devs, considering your only really going to anon sale high ticket items
We demand blood! I want retribution!
Still wouldn't work, anything that identifies the item - Damage, accuracy, perk, perk % would make it trackable.
This same shit happened to me when selling RW gear when the item market 2.0 overall first happened and I sold anon.
Makes me wonder if this specific mug bot has been in the background for a while.
Also pisses me off at a certain point. I value how much time ive put into this account so ive made sure to activately ask Bogey to make sure any script im using that involves mugging is within game rules.
Well, what's the point of staying within the game rules when you have a plethora of people with this bot and others like it making absolute bank?
There needs to be an example made.