Back to the list

Yuga Labs' Dookey Dash Can Easily be Cheated, High Scores Being Sold For Dollars

source-logo  coinnounce.com 08 February 2023 14:57, UTC

It has come to light (1) that certain game participants centered on mints are engaging in dishonest behavior to achieve greater scores and move up the leaderboard. In other parts of the network, several "boosters" for Dookey Dash are still bragging that their customers have not been identified.

Boosters are players who are available for hire in video games. They get into their customers' accounts and increase their rank, mostly by employing exploits or hacks of some form.

One of these "boosting" services costs a minimum of 0.25 Ethereum, which is roughly equivalent to $420, for a score of 250,000 or higher, and rates may go as high as 2.5 ETH, which is approximately equal to $4,200, for a score of over 700,000. The questionable boosting business stated that it did not use any hacks to get such assured high results.

The developers of the Ethereum non-fungible tokens issued by the Bored Ape Yacht Club (BAYC) debuted the endless runner game Dookey Dash three weeks ago with the promise that the player who achieves the greatest score would be awarded a secret prize.

Sewer Passes that have been "verified" will, as of February 15, be "eligible to morph into a mysterious new power source." Holders of BAYC or Mutant Ape NFTs could only obtain these passes.

Since its debut on January 18, the Sewer Pass NFTs have seen over 36,000 Ethereum in secondary sales in just three weeks. This indicates that they have been quite popular.

Adam Hollander, the owner of BAYC #3987, predicts that it will be long until it becomes clear whether or not these inflated scores are authentic.

I just heard from one of the top players on Dookey Dash that lots of the folks advertising paid high-scores are using botted code. Cheating is apparently rampant.

Be careful folks. When Yuga runs their audits, those passes will be disqualified & become worthless.

— Adam Hollander (@HollanderAdam) February 6, 2023

Yuga Labs asserted that it dies not allow any dishonesty. Cheating has already been linked to a few of the Dookey Dash Sewer Passes they have already discovered. They also said that those points have now been deleted from the leaderboard.

We want Dookey Dash to be as fair as possible. As we've mentioned previously, we will not allow cheating. We’ve already noticed some #DookeyDash Sewer Passes associated with cheating. Those scores have now been removed from the leaderboard.

— Bored Ape Yacht Club (@BoredApeYC) February 8, 2023

How exactly is the hack being perpetrated?

Fabricant CTO Marco Marchesi published a video demonstrating gameplay with "hacked" obstacles. These obstacles allow the player to continue to collect points by slamming against blockades and other items that would normally finish the game.

Easy to hack the obstacles in #dookeydash
Less easy to validate a score (and no intention to try @samwcyo 😅).
I wonder if I should run a obstacle-less game as an artistic performance until the sewer closes in 7 days and see what score I can get live. pic.twitter.com/dmFkNp23gD

— rtx 👾 (@thatrtx) January 31, 2023

Others, such as Orephelious, have asserted that cheat players are employing "exploits" that enable them to compel their score to be published and get over Yuga's anti-cheat mechanisms.

When you play Dookey, every single mouse movement, every obstacle you see or hit, every Fragment you collect, every Dash, every millisecond is collected and submitted. Yuga’s simulator then replays your entire run on their server and if anything doesn’t match… CLOGGED.


— orephelious (@orephelious) February 6, 2023

While many fans are certain that Yuga Labs will be able to identify and delete scores obtained dishonestly, some aren't as convinced.

"Dookey Dash was widely botted," a hacker by the name of ClearHat stated in a lengthy, 43-part Twitter thread on the social media platform Twitter.

ClearHat asserts that they have discovered a way to modify the game and that Yuga Labs did not encrypt the a.js file that held "the rules for the game." The information on the game was already public knowledge when the file above was modified.

For the time spent on it, it actually performed very well. (23/43) pic.twitter.com/0UdKL7SYPB

— ClearHat (@xClearHat) February 8, 2023