Club Penguin Resets Passwords of Users Who Used Item Adder

Update [9/28/14, 2:30 pm EST]: Lolnok has been referred to the CPAC website and provided us with some further information in a comment.

“I received an email directly sent from a higher up support member of the Club Penguin team who requested that I hand over my list of people who have used my adders, or face the consequences. Let this also be a lesson to the people who used their main penguin account(s).”

In response to the rapid expansion in popularity of item adders, Club Penguin is finally cracking down on those who have taken advantage of their service. In the past few days, a number of users have reported having their passwords reset, including Drake8893 of DW, Silverburg of RPF, and Woodleyx of ACP.

Upon further investigation, it appears that a user named Lolnok, creator of one of the more popular item adders, turned over the logs of his program to Club Penguin, allowing them to reset the passwords of the 3,000+ accounts on which it had been used.

Lolnok reveals he turned over the logs from his item adder to Club Penguin staff

When asked as to why he did this, he replied that he “had to”. The tweet was vague and ominous in tone, which may suggest he was threatened with legal action if he did not comply to Club Penguin’s request.

Lolnok suggests he was forced to turn over user data to Club Penguin

It is not clear as of yet if the passwords can be reset again; Drake stated that he no longer had access to the parent email and Woodley seems to have claimed that his parent email was changed in addition to his password.

Lolnok believes that this likely impacted more than just his item adder, as others were originally based on his version.

Is this the death of item adders?

Additionally, it appears that Lolnok’s IP address was blacklisted from the Club Penguin API in an attempt to prevent him from creating further programs to exploit Club Penguin’s code.

Club Penguin is coming down hard on programmers that exploit their API

More information will be added when available. Those who have used item adders may be now regretting this decision. For those who have used item adders or if you believe your penguin’s password reset is attributable to these actions by Club Penguin staff, let us know in the comments.

Update [9/26/14, 10:55 pm EST]: Woodleyx reports that his parent email was reset as well, effectively locking his account. This does not seem to affect everyone; some people have been able to reset their passwords, others have been locked out of the parent account. Some have reported that all of their items have been deleted, not just those that were added by the item adder.

Update [9/27/14, 9:40 am EST]: Lolnok confirms he did comply with a direct request from Club Penguin staff.

Lolnok confirms he was sent a direct request to disable his item adders

~Boomer

69 Responses

  1. 1st and that noob lol :3

    Like

  2. also Boomer this is a few days old.

    Boomer: Yes, I did say it has been going on “the past few days”. Some of the tweets are from as recent as 15 minutes ago, however.

    Like

  3. Reblogged this on ACP: The Official Army of Club Penguin and commented:
    I warned everyone a while back about this, to those few who listened, it paid off. Everyone who used an item adder, now has their password reset.

    Like

  4. I survived lel. I changed my pass right after the reset and my penguin is still working.

    Like

  5. I never used lolnok one.

    Like

  6. Fuuuck Especially with my Main,…

    Like

  7. I use an item adder, and i was reset. I didn’t know what was wrong, so i went into my parents account thing and reset it there. Mines still working.

    Like

  8. RIP Merta 7 2013 to 2014 😥

    Like

  9. mine is fine. no resets

    Like

  10. My penguin’s password and the parent email id is reset too.

    Like

  11. My penguin survived ftw. I bet CP are looking at this page just to catch the people whose accounts haven’t been locked/

    Like

  12. Lucky I changed my password immediately! -_-

    Like

  13. Not reset ayyy

    Like

  14. Well shit. RIP in Pingu Pjayo September 2008 – September 2014 – or is he alive

    #LOOMINARTY
    #BEPLIKESBESTIALITY420
    #WVGREATESTNATION

    Like

  15. I ALREADY GOT WHAT I WANTED

    Like

  16. The nachos and UMA are fucked…

    Like

  17. You guys were told that it was risky. This had to happen one day.

    Like

  18. My main got banned for 72 hours 😦

    Like

  19. All my items are deleted,. even ones not from the item adder

    Like

  20. Finally they do something (something major that is)

    Like

  21. Just change your password

    Like

  22. ROFL my penguin survived

    Like

  23. I BET HALF THE PEOPLE IN GT WOULD HAVE LOST THEIR ACCOUNT like sercans too cus i added items for all of them from lolnok
    D:

    Like

  24. Everyone’s acting like this is some kind of crime, but item adding is basically hacking CP. If I were CP, I would have done the exact same thing.

    Like

  25. lol scary on this

    Like

  26. This is essentially hacking someone’s game. People have been warned about item adders and CP hacking software multiple times in posts, but very few notice. I guess they are feeling the consequences of ignoring such warnings now. Blame yourselves, not Club Penguin, if you are banned because you used hacking programs.

    Like

    • But I do not understand why CP has to banish item adders that actually requires you to use coins. I just can’t say any further than that.

      Like

      • It’s still hacking. It’s possible to buy and add items that are no longer programmed into the game, such as the 2005 beta hats. Also, do you really think CP wants kids to go using third party software and condoning that? If they did allow that, they’d have to explain a LOT to the parents.

        Like

        • Games have been hacked and will forever continue to be hacked. Item adders were no big secret.

          Like

          • Yes, they are hacked all the time. CP were just doing something to prevent hacking. Besides, as I said, CP doesn’t want kids downloading all sorts of third party viruses and bootleg hacking software, for, as I said, CP would be at risk of closure for allowing that.

            Like

            • Club Penguin doesn’t condone any of these programs that are available to the public, but the key point here is that while they’re tackling the ongoing threat of fundamental exploitation in their game, they don’t seem to be working hard enough to address the issue at hand. You see, Club Penguin base itself around money, just like every other online game that puts up this front that it cares for its user base.

              They don’t care if any about any of the users who downloaded these programs online, they only care about the repercussions that will serve against them. The ultimate backlash is that they could conceivably be deprived of some younger users who feel alienated by Disney, which is more than likely given the current predicament most users are in due to the amount of times they have used the item adder.

              I, however, hold myself accountable for my unassertive actions that I dished out towards the users who used my item adder. But again, I reiterate that those who did use it shouldn’t have used their main penguin because it was only a matter of time before Disney directly contacted my threatening me to take it down.

              Like

              • I’ve got to agree with you, Lolnok. Club Penguin, since being purchased by Disney, has cared for nothing but the cash they make in CP, hence why there’s so many restrictions for non members and so many privileges for members, for example. Their interest in making money instead of providing entertainment for CP’s users has indeed caused them to take immediate action against the usage of hacking, for allowing users to download and make usage of third party software will inevitably taint Club Penguin’s and Disney’s reception. And you know what a tainted rep means for Disney- less profits.

                Like

                • It is in corporate ethics to care predominantly about the way the money flows, which is why the older generation of Club Penguin players who know of this take their time (depending on the technological skill they have) to exploit the game, because they know that Disney will fork out more multitudinous amounts of money in the process to stop people exploiting their API, which virtually useless, because everything is exploitable no matter how tight they crystallize their security.

                  The modern-day parties just demonstrate that they neglectful their user base instead of trying to entertain them. Sure, they have these little Disney parties that the Disney fan base enjoy, but not everybody enjoys them, which is essentially the only downfall to Club Penguin.

                  The third party software makes it an arduous task for the bug finders, due to their inability to scour the code correctly and find loopholes in what was written, but I surmise that is because most of the exploits that are made for Club Penguin today are purely hardcoded which makes it difficult for people like the bug finders to patch such exploits.

                  The Penguin App 1.11- This is the root of the item adder problem, which can’t be fixed due to it being out-dated. When Club Penguin posted updates for this app they gave people an option to update, which is the downfall of this app because it allows users to manipulate the game by editing the hex values in Notepad++ or any other word editor that they have. This can all be achieved by downloading Funbox and hooking up your jailbroken iPad/iPod up to your computer, which isn’t that hard considering most of the people take advantage of exploits such as the catalog exploit, etc.

                  There are many other exploits that I have hold of right now, which vary from being able to ban penguins with false packet requests, create dozens of spam accounts that give paramount likes on an igloo of your choice, and the most recent 30 day membership exploit which Club Penguin has refused to acknowledge.

                  Like

                  • The way in which Club Penguin has been made a corporate game by Disney has completely damaged CP, and it means that CP has now been designed to satisfy the Disney fanbase instead of the CP fanbase. It’s true that things like parties and catalogs have been “Disney-ified”, such as the Frozen, Star Wars and Marvel parties and catalogs with Disney items, all of which is used to attract people to Disney and make more dimes for Disney- not once have I seen a Music Jam or a Rockhopper Party, since, maybe, 2010? It is indeed in a company’s interest to make cash flow in it’s own direction. Remember that Disney aren’t games developers, they are a company, so they will be using Club Penguin to make cash instead of to provide entertainment. You stated that Disney has to spend a lot of money hiring programmers and buying equipment to tackle exploits that may negatively affect Club Penguin, so this may explain why Disney have cracked down so hard on hacking. The more complicated hacking programs being made available to the public to hack CP, the more money Disney has to spend attempting to polish their security and fix bugs and patch programs.

                    Like

                    • The programmers they hire to tackle such exploits clearly don’t show a positive effect because all they do is run around to forums such as Rile5 that have no actual knowledge of these private exploits, it just goes to show how hopeless these so-called programmers are. I think that item adders also have a positive effect on both Disney and Club Penguin (since half of the profit goes towards Lane).

                      When the item adders were created, it enticed the users who were using them (especially younger audiences) to buy memberships for their penguins because of the encouraging (if you want to say that) vibe that it ushered on to the younger ones. They knew that if they had a membership they could add member items to their accounts, which would enhance their gaming experience. However, those with a yearning for Disney & their programmers to find out how this happened grew, which is essentially how and why I got a C&D from Disney stating that I would be in hot water if I didn’t comply with their requests.

                      Disney also refuses to fork out on fitting programmers to keep their systems intact. As it stands they’re all deficient grown men poking around in forums trying to find a way to patch such exploits, but to no avail. Just goes to show how raunchy Disney can be, right?

                      However, the hankering on my part was relatively high, but in the end it was my ultimate ruination, but that doesn’t mean I’m going to stop making Disney look like a laughing stock.

                      Like

                  • I think the other downfall of cp is the new penguin style.

                    Like

  27. this is probably why my main account got banned forever. I added so much shit using item adders lolz

    Like

  28. What a prick. He has affected a load of people and he doesn’t even care. Anyway i wish i knew about this

    Like

    • Why don’t you show a little respect to the person who brought you the item adder in the first place, you ungrateful little shit.

      Like

    • I don’t think he doesn’t care, there is just an implication that when you use a program like this, you are aware of the possible consequences. Every program like this, including tools used for adding coins, warn you that you are solely responsible for anything that may happen as a result of using it. If you did not heed these warnings, it’s your own fault. Lolnok only made the service available, he didn’t make you use it.

      Like

  29. They had it coming…..

    Like

  30. Can we just please move over to Warfare.me . I’m tired of this basic shit happening when there’s a simple solution. Plus, CP will lose like over 9000 accounts and they will lose a fuckload of money. See how they like that.

    Like

  31. I just reset my password, nothing much /: Kept my items and all.

    Like

  32. I received an email directly sent from a higher up support member of the Club Penguin team who requested that I hand over my list of people who have used my adders, or face the consequences. Let this also be a lesson to the people who used their main penguin account(s).

    However, Club Penguin still has a multifarious base of exploits that haven’t been patched nor found by their “top” bug finders. Take a look at my Twitter if you want to find out what they are

    The person who forwarded me here was a person named Think Code: http://imgur.com/N0wGcEH

    Like

  33. i survived

    Like

  34. All of my CP accounts using the item adder survived. Jay GT and GoldenTro0p have golden winged helmet, roman helmet, admiral jacket, lei’s, toques a bunch of added stuff but no ban.

    Like

  35. Additional clarification:

    When I first put my item adder on my website I didn’t keep an access_log, so that is in all probability why some of you haven’t been affected by this password reset. Consider yourself lucky that some of your penguins haven’t been banned forever. I still can’t believe most of you people actually used my item adder on your main penguin..

    Like

  36. lol i’m not banned

    Like

  37. Welp I cant acess cp… I made a new account. Just great. 3000 days of my childhood gone forever

    Like

  38. First of all they can’t change your password beacuase if u have a memeber ship u can’t take it off
    Cause you need the pass word and Disney they just want that money cause there bitches
    SO CLUB PENGUIN AND DISNEY CAN GO FUCK OFF

    I use item adders all the time and never banned and they can’t tell ya wat to do cause they don’t own you

    Like

  39. Ur logo is illuminati?! 🆒

    Like

What do YOU think? Comment your opinion!

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: