Players can dupe items / currency through DeluxeMenus

[modern fern]

By delaying packets being sent, players can duplicate items / currency that are being sold in DeluxeMenu's.

Using https://www.spigotmc.org/resources/⚡-master-cooldowns-placeholder-cooldowns-1-8-1-19-⚡.72145/ does not fix this issue.

[vestal parcel]

O.o

what allows the client to delay packets? seems like some weird modded client

[vivid eagle]

yuh it's a mod i ve tried it to test it with dm in the past but it didn't work

they only come as ghost items

[modern fern]

https://github.com/Coderx-Gamer/ui-utils

[vestal parcel]

so it's literally a mod to dupe things

I feel like this is completely out of our control

[modern fern]

? wdym 🤣

The mod enables you to delay packets so they are all sent at once. My DM config specifies that when a player clicks on an item in the menu, they are checked if they have sufficient funds, and then 1 coin is taken from them, evidently either the currency isn't taken fast enough, or the check for currency still shows that they have a sufficient amount.

Other plugins have been able to patch this issue.

From a basic interpretation of this issue there are a couple things that could fix this:

• Having some sort of delay before requirements are checked, an amount of time that sufficiently enables a currency update
• Having a delay before executing within a menu

[gritty badge]

What are the other plugins that have patched this?

[modern fern]

I'm yet to find an exact update within a plugin that has patched this, but an example of a GUI plugin that doesn't seem to face this issue is: https://www.spigotmc.org/resources/economyshopgui.69927/

[rough ginkgo]

can also be used to exploit the new crash exploit

[vivid eagle]

the what now?

[rough ginkgo]

oh lol you dont know?

dm me

[modern fern]

Still exists

[vivid eagle]

have u tried it in a server with only deluxemenus?

[umbral mortar]

This is a deluxemenus issue that they haven't fixed since 2 years

because the placeholder for requirement takes time to update

@modern fern what deluxemenus version are you using btw?

[vivid eagle]

i didnt manage to personally replicate it w the mod to my server so if there is a specific way to do it lmk

i found some videos on yt regarding that and i followed em but nothing

[gritty badge]

This is the first time I hear about the issue.

[umbral mortar]

the issues arises from placeholders such as %tokenmanage_balance% being used as a requirement for click

[vivid eagle]

yeah i ve tried it to %vault_eco_balance%

[modern fern]

Did you open the menu, click 'Delay packets' and then spam click the menu item, then click 'Delay packets' again?

[umbral mortar]

what's your deluxemenus version and are you also using vault_eco ?

iirc it only happens with certain placeholders / placeholders that dont update instantly

[vivid eagle]

yes and i havent managed to replicate it :/