9 | The Dump.

The Tale behind the Source Dump of Monarch, caused by Lu's Arrogance.

Jumping back in time to a few months / a year ago, there was a good friend of both Tim and Lu's named Lifix, he was a regular member, even staff at one point, and seemed like an overall chill dude.

Lu out of the blue one day began accusing him of being a scammer and claiming he sold carded / stolen nitro to his customers, without any actual proof of these claims.

This led to Lu banning Lifix from Monarch, and that was the end of the story.

It wasn't.

Lifix took this strongly in a personal manner, beginning to alt on Monarch to try and plead his case, and argue Lu was lying and he was wrong, but Lu was having none of it and just continued to ban him.

I was stupid, and gullible, and believed what Lu said and assisted him in banning Lifix's alts etc.

A little backstory:

Lifix previously collaborated with Tim and Lu on a private GTA cheat within a private organization on their old Git repository (https://git.monarchcheats.com/). During Tim's work on Monarch V1, all of the source code was stored on GitHub, but he also had a mirror of the source code on his self-hosted old git, which Lifix still had access to. When Tim upgraded Monarch from V1 to V2 (the first Golang recode), he used a small test dataset containing a few users. This dataset had passwords hashed but exposed upload secrets. When the drama unfolded, Lifix accessed the old private git, cloned the Monarch V2 source code from the mirror *as well as the entirety of the original git, located the old test dataset used for the upgrade, and leveraged that information to reset Lu’s admin panel password using Lu’s upload secret.

*Lifix contacted me to let me know that it was not just Monarch Source inside the mirror, it was indeed everything on the Git. Once he gained access to the admin panel, other actions commenced, such as resetting the passwords of several other users using the upload secrets from the dataset. This prompted Tim to disable the password reset feature during that period, as he suspected a security vulnerability due to the uncertainty surrounding the situation.

This also included leaking the Monarch database and publicly making usernames and hashed passwords available for anyone to access.

This led to a random user in the community named Dripper who previously had some sort of issues with Tim, (I don't remember why, he was irrelevant) and was "working with" Lifix and his friends who were doing the source leak and source dump, to try and promote himself as the "Evil Mastermind" behind it all.

After all, this had been resolved, Lu had admitted he was lying and Lifix had chilled out, retracted his previous leak and removed it from public view, and admitted Dripper did nothing for said Dump, except talk nonsense and spread drama.

I plan to update this chapter further in future, but at the moment, I simply just cannot remember much of what happened because besides Lu causing Monarch to have a full-scale source and database breach, nothing else big happened. If anyone, Staff, Member or even of the Original group of "Leakers" has anything to add, please send me a Direct Message on discord @cheddlar