The source code for TF2 has been leaked to 4chan with reports stating that hackers have already cracked the code allowing them to remote access anyone’s computer who happens to be in a game with them.
Gamers are being warned to not play or even uninstall any Source engine based games which include Team Fortress 2, Counter-Strike: Global Offensive, Gary’s Mod and Half-Life 2.
The leak appears to come from a clandestine group of hackers and modder that who regularly shared Source Engine code, and who went by the name Lever Softworks. They would attempt to recreate unreleased games and investigate the source code as a hobby.
The code in question was reportedly leaked back in “late 2018” but on 22nd April the code found its way onto the notorious 4chan website.
Source code for both CS:GO and TF2 dated 2017/2018 that was made available to Source engine licencees was leaked to the public today. pic.twitter.com/qWEQGbq9Y6
— Steam Database (@SteamDB) April 22, 2020
Twitter user JaycieErysdren, who claims to have been part of Lever Softworks, shared some details about the leak.
The explanation of every leak from today, April 22 2020.
— Jaycie λ (@JaycieErysdren) April 22, 2020
The reason that this leak happened is because one of Tyler's longtime associates was recently removed from Lever Softworks due to problematic behavior including racism, homophobia and transphobia. (1/14)
The Tyler in question is Tyler McVicker, creator of the Valve News Network and also a member of Lever Softworks, he has been accused of leaking the code to 4chan, an accusation that he denies.
This is in response to a recent leak of materials on 4chan.
— Tyler McVicker (@ValveNewsNetwor) April 22, 2020
I would like to clear some things up regarding these.
I did not leak anything.
I will be submitting all the evidence I have on the SrcCode leak to Valves legal department. https://t.co/ErW7usmO5a
JaycieErysdren backs up Tyler's assertion and that's that a “mentally unstable” member of the group, who was kicked yesterday for “problematic behaviour including racism, homophobia and transphobia” was the true source of the leak.
He then goes on to detail the extent of the leak and what it means for the players of Source engine games.
1. What are these source codes?
— Jaycie λ (@JaycieErysdren) April 22, 2020
The source code present in the leak was given to many people in May 2018 by a mentally unstable source who wanted to cause damage to Valve. The CS:GO code is from May 2017, while the TF2 code is from November 2017. While Tyler never had... (5/14)
...direct access to the code, many of his associates had access and datamined it for the purpose of providing interesting information and trivia. (6/14)
— Jaycie λ (@JaycieErysdren) April 22, 2020
...close friends, including the one who is responsible for this leak. The "YSU Calc II" Discord group was the place where all this information was shared and discussed for the better part of 2 years. (8/14)
— Jaycie λ (@JaycieErysdren) April 22, 2020
...in the Lever Softworks group, and was removed just yesterday for the aforementioned problematic behavior, their username and work is all over the build. (10/14)
— Jaycie λ (@JaycieErysdren) April 22, 2020
5. How does this effect Tyler?
— Jaycie λ (@JaycieErysdren) April 22, 2020
It shouldn't do anything, really. Tyler is in contact with Valve and their legal team. They are aware of the situation and will be handling it WITH Tyler's assistance. (13/14)
6. How will this effect Valve game communities?
— Jaycie λ (@JaycieErysdren) April 22, 2020
There might be an increase in RCE's in TF2. Otherwise I'm not really an authority on it. It will almost certainly damage Valve's relationship with the Source Engine modding community. Beyond all of that, it's hard to say. (14/14)
The leak has already led some communities in Team Fortress 2 to take down their servers including Creators.TF who posted Tweeted to say that their servers will be down for the "foreseeable future".
Due to the recent source code leak we will be closing our servers for the forseeable future. This is because of the uncertainty surrounding security of our infrastructure, as well as a potential for damage to be caused to your computer.https://t.co/gWcIKRMPdj
— Creators.TF (@CreatorsTF) April 22, 2020
There have been unsubstantiated reports that hackers have already found a way to use the source code to gain unauthorized access to other player's computers, but we can't confirm this information.
Players are advised to, at the very least, not play source engine games until the leak and any potential patch can be rolled out.
Valve has yet to comment.