source-sdk-2013 icon indicating copy to clipboard operation
source-sdk-2013 copied to clipboard

[TF2] fix: exploit allowing casual players to farm points via repeated sandman stuns

Open bijlpieter opened this issue 6 months ago • 37 comments

Sandman ball stuns grant bonus points. With enough healing, 2 scout players on opposing teams can exploit this fact by repeatedly stunning each other. This is further helped by the fact that the ball instantly comes available when being hit by another scout's sandman.

This has been prevalent for years in MannPower mode, since its powerups provide the necessary healing power. In the past there have been players using bots to kick everyone from a server, only to be able to do this exploit. So this fix, or one like it, would be very welcome to the community!!

Completely removing bonus points from sandman stuns seems excessive, and might hurt other game modes where this exploit is not an issue. Hence, I think deterring exploiters by limiting the rate at which bonus points may be received from the sandman is enough. I figure this won't have any impact elsewhere.

Looking forward to your feedback!


This commit applies a rate limit to the number of bonus points a player can receive from sandman stuns.

bijlpieter avatar Jun 22 '25 19:06 bijlpieter

For reference, here is a demonstration of the exploit:

https://github.com/user-attachments/assets/49452a35-fa81-4fcb-ae72-593227a46ece

bijlpieter avatar Jun 22 '25 19:06 bijlpieter

it actually hurts also people who doesnt farm xp but just play sandman, bleh

mlemlody avatar Jun 23 '25 04:06 mlemlody

This patch limits bonus points being applied to just once per 10 seconds. Noone playing legitimately would feasibly run into this limit.

bijlpieter avatar Jun 23 '25 05:06 bijlpieter

mlemlody, after u use ball it takes 10 secs for recharge so it doesnt hurt anyone, also since when bot hoster responsible for engineer bots on mannpower cares about players? Stop crying Ur Just mad u wont be able to farm yourself

ciamciam avatar Jun 23 '25 07:06 ciamciam

since when bot hoster responsible for engineer bots on mannpower cares about players?

Melody having a change of heart, perhaps? Didn't he leave bot hosting last year anyway?

teufortressIndustries avatar Jun 23 '25 07:06 teufortressIndustries

Melody having a change of heart, perhaps? Didn't he leave bot hosting last year anyway?

No? He hosted bots less than 2 weeks ago on mannpower, and is writing new cathook for botting but with engineers instead of snipers

ciamciam avatar Jun 23 '25 08:06 ciamciam

No? He hosted bots less than 2 weeks ago on mannpower, and is writing new cathook for botting but with engineers instead of snipers

What a shame, waste of potential.

teufortressIndustries avatar Jun 23 '25 09:06 teufortressIndustries

No? He hosted bots less than 2 weeks ago on mannpower, and is writing new cathook for botting but with engineers instead of snipers

What a shame, waste of potential.

he can host good servers tho, unlike some tf2 servers

Gopnik1255 avatar Jun 23 '25 09:06 Gopnik1255

he can host good servers tho, unlike some tf2 servers

Good servers huh? Full of engineers with aimbot buildings nests. Sounds Like a great server to Play on

ciamciam avatar Jun 23 '25 09:06 ciamciam

can we delete this, how am i supposed to get my level 150 tier 8 92387934th account also that ur legit butthurt over an xp glitch, please consider deleting this

semipopular avatar Jun 23 '25 09:06 semipopular

can we delete this, how am i supposed to get my level 150 tier 8 92387934th account also that ur legit butthurt over an xp glitch, please consider deleting this

Cry us a river, its never gonna get deleted :)

yo sybau my boy, we ALL agree to delete this spam post, this isnt even an exploit its a part of the game, said by robin walker now shut up, also if it existed for years and there's alot of content with it, then why valve never fixed it? seemingly it's a harmless feature so no reason to "fix" it

semipopular avatar Jun 23 '25 10:06 semipopular

Am Just gonna add info that 90% of ppl who dont want it to be fixed are cheaters or bot hosters

ciamciam avatar Jun 23 '25 10:06 ciamciam

can we delete this, how am i supposed to get my level 150 tier 8 92387934th account also that ur legit butthurt over an xp glitch, please consider deleting this

yo sybau my boy, we ALL agree to delete this spam post, this isnt even an exploit its a part of the game, said by robin walker now shut up, also if it existed for years and there's alot of content with it, then why valve never fixed it? seemingly it's a harmless feature so no reason to "fix" it

severe case of butthurt

seler1500 avatar Jun 23 '25 10:06 seler1500

yo sybau my boy, we ALL agree to delete this spam post, this isnt even an exploit its a part of the game, said by robin walker now shut up, also if it existed for years and there's alot of content with it, then why valve never fixed it? seemingly it's a harmless feature so no reason to "fix" it

While having a high level doesn't change much, medals provide a vague indication of the skills of the players you are matched with. A person dominating the server with tier 4 and level 58 is more trustworthy than a level 1 tier 1. XP exploits defeat the purpose of medals, as they are used by cheaters to seem legitimate.

teufortressIndustries avatar Jun 23 '25 10:06 teufortressIndustries

Mannpower, despite the chaotic nature, is a carefully balanced mode where the exclusive Powerups play a major role. "Farming" not only brings players who do not want to participate, making them useless team members, but it also creates an imbalance since it's required for these players to hoard some Powerups to themselves, outside of their intended use in combat. When confronted, by killing, asking to stop or calling a vote for exploiting, these players often retaliate with toxicity, which is a big problem considering it's fair to say that 90% of them are cheaters and bot hosters. A majority of them want to gain casual exp in order to get the highest level badge in order to appear less suspicious in casual matches to not get kicked.

ghost avatar Jun 23 '25 12:06 ghost

it actually hurts also people who doesnt farm xp but just play sandman, bleh

The Sandman is already overshadowed by other melees in all of TF2. This is especially the case in Mannpower since it's upside gets even more redundant due to the Grappling Hooks, and other choices which are also considered overshadowed like the Fan o' War gets much more use inside the mode. A change that makes it so you get less points (in extremely rare cases, maybe in combo with Haste?) with this melee, in exchange for getting rid of big issue like an exploit, I believe it is a trade-off with no downsides that everyone in this community is willing to take. If this patch gets pushed into the game, I'll make sure to follow the Sandman prices on bptf, and will message you if a significant drop happens due to this change.

ghost avatar Jun 23 '25 13:06 ghost

can we delete this, how am i supposed to get my level 150 tier 8 92387934th account also that ur legit butthurt over an xp glitch, please consider deleting this

Cry us a river, its never gonna get deleted :)

yo sybau my boy, we ALL agree to delete this spam post, this isnt even an exploit its a part of the game, said by robin walker now shut up, also if it existed for years and there's alot of content with it, then why valve never fixed it? seemingly it's a harmless feature so no reason to "fix" it

I don't understand? Other exploits exactly like this one have been fixed in the past. How is the exploit ever intended for the game? If it wasn't fixed for years, how does that make it NOT a problem? The fact "fixing", is the word everyone is throwing around, it would actually be evident that EVERYONE agrees it is an issue/bug in the game. It is not harmless, please read my comment and feel free to message me if you're curious about the damage it has caused to this community.

ghost avatar Jun 23 '25 13:06 ghost

i aint reading allat, dont fix ts

semipopular avatar Jun 23 '25 13:06 semipopular

i aint reading allat, dont fix ts

If you don't care, nor are willing to share, it's best you just leave the thread. Thanks you.

ghost avatar Jun 23 '25 13:06 ghost

im not a bot hoster or a cheater so idk where ur getting this info from

semipopular avatar Jun 23 '25 13:06 semipopular

im not a bot hoster or a cheater so idk where ur getting this info from

If you'd read my comment, you'd understand

ghost avatar Jun 23 '25 13:06 ghost

the exploit fix was promised 3000 years ago

semipopular avatar Jun 23 '25 13:06 semipopular

Hello folks, please try to keep comments on this issue tracker friendly and constructive. If this bickering continues, I'll be forced to step in and take action.

kisak-valve avatar Jun 23 '25 13:06 kisak-valve

Hello folks, please try to keep comments on this issue tracker friendly and constructive. If this bickering continues, I'll be forced to step in and take action.

never forget summer 2024 the day u ended bots... i love you

semipopular avatar Jun 23 '25 13:06 semipopular

@kisak-valve Thank you. Is there any outlined process to have this reviewed and/or independently tested to potentially have this merged? Or do we simply wait it out?

bijlpieter avatar Jun 23 '25 17:06 bijlpieter

@kisak-valve, who even are you? Why are you telling us to keep it friendly when you're literally a nobody? LMAO.

burgerworks avatar Jun 23 '25 17:06 burgerworks

@pseudonetic, Compared to you, Kisak has a job and is a well-respected individual.

teufortressIndustries avatar Jun 23 '25 18:06 teufortressIndustries

i think all the attention that was given to this post speaks for itself how big of a problem it is.

ciamciam avatar Jun 23 '25 18:06 ciamciam

This patch limits bonus points being applied to just once per 10 seconds. Noone playing legitimately would feasibly run into this limit.

mlemlody, after u use ball it takes 10 secs for recharge so it doesnt hurt anyone, also since when bot hoster responsible for engineer bots on mannpower cares about players? Stop crying Ur Just mad u wont be able to farm yourself

You can bypass the Sandman's cooldown by running to your own ball and picking it up. Therefore you can do multiple stuns under 10 seconds, but this fix would prevent legitimate bonus points in that scenario.

Gavitro avatar Jun 23 '25 21:06 Gavitro

@ciamciam do u hear urself? "cathook but instead of snipers they use engis" u sound like u never programmed hello word in python at elementary school

mlemlody avatar Jun 24 '25 04:06 mlemlody