# Security update **URL:** \ **Category:** General Discussion\ **Created:** [September 8, 2026, 4:36pm UTC](https://forums.eveonline.com/t/security-update/517956 "2026-09-08T16:36:25Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![Geo\_Eclipse\_Oksaras](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/geo_eclipse_oksaras/32/500781_2.png) [@Geo\_Eclipse\_Oksaras](https://forums.eveonline.com/u/Geo_Eclipse_Oksaras)\ **Post date:** [September 8, 2026, 4:36pm UTC](https://forums.eveonline.com/t/security-update/517956/1 "2026-09-08T16:36:25Z")
> **[EVE Online Security Update - 8 September, 2026 | EVE Online](https://www.eveonline.com/news/view/eve-online-security-update-8-september-2026?utm_source=launcher&origin=launcher&utm_content=en)** > > We have fixed a client vulnerability that revealed in-game wallet information. ---
**Author:** ![Drosera\_Binata](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/drosera_binata/32/514743_2.png) [@Drosera\_Binata](https://forums.eveonline.com/u/Drosera_Binata)\ **Post date:** [September 8, 2026, 4:39pm UTC](https://forums.eveonline.com/t/security-update/517956/2 "2026-09-08T16:39:07Z")
we should get compensation for having our wallets exposed, maybe bonus sp or a couple extra billion ---
**Author:** ![Drosera\_Binata](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/drosera_binata/32/514743_2.png) [@Drosera\_Binata](https://forums.eveonline.com/u/Drosera_Binata)\ **Post date:** [September 8, 2026, 4:39pm UTC](https://forums.eveonline.com/t/security-update/517956/3 "2026-09-08T16:39:28Z")
that is what i said earlier today ---
**Author:** ![Power\_Armor](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/power_armor/32/413178_2.png) [@Power\_Armor](https://forums.eveonline.com/u/Power_Armor)\ **Post date:** [September 8, 2026, 4:51pm UTC](https://forums.eveonline.com/t/security-update/517956/4 "2026-09-08T16:51:12Z")
Or an offer for a free character name change? ---
**Author:** ![Hatch\_Nasty](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/hatch_nasty/32/512820_2.png) [@Hatch\_Nasty](https://forums.eveonline.com/u/Hatch_Nasty)\ **Post date:** [September 8, 2026, 5:17pm UTC](https://forums.eveonline.com/t/security-update/517956/5 "2026-09-08T17:17:42Z")
Unless you’re space uber-rich, I don’t think this exploit will significantly affect one’s target profile. It was likely the precursor to a whaling operation, and I expect a wave of contract spam to follow, aimed at the 0.1-1%. As space lower-middle-class myself, I’m not terribly worried about someone learning my pathetic wallet balance. ---
**Author:** ![Drosera\_Binata](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/drosera_binata/32/514743_2.png) [@Drosera\_Binata](https://forums.eveonline.com/u/Drosera_Binata)\ **Post date:** [September 8, 2026, 5:21pm UTC](https://forums.eveonline.com/t/security-update/517956/6 "2026-09-08T17:21:49Z")
me neither, i spend it whenever i am above 30 mil, i went broke on a leshak a while ago ---
**Author:** ![Haoyu\_Miyu](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/haoyu_miyu/32/510486_2.png) [@Haoyu\_Miyu](https://forums.eveonline.com/u/Haoyu_Miyu)\ **Post date:** [September 8, 2026, 7:17pm UTC](https://forums.eveonline.com/t/security-update/517956/7 "2026-09-08T19:17:04Z")
That’s just weird. How can someone gain access to the wallet or create a snapshot of it just by sending a donation? And above all, are we now supposed to believe that it really only affected the wallet? I vote for a free namechange for all affected characters as a compensation. ---
**Author:** ![Geo\_Eclipse\_Oksaras](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/geo_eclipse_oksaras/32/500781_2.png) [@Geo\_Eclipse\_Oksaras](https://forums.eveonline.com/u/Geo_Eclipse_Oksaras)\ **Post date:** [September 8, 2026, 7:27pm UTC](https://forums.eveonline.com/t/security-update/517956/8 "2026-09-08T19:27:32Z")
the blog states they modified their clients.. there was a 5th name. Stroopwafel says they don’t believe it was tied to ESI usage. ---
**Author:** ![Drosera\_Binata](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/drosera_binata/32/514743_2.png) [@Drosera\_Binata](https://forums.eveonline.com/u/Drosera_Binata)\ **Post date:** [September 8, 2026, 7:33pm UTC](https://forums.eveonline.com/t/security-update/517956/9 "2026-09-08T19:33:49Z")
nooooo, i dont want to change my name, i want skill points or isk ---
**Author:** ![Meridan\_Night](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/meridan_night/32/488304_2.png) [@Meridan\_Night](https://forums.eveonline.com/u/Meridan_Night)\ **Post date:** [September 8, 2026, 7:59pm UTC](https://forums.eveonline.com/t/security-update/517956/10 "2026-09-08T19:59:26Z")
That is very disconcerting. It obviously wasn’t done just for curiosity. What I’m wondering is, how they got the names. 2/3 of my characters were affected, and I can’t see a common denominator as of yet. Only 2 were possibly online at the time. Even one of my characters whom I hadn’t logged on since February-March was affected (no kb record on him, or other publicly available records). So where did they take the character names from? There were a million of them! You don’t just pull that out randomly, you need a database of character names. > [@Haoyu\_Miyu](#): > > I vote for a free namechange for all affected characters as a compensation. I don’t want to change the name of my character. I want security that vulnerable/private information about my characters is not accessible to third parties through something as simple as donations of 0 isk and the like. ---
**Author:** ![Meridan\_Night](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/meridan_night/32/488304_2.png) [@Meridan\_Night](https://forums.eveonline.com/u/Meridan_Night)\ **Post date:** [September 8, 2026, 8:05pm UTC](https://forums.eveonline.com/t/security-update/517956/11 "2026-09-08T20:05:37Z")
> [@Haoyu\_Miyu](#): > > How can someone gain access to the wallet or create a snapshot of it just by sending a donation? They technically forced a character’s wallet balance to ‘change’ even though in reality it didnt. And since it ‘changed’, they were then somehow able to ‘read’ that change or the updated value on their end. ---
**Author:** ![Namdor](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/namdor/32/396179_2.png) [@Namdor](https://forums.eveonline.com/u/Namdor)\ **Post date:** [September 8, 2026, 8:11pm UTC](https://forums.eveonline.com/t/security-update/517956/12 "2026-09-08T20:11:42Z")
> [@Meridan\_Night](#): > > That is concerning. It obviously wasn’t done just for curiosity. What I’m wondering is, how they got the names. Names are easy. There is an ESI endpoint that returns public details given a characterID. You could either brute force IDs through that or scrape them from zkill/evewho/anyone else already enumerating them. > [@Meridan\_Night](#): > > And since it ‘changed’, they were then somehow able to ‘read’ that change or the updated value on their end. Speculating from the limited FC commentary, my guess is that the balance was sent back as a response to the donation, but the Eve client has no way to report or display this so it just goes into the void. A modified client or just snooping the resulting network traffic could make that value visible. ---
**Author:** ![Asgidur\_Hurtini](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/asgidur_hurtini/32/494282_2.png) [@Asgidur\_Hurtini](https://forums.eveonline.com/u/Asgidur_Hurtini)\ **Post date:** [September 8, 2026, 8:22pm UTC](https://forums.eveonline.com/t/security-update/517956/13 "2026-09-08T20:22:38Z")
Cheat Engine can read memory very easy. Now I understand why they updating Python. I wonder how many updates are actually security holes being fixed. ---
**Author:** ![Meridan\_Night](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/meridan_night/32/488304_2.png) [@Meridan\_Night](https://forums.eveonline.com/u/Meridan_Night)\ **Post date:** [September 8, 2026, 8:24pm UTC](https://forums.eveonline.com/t/security-update/517956/14 "2026-09-08T20:24:29Z")
> [@Namdor](#): > > evewho Didn’t realize that that dumpster profiles everyone, even characters that have no kb or any public records. I guess I will now be getting a lot of phone calls from Ukraine. ---
**Author:** ![Geo\_Eclipse\_Oksaras](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/geo_eclipse_oksaras/32/500781_2.png) [@Geo\_Eclipse\_Oksaras](https://forums.eveonline.com/u/Geo_Eclipse_Oksaras)\ **Post date:** [September 8, 2026, 8:25pm UTC](https://forums.eveonline.com/t/security-update/517956/15 "2026-09-08T20:25:43Z")
They said it had nothing to do with the updates ---
**Author:** ![Namdor](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/namdor/32/396179_2.png) [@Namdor](https://forums.eveonline.com/u/Namdor)\ **Post date:** [September 8, 2026, 8:25pm UTC](https://forums.eveonline.com/t/security-update/517956/16 "2026-09-08T20:25:50Z")
> [@Asgidur\_Hurtini](#): > > Cheat Engine can read memory very easy. > > Now I understand why they updating Python. I wonder how many updates are actually security holes being fixed. There is no version of python that would or could prevent someone from being able to access the balance if it is being sent to the client. ---
**Author:** ![Asgidur\_Hurtini](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/asgidur_hurtini/32/494282_2.png) [@Asgidur\_Hurtini](https://forums.eveonline.com/u/Asgidur_Hurtini)\ **Post date:** [September 8, 2026, 8:30pm UTC](https://forums.eveonline.com/t/security-update/517956/17 "2026-09-08T20:30:15Z")
I know, my point is, there must be worse stuff around. ---
**Author:** ![Hatch\_Nasty](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/hatch_nasty/32/512820_2.png) [@Hatch\_Nasty](https://forums.eveonline.com/u/Hatch_Nasty)\ **Post date:** [September 8, 2026, 8:38pm UTC](https://forums.eveonline.com/t/security-update/517956/18 "2026-09-08T20:38:13Z")
> [@Meridan\_Night](#): > > 2/3 of my characters were affected, and I can’t see a common denominator as of yet. Only one of mine (me). I don’t have a sample size large enough to postulate a theory, but Hatch is one of only two characters I own that are affiliated with a big null bloc (and the second, only tangentially). I’d be curious how many of those affected were in large alliances, and how many were in random one-man corps, NPC corps, etc. If I were gathering intel for a whaling operation, I’d definitely focus on the waters of nullsec. That is, after all, where you’ll find the biggest whales. EDIT: Of course, thinking more on that, I’d probably also want to obscure my intended target(s), so I’d scatter the shots to create noise… ---
**Author:** ![Drosera\_Binata](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/drosera_binata/32/514743_2.png) [@Drosera\_Binata](https://forums.eveonline.com/u/Drosera_Binata)\ **Post date:** [September 8, 2026, 8:42pm UTC](https://forums.eveonline.com/t/security-update/517956/19 "2026-09-08T20:42:12Z")
it happened to me as well ---
**Author:** ![Arygos\_Spirestone](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/arygos_spirestone/32/510492_2.png) [@Arygos\_Spirestone](https://forums.eveonline.com/u/Arygos_Spirestone)\ **Post date:** [September 8, 2026, 8:44pm UTC](https://forums.eveonline.com/t/security-update/517956/20 "2026-09-08T20:44:20Z")
The funny thing is that i had a 2 1/2 year break and just recently (~maybe 2 weeks) looked back into the game to see if it is worth to upgrade from alpha to omega again. All my 3 accounts recieved this “donation”. Cant say that im now hyped to upgrade to omega again 🙂 [Next page](https://forums.eveonline.com/t/security-update/517956.md?page=2)