Meccha Chameleon Developer Fixes Major Discord and Steam Breach

After what has been unprecedented commercial success, Meccha Chameleon developer Lemorion_1224 has confirmed that two downloadable, and now removed, user-created maps via Steam Workshop contained malware and that the game’s official Discord was hacked over the past weekend.

Meccha Chameleon Developer Fixes Major Discord and Steam Breach
Key Takeaways
  • Developer Lemorion_1224 released Patch 3.1.0 to eliminate a severe vulnerability that allowed user-created Steam Workshop maps to execute malware.
  • The security breach originated from a compromised admin account on the official Discord server, which attackers used to promote an infected map titled “Laser Tag Neon.”
  • The game’s client is now secure, but players who downloaded custom maps prior to the patch are advised to run a full system malware scan.

Meccha Chameleon has been a massive commercial success, selling over 15 million copies in less than a month and reaching a peak of 340,000 concurrent players.

However, this explosive PC-only growth recently attracted malicious actors, resulting in a severe security compromise with two user-created maps removed from Steam Workshop for containing malware. Meanwhile, the game’s official Discord server was also hacked.

In response to this targeted attack, developer Lemorion_1224 deployed Patch 3.1.0 to secure the Meccha Chameleon client against compromised community files.

What Caused the Meccha Chameleon Malware Breach?

The breach occurred when malicious actors compromised an admin account on the official Meccha Chameleon Discord server.

By bypassing two-factor authentication, the attackers banned existing staff members and subsequently uploaded infected custom maps to the Steam Workshop, exploiting the game’s file architecture to distribute malware.

As the game is a PC-exclusive title deeply integrated with Steam. There is no risk to console players, as the game does not exist on platforms like PlayStation or Xbox, and the vulnerability is strictly tied to the Steam client.

The attackers used the compromised Discord to promote a malicious Steam Workshop map titled “Laser Tag Neon” and later Chroma Grid Arena. Players who subscribed to this map unknowingly downloaded an executable payload alongside the standard game files.

According to Valve’s Steam security guidelines, user-generated content must remain sandboxed, a protection this specific breach temporarily circumvented.

How Does Patch 3.1.0 Protect Players?

Developer Lemorion_1224 moved swiftly to deploy version 3.1.0, which completely overhauls how the game client reads Workshop files.

The patch strips execution privileges from custom map directories, ensuring that unauthorized external payloads cannot launch alongside the core game application.

In their official communication, the development team confirmed they have regained full control over the Discord server and implemented stricter internal access policies.

For players navigating the aftermath, the studio provided clear directives based on recent in-game activity.

Is Meccha Chameleon Safe to Play Now?

Following the rapid deployment of Patch 3.1.0 and the recovery of the community server, the immediate threat to the player base has been neutralized.

New players installing the title today are protected by the revised file architecture and isolated from the compromised Workshop data. Players are advised to keep automatic updates enabled to ensure continuous protection moving forward.


Read this post in:

Share:

Download the Allkeyshop Browser Extension Free

For all the latest video game news, trailers, and best deals, make sure to bookmark us. You can find all the best and cheapest online deals on CD keys, game codes, gift cards, and antivirus software from the verified CD key sellers on our store pages.
To not miss any news on Allkeyshop, subscribe on Google News .

MORE RELEVANT ARTICLES