Twitch source code, creator revenue, passwords leaked by hacker

Twitch source code leaked by anonymous hacker. Streamer payouts also leaked.

Twitch source code appears to have been leaked by an anonymous hacker, including streamer payout reports.

A 126GB torrent has been uploaded to 4chan, describing the Twitch community as a “disgusting toxic cesspool”. The intention for the leak is to “foster more disruption and competition in the online video streaming space”.

According to the 4chan post, the leak reportedly includes the following:

Entirety of twitch.tv, with commit history going back to its early beginnings
Mobile, desktop and video game console Twitch clients
Various proprietary SDKs and internal AWS services used by Twitch
Every other property that Twitch owns including IGDB and CurseForge
An unreleased Steam competitor from Amazon Game Studios
Twitch SOC internal red teaming tools
Creator payout reports dating back to 2019

The 4chan post also included the #DoBetterTwitch hashtag. A similar hashtag was originally set up by marginalised streamers to push Twitch to improve safety measures on the platform and prevent hate raids.

Streamers also organised #ADayOffTwitch to protest against the streaming platform, but this leak is not linked to this community.

Users have now begun sorting through data on the torrent, including publishing streamer revenue numbers.

https://t.co/7vTDeRA9vt got leaked. Like, the entire website; Source code with comments for the website and various console/phone versions, refrences to an unreleased steam competitor, payouts, encrypted passwords that kinda thing.
Might wana change your passwords.
— Sinoc (@Sinoc229) October 6, 2021

Twitch source code, creator revenue and passwords leaked in hack

In a significant leak, an anonymous hacker seems to have leaked all of Twitch, including its source code. The user released a torrent on 4chan containing 128GB worth of information. We won’t be linking to the original post here due to the sensitive nature of the content.

The poster stated that made a point of Twitch being a subsidiary of Amazon and went on to say that “their community is also a disgusting toxic cesspool” and that they wanted to “foster more disruption and competition in the online streaming space.”

One of the major items included in the leak is the creator payout reports from 2019 up to now, the user stating, “find out how much your favorite streamers is really making!” On top of this, it seems that Twitch is working on a Steam competitor from Amazon Game Studios, currently codenamed “Vapor.” Most dangerously, passwords have been included in the leak, so if you have a Twitch account, it’s recommended you change your password and have Two-Factor Authentication (2FA).

This leak comes hot off the heels of Twitch coming under fire for their lack of appropriate response to the continuous hate raids that have been happening on their platform. The hate raids have, in particular, targeted marginalized identities, including BICOP and LGBTQIA+ people, but it’s unclear whether this hack is meant to be a response to Twitch’s inaction or a general dislike of the service.

The original post did include the hashtag “DoBetterTwitch,” a tag used on Twitter as a way for creators on the platform to ask for better tools to battle the hate raids and a general call for improvements on things like creator revenue. The inclusion of the hashtag doesn’t necessarily mean that this was the intention of the hacker, as including passwords just puts more people at risk.

The entirety of Twitch has reportedly been leaked

Source codes and user payouts among the data released in a 128GB torrent

An anonymous hacker claims to have leaked the entirety of Twitch, including its source code and user payout information.

The user posted a 125GB torrent link to 4chan on Wednesday, stating that the leak was intended to “foster more disruption and competition in the online video streaming space” because “their community is a disgusting toxic cesspool”.

VGC can verify that the files mentioned on 4chan are publicly available to download as described by the anonymous hacker.

One anonymous company source told VGC that the leaked data is legitimate, including the source code for the Amazon-owned streaming platform.

Internally, Twitch is aware of the breach, the source said, and it’s believed that the data was obtained as recently as Monday. We’ve requested comment from Twitch and will update this story when it replies.

The leaked Twitch data reportedly includes:

The entirety of Twitch’s source code with comment history “going back to its early beginnings”
Creator payout reports from 2019
Mobile, desktop and console Twitch clients
Proprietary SDKs and internal AWS services used by Twitch
“Every other property that Twitch owns” including IGDB and CurseForge
An unreleased Steam competitor, codenamed Vapor, from Amazon Game Studios
Twitch internal ‘red teaming’ tools (designed to improve security by having staff pretend to be hackers)

Some Twitter users have started making their way through the 125GB of information that has leaked, with one claiming that the torrent also includes encrypted passwords, and recommending that users enable two-factor authentication to be safe.