WARNING:
The following people just abused and stole $350+ from my game:
@jeksao
@bomsdao
@brains
@saedao
Yes, they will be banned.
The way they did this was through rent farming. On Solana, the only native token that works in your wallet is SOL. If you'd like to send someone $FLUX (my game's token), you need to pay rent for something called an ATA.
However, you can redeem this rent and take the SOL that the sender paid on your behalf.
So they earned $FLUX in-game, then sent it outside of the game to their wallet. My game pays for all gas/txns, so we paid the ATA rent. Then they redeemed the rent for SOL.
They did this over an over for hours until I noticed my game's wallet went from 4.5 SOL to 1.2 SOL
Thanks for teaching me a lesson in security, I'm glad it happened while game is small :)