From 5d6c48ebf23f790b558e6ddb388f85a8b0c3c62f Mon Sep 17 00:00:00 2001
From: evanpelle <evanpelle@gmail.com>
Date: Sun, 3 May 2026 09:54:50 -0600
Subject: [PATCH] Revert "Fix winner stats spoofing exploit"

This reverts commit 819edb21bb71564d2febdd669f1ac140f8758e5c.
---
 src/server/GameServer.ts | 16 +---------------
 1 file changed, 1 insertion(+), 15 deletions(-)

diff --git a/src/server/GameServer.ts b/src/server/GameServer.ts
index 7689fcaf6..2f6175776 100644
--- a/src/server/GameServer.ts
+++ b/src/server/GameServer.ts
@@ -1,4 +1,3 @@
-import { createHash } from "crypto";
 import ipAnonymize from "ip-anonymize";
 import { Logger } from "winston";
 import WebSocket from "ws";
@@ -1201,14 +1200,7 @@ export class GameServer {
     client.reportedWinner = clientMsg.winner;
 
     // Add client vote
-    const winnerKey = createHash("sha256")
-      .update(
-        JSON.stringify({
-          winner: clientMsg.winner,
-          allPlayersStats: clientMsg.allPlayersStats,
-        }),
-      )
-      .digest("hex");
+    const winnerKey = JSON.stringify(clientMsg.winner);
     if (!this.winnerVotes.has(winnerKey)) {
       this.winnerVotes.set(winnerKey, { ips: new Set(), winner: clientMsg });
     }
@@ -1235,12 +1227,6 @@ export class GameServer {
       `Winner determined by ${potentialWinner.ips.size}/${activeUniqueIPs.size} active IPs`,
       {
         winnerKey: winnerKey,
-        numKeys: this.winnerVotes.size,
-        votesByKey: [...this.winnerVotes.entries()].map(([key, v]) => ({
-          key,
-          voteCount: v.ips.size,
-          winner: v.winner.winner,
-        })),
       },
     );
     this.archiveGame();