I know that taking the instance offline isn’t an easy decision but it was the right choice to make until the exploit was patched.

For those who weren’t aware, from my understanding there was an exploit with custom emoji on the Lemmy front end that allowed a malicious script to be ran, which was stealing login cookies. This started on Lemmy(dot)world.

This seemed to have been patched this morning.

From what I’ve seen it didn’t seem to propagate through federated comments but never can be too careful.

Thanks crash and admin/mod team for keeping us safe 🙂