Yeah, there was no hijacking of a server-side websocket at all, just sending client socket messages to the server since there is no auth or ratelimiting. Sucks thats it’s so frequent, ruins the experience. You can essentially do this to any websocket you’re connected to.