ORVVIT

Mstar team, please hear at least this one thing:

You need to improve the global server's security and take some measures. As long as the server is so easily compromised and registration is so accessible, they can attack the global server 24/7. It is pointless to fix the "friends list" or "profile info," because they will just break them again. Start by securing your server and consider requiring phone number registration. Temporary numbers should not be allowed, just as temporary email addresses were excluded.

And importantly, there’s a limit of at most 2–5 unique accounts per IP address—to prevent the proliferation of alt accounts.