In the past days, many players have contacted me saying their Steam accounts were compromised. Hackers are using those stolen accounts to buy Legend of Himari items on the Steam Community Market for absurdly high prices.
These are player-to-player transactions. The money goes from one user’s wallet to another, not to me as the developer. That means I cannot refund or reverse them — I have no access to those transactions.
Unfortunately, Steam support often redirects players back to ME, even though I have no tools to fix Community Market trades. I can only refund in-game purchases, not market deals between players.
All items in Legend of Himari drop just by playing the game. I don’t sell them directly - they are earned in-game. If you see them on the Steam Community Market, that’s purely players trading with each other, not me selling.
I can remove items from a player’s inventory, but only if I already know their SteamID and the exact item ID. But I cannot see who is selling items on the Steam Market. Steam does not share seller information with developers.
I cannot ban someone from using the Steam Market. Only Valve controls trading and the Community Market. I cannot cancel or refund a transaction once an item is sold on the Market — that is fully handled by Valve.
It is almost impossible for me to track down which specific player is listing items for sale, since Steam hides that data.
I can manage items inside the game, but I have no control over what happens on the Steam Market.
At this moment, Valve hasn’t taken action to stop this issue or provide developers with a way to protect players from such scams. For example, I would like to set a maximum price for my items on the trading platform, but I am unable to do so at present.
Also one obvious fix would be for Valve to remove the option to buy items at custom prices. Players should only be able to purchase the cheapest available listing. That alone would close the loophole hackers are exploiting.
I’m very sorry my game is being misused like this. If this happens to you, please contact Steam Support and clearly state it was an unauthorized Community Market purchase.
Also secure your account: change your password, enable Steam Guard, deauthorize devices, and revoke your API key.