Actually, we’ve never been federated with Hexbear. It was blocked before they started federating with other instances.

Thank you. A message will be posted soon in the Android community. Good catch to make sure everyone is informed.

Pretty much. The hacker sent me a DM with the emoji which contained the malicious code. All I did was open and read it. I’m proud of the team that worked until 2 AM to not only revert the changes, but fix the exploit.