Anonymous Leaker Dumps 125GB of Twitch Source Code and Creator Payouts

Amazon-owned livestreaming platform Twitch confirmed today that a malicious actor exfiltrated approximately 125 gigabytes of internal data after exploiting what the company describes as an "error in a Twitch server configuration change."

The data, posted as a torrent on 4chan, includes the entire Twitch source code repository with comment history, internal red-team tooling, an unreleased Steam competitor codenamed "Vapor," and three years of detailed payout data for individual content creators. The leak is labeled "part one" by the anonymous poster, suggesting additional dumps may follow.

The payout records have already become a viral topic on social media as users sift through the gross revenue figures for top streamers. The figures vary widely: the top creator received an estimated $9.6 million across the disclosed period, while many established mid-tier streamers received six-figure annual payments not counting subscriber and advertising revenue collected directly.

"Login credentials and full credit card numbers were not exposed," Twitch wrote in a blog post. "Out of an abundance of caution we have reset all stream keys."

Security researchers note that the leak's value is not limited to source code: internal documentation and tooling can dramatically lower the bar for future attacks against Twitch and its ecosystem of third-party developers. Amazon Web Services credentials referenced in some of the leaked files have presumably been rotated.

The anonymous poster framed the leak as a protest against what they describe as a toxic streaming community, claiming the goal was to "foster more disruption and competition in the online video streaming space."