Is RoPro Gold – Exclusive Roblox Features safe?

Medium risk

RoPro Gold replaces Roblox purchase controls with RoEarn buttons that open roearn.io.

On Roblox pages, its content scripts hide normal purchase buttons for catalog assets and game passes and insert RoEarn promotion buttons instead. When clicked, those buttons open roearn.io, and the related code queries Roblox authenticated catalog APIs while running on roblox.com.

RoPro Goldv8Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Roblox purchase controls are replaced with RoEarn promotion buttons.

On Roblox item or game pass purchase pages, the extension changes the buying controls: it hides Roblox purchase buttons, inserts RoEarn promotion buttons, and opens roearn.io when those buttons are clicked.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-506
Source
Dynamic sandbox
What actually happens
You did this

The user opens Roblox item or game pass pages with purchase controls.

The extension did this

The extension replaces Roblox purchase controls with RoEarn promotion buttons that open roearn.io.

Captured request
POSTroearn.io
Fields in the affected page context
  • Your browsing URL
    https://www.roblox.com/catalog/123456789/example-item (illustrative)

    Shows which Roblox purchase page or listing was being viewed when the extension changed the controls.

  • Page content
    .shopping-cart-buy-button.item-purchase-btns-container (illustrative)

    Includes the visible Roblox page structure that the extension uses to find and replace purchase controls.

  • Referrer page
    https://www.roblox.com/discover (illustrative)

    Can show the page that led to the affected Roblox purchase view.

Observation

Observed during dynamic analysis: the extension matched Roblox pages, hid Roblox cart and game pass purchase controls, and opened roearn.io from the inserted promotion buttons.

Where it sends data

Destinations our analysis observed RoPro Gold contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • roearn.io

    RoPro Gold sends data to roearn.io. One other extension we have analysed sends data here.

Updated 21 September 2026egpcfopiilgfgmonpjpapidcmoecoenh