The Jay Amazingness Heist: A Director's Goodbye (2023)

The Jay Amazingness Heist: A Director's Goodbye (2023)

Background: Jay Amazingness, Goonswarm Director and FC

Jay Amazingness's character was created on 6 August 2013 in the School of Applied Knowledge corp where every new Caldari capsuleer starts. Within a few years he had become a celebrated titan pilot and fleet commander inside the Imperium, the post-Karttoon Goonswarm-led coalition that The Mittani had spent the early 2010s rebuilding.

The 2016 Casino War was where the corpus first picks him up by name. Wilhelm Arcturus's 26 July 2016 TAGN post "Held Over in Rakapas" opened with a Jay-tagged broadcast at the top of the piece: "i hate rakapas." Goonswarm was in the middle of the chaotic evacuation move-op out of Deklein that defined that war; Jay was running the move ops as FC, parking the Goon supercapital fleet on staging Astrahuses while the alliance found its new home in Delve. The post is one of the best contemporaneous accounts of what it felt like to be a Goon line pilot under Jay's fleet command during the migration.

By August 2018 he had a celebrated profile inside the Imperium for his work as a titan pilot in the Four Keepstars Fight at X47L-Q. INN's 7 August 2018 piece "The Adventures of Jay Amazingness" by Rhom Achensa is the canonical pre-heist character profile. It told the story of Jay rescuing a near-doomed Goonswarm Erebus called "Sir Edmund" by burning across the field in his own titan to absorb damage; of his Lif FAX bumping an NC titan named Sn8kez out of safe range so the rest of his fleet could land jump-clones; of his Boson-doctrine dread blobs cleaning up enemy dreadnoughts at scale. The profile was the kind of in-narrative valourisation that Imperium News reserved for its own beloved figures. Rhom's closing line of the piece read: "Hopefully we will see Jay doing many more amazing things for the Imperium."

Jay took a hiatus from the game after 2020 (his last killmail surface on eve-kill was 17 September 2020, four months before he stopped logging in). When he returned in 2023, Asher Elias - then Karmafleet commander and one of the most respected line FCs in Goonswarm Federation - restored him to Director-level access. By the time of the heist, Jay held the trust and the permissions to act unilaterally on the alliance's central holdings. Asher's eventual public statement opened with the line that fixed the dramatic-irony spine of the whole story: "I would say that he's the person I trust the most in EVE."

In-game bios change after the fact, but Jay's post-heist bio is preserved on eve-kill.com's character profile and quotes a verbatim self-framing: "We need the villain sometimes. It makes for an interesting story."

Three minutes before downtime, 14 November

On the morning of 14 November 2023, three minutes before EVE Online's daily downtime, Jay logged into his Director account on the Imperial Palace Keepstar in 1DQ1-A and started off-lining service modules in sequence.

In EVE, off-lining a Cloning Bay service module on an Upwell structure destroys every clone stored in that bay. Off-lining a Market service module returns all active market orders to the corp wallet, but if the corp has no isk on hand to pay back the posting taxes, the taxes are forfeited. Off-lining a Manufacturing Plant returns all active jobs. None of these are reversible on the timescale of one downtime cycle, and Jay timed his action so the next downtime would land between the off-line action and any possible counter-response from another director.

The Imperial Palace was the central Keepstar of Goonswarm Federation. Its cloning bays held an estimated 52,670 capsuleer clones - effectively, the spawn-points for most of Goonswarm's active line membership. INN's FroggyStorm later catalogued a parallel sabotage at "Do Not Use Thetastar," a sister Keepstar in the same system, which held another roughly 13,000 clones. Both went at the same time.

While the off-line timers ran, Jay used his Director permissions to empty corp hangars. Hand-out hangars storing ammunition, modules and rigs were drained; fuel hangars were pulled (a Keepstar without fuel goes vulnerable in seven days); capital and supercapital ships parked in corp hangars including multiple titans were transferred to his own holding corp. Working in parallel through the alt character Moody Princess on the other side of the cluster, he ran the same drain on the alliance's Jita 4-4 corporate offices.

FroggyStorm's post-event reconstruction fixed the timing precisely: "3 minutes before downtime on November 14." The choice was not accidental. Three minutes before downtime is the longest contiguous in-game window in which no other capsuleer can hot-drop a counter-fleet, no CCP intervention can be requested through a stuck-character petition, and no rival director can log on through the alliance's normal channels. Downtime then froze the world for fifteen minutes; when it came back up, the off-line timers had completed and the action was irreversible.

The deliberate timing also overshadowed the Havoc expansion deployment that same morning. CCP shipped the patch into the live cluster on 14 November 2023; pirate-faction insurgencies were the headline feature; ten thousand Goons logged in expecting to spool up their new insurgency content and found their Imperial Palace cloning bays smouldering instead.

Asher Elias's "fuckgoons" post and the public reckoning

Within hours, Asher Elias posted a public statement to the r/Eve subreddit titled "Asher addresses the 1DQ Clone Incident." The statement was period-honest in a way that journalism rewriting would have softened. Asher led with personal credit before he led with damage assessment:

I've known Jay for a decade. I consider him a good friend. We've seen each other in real life on multiple occasions. I would say that he's the person I trust the most in EVE.

I don't know why it's happened. There is a small chance he was hacked, but it doesn't look that way. Personally, I'm very hurt.

fuckgoons

The closing "fuckgoons" was Asher quoting Karttoon's own February 2010 tell-all signoff back at the Imperium - the SomethingAwful-coded farewell that ran "Tl;dr: Fuck pubbies, fuck eve, and :fuckgoons:" The 2010 tell-all is canonical Goon lore; an Asher post closing with the same word was a sharper reading of what Jay had just done than any of the press would later land.

Merkelchen, the longtime Karmafleet CEO whose corp had absorbed many of the Goons Asher had recruited, posted his own statement that took the longest possible view: "We have been burned before by putting trust in people that were our friends and we will be burned again someday. This is EVE."

Mind1's streamed reaction that evening was widely shared as community-color commentary; among the Reddit threads that followed, "Cry Havoc and let slip the dogs of war" took the top slot with a pun-title that bundled the Havoc expansion-name into the heist-context the same way the in-game playerbase had: the two had landed on the same day, but the heist was what people would remember.

Defection to Sniggerdly: Pandemic Legion's hand in the heist

Within twenty-four hours of the off-line action, Jay's main character had transferred to Sniggerdly, the founding corporation of Pandemic Legion. The defection was the load-bearing structural difference between this heist and most prior insider sabotages in the corpus: Jay was not walking off to start his own thing or to vanish into a quiet alt; he had been recruited, in advance, by Goonswarm's long-running rival.

Joseph Bradford's 21 November 2023 MMORPG.com deep-dive carried the canonical PL-internal account. Grarr Dexx, in PL Discord, said Jay had been "in dialogue for the better part of two months to glean their upper leadership's plans and intentions" and had only signed onto the heist plan once the structural payoff was clear. Hedliner, PL's longtime fleet-commander figure, framed the recruitment in cleaner terms: Jay had "friends here for years and maintained a dialogue with them," and the move out of Goonswarm was something Jay had been weighing for months before the trigger moment.

Peter "CCP Swift" Ferrell, CCP's community developer, gave the deep-dive the framing that landed in the headline: this was a "Reverse Uno card" played against Goonswarm. Goonswarm had effectively invented the modern mass-defection move during the Haargoth Agamar BoB disband in 2009, and had been on the receiving end of its own signature opening here. As a piece of EVE-as-genre-revival framing it was both honest and self-aware in a way CCP statements rarely manage.

One Titan was reportedly resold by Pandemic Legion back to Goonswarm in the days that followed, per Grarr Dexx's account; that detail is Dexx-unverified rather than confirmed in screenshots or killmails, but it landed in enough press accounts to enter the period record.

The post-heist bio quoted earlier ("We need the villain sometimes. It makes for an interesting story.") was set on Jay's character page after the move to Sniggerdly and remained the public-facing self-frame through the inactive window that followed.

CCP's "this is EVE" response, and the 70% the server saved

Ferrell's interview with MMORPG.com gave the cleanest CCP-side account of the developer reaction: "It was totally nuts. We were sitting in the office and got the first reports and just went, 'No, this can't be real.'" The CCP team's first reaction was to verify the action against their own server logs and conclude that yes, this was real, and yes, the off-line timers had completed.

CCP did not intervene. The precedent here was M2-XFE in December 2020, the legendary World War Bee II battle that had triggered CCP's standing policy on player-driven irreversible outcomes: what happens at downtime stands. CCP would not roll back the heist, and when Pandemic Legion later filed a ticket asking CCP to retroactively destroy the clones that had been saved by the downtime cutoff, CCP wouldn't finish that job either. The rule cut both ways: neither the loser nor the winner of an at-downtime action could ask CCP to clean it up after.

Roughly 70 percent of the clones in the Imperial Palace were saved by the downtime cutoff, per Asher's post-event accounting. The off-line timers on the cloning bays had completed before downtime, but the clone destruction logic itself only triggered for jump-clones that had been moved into the bay before the off-line action started. Clones that had been spawned into the bay during the active off-line window did not get destroyed when downtime hit, and the surviving clones were redistributed in the days that followed to other Goonswarm Keepstars across Delve and Querious.

The market-tax mechanic landed differently. Pulling the Market service module returned every active market order back to the corporation that had posted it, with the posting taxes forfeited. Pandemic Legion, having received the assets through Jay's holding-corp transfer, briefly set its new market tax to 0% as a half-hearted gesture toward the line members who were trying to relist the millions of returned orders. The 0% tax was a stunt rather than a real remediation - the players who had posted orders had already lost the original posting tax - but it was the kind of self-aware piece of theatre PL specialised in.

ISK estimates of the total damage ranged across the press in the days that followed. Press estimates ranged from DaOpa's PL-Discord-sourced 4-to-6 trillion ISK to "trillions" aggregate framings across MMORPG.com, TechRadar, and Mein-MMO. No single canonical figure was ever published; the Imperium's own internal damage report, if one existed, was not surfaced publicly. MMORPG.com's subhead positioned it as a candidate for the largest single heist in EVE history; that claim depends on which prior-event ISK figures one accepts. The Karttoon 2010 one-trillion-ISK estimate was for an alliance one-tenth the size of the modern Imperium in nominal asset terms, so a 4-to-6T figure on the modern Goonswarm passes a back-of-the-envelope plausibility check.

Scopeh's PHP source-code release: the same day's adjacent leak

The same morning, an ex-Goon developer working under the handle Scopeh (Helious Jin-Mei in-game) released the source code of Goonswarm's internal PHP web tooling on GitHub. The release included the Black Hand spy-management application and the Augswarms shared-logins system, both of which had been built and maintained for the alliance over years of volunteer dev work.

Helious had been kicked from Goonswarm for inactivity in the weeks prior to the release. The Reddit thread carrying the announcement was rapidly reported into removal by GSF-coordinated reporting (the title that survived in the URL slug, "removed_by_reddit_spying_suppression_and_the," is what was left after Reddit's abuse-report-threshold auto-removal); Helious was briefly auto-banned by Reddit's report-abuse cascade as a side-effect of the same coordinated reporting wave. The repository on GitHub stayed up for long enough that the spy-tool source got mirrored across multiple intelligence-research surfaces inside the broader EVE political ecosystem.

The community speculation that Scopeh's removal had been one of Jay's defection triggers ran for a few days but never produced documentation; both events landed independently on the same morning. Whether they were structurally coordinated or just chronologically parallel, the result was the same: November 14, 2023 turned into a coordinated-feeling GSF-targeted leak day, the kind of public spectacle the EVE press loves and the alliance's own newspaper Imperium News had to cover from inside the impact zone.

Aftermath: the modern bookend of the EVE-heist lineage

FroggyStorm closed the original INN "Attack On The Clones" piece with a framing that the corpus has been quoting back at itself ever since: "Jay's actions underscore how critically important the players are in creating the story of EVE. CCP, please let the players be the story."

Wilhelm Arcturus's TAGN piece the following day was titled "Jay Amazingness Goes Karttoon on Goons" - a direct genre reference to the Karttoon 2010 disbandment. The thesis was that the modern Imperium absorbed the loss in a way the 2010 Goonswarm could not have. The heist landed materially in trillions of ISK, but the alliance did not fragment, did not lose sovereignty, did not stop fielding fleets. Wilhelm framed it plainly: "after Karttoon, this all seems a bit tame."

The lesson of Karttoon had been baked into Imperium institutional structure for thirteen years by 2023: no single director should hold unilateral wallet access; the alliance ran a network of holding corps and wallet-segregation rules specifically because Karttoon had walked off with everything in a single Director session. The Jay heist showed that the wallet-segregation rules had held - the ISK destruction was real but contained - but that the Cloning Bay attack surface was something nobody had thought to compartmentalise. After Jay, the standing recommendation across nullsec was to distribute cloning across multiple Keepstars rather than concentrate it in one Imperial Palace.

The Jay heist is the modern bookend of an EVE-heist lineage that opened with Cally's 2006 EIB Ponzi, the first English-language EVE bank scam in mainstream tech press. Seventeen years separate the two events. The mechanic in both cases is the same: an insider held some form of trust-economy access that the rest of the alliance had agreed to be vulnerable to, and weaponised it. Cally walked off with 790 billion ISK; Jay walked off with multiple trillions. The EVE economy has scaled by orders of magnitude across the gap, but the structural truth has not changed. Trust in EVE is a service the players provide to each other, and any insider with director-level access can revoke that servuce in a way the game mechanics will allow.