s1xteen: The Real Story Behind the Black Hole Bypass Shutdown

Overview

Black Hole was a paid FiveM bypass that operated for roughly eight months. On the day the project shut down, its owner s1xteen posted a public farewell claiming that his developer, known as Morning or Hitaloy, had been caught extorting customers and that s1xteen personally shut the project down to protect the community. Customers were told they would be migrated to a successor project and were pointed at a new Discord invite.

Shortly after that announcement, the operator on the receiving end of the customer migration deal posted a rebuttal with receipts. His account was that s1xteen had approached him wanting to shut Black Hole down, negotiated a customer handover at 50 USD per public user and 100 USD per private user on a split of the transfer fee, and that he had accepted the ticket load to keep the community from being stranded. Separately, and around the same time, he had paid s1xteen a few hundred dollars for other work that was never delivered. s1xteen told him at the time that the developer Morning was the one responsible for the missing work, and he believed it. Only later, once Morning stopped being extorted and could talk, did it come out that Morning had nothing to do with any of it and that s1xteen had planned the whole thing. Once he understood that, the successor operator refused to pay s1xteen any portion of the migration split and took on the migrated customers directly at his own cost.

Morning, the developer publicly named as the villain in the shutdown post, posted his own reply shortly after. His statement was that Black Hole was originally his and Tryhard's project, that he had made the mistake of transferring Discord ownership to s1xteen for administrative reasons and had never been able to get it back despite asking multiple times, and that s1xteen had been the one blocking product updates on cost grounds while letting customers believe the delays were on Morning. Separately, the successor operator's rebuttal disclosed that members of the same Black Hole development team had been quietly working with him on alternate accounts for months because s1xteen was extorting them with threats to leak their personal information, home addresses and family details if they stopped.

There is also a separate detail that neither the shutdown post nor Morning's reply mentions and that is worth surfacing here for accuracy. The infrastructure Black Hole ran on did not shut itself down and s1xteen did not shut it down either. Morning did. Morning was also on record with a second developer discussing turning the VPS off and holding it in that state until s1xteen paid to bring it back online. That does not undo s1xteen extorting the developers for months. It does mean the shutdown itself was closer to a hostage situation over payment than to the protective-gesture framing in the farewell post.

Identifiers

Recorded so people running from an alt account or a rebrand can be matched back to the same operator.

The wallet address is included so that anyone offered a source code sale, a migration deal or a private product from s1xteen can check whether the destination address matches. If it does, this is the same operator and the history in this post applies.

The Shutdown Post (s1xteen's Version)

Posted to the Black Hole Discord with an @everyone ping. Quoted in full so the framing can be compared against what came out later.

After 8 full months of being online, it's time for Black Hole to come to an end. Our developer, Morning (Hitaloy), has been exposed. I personally caught him engaging in unacceptable behavior involving customers, including attempted blackmail, and other malicious actions. As soon as I discovered what was happening, I immediately cut off his access and shut down the infrastructure to prevent any further harm. Hitaloys full info, was send to our customers. I built Black Hole to help people, not to put them at risk. I will never tolerate anyone who abuses the trust of our community. Thank you to everyone who supported Black Hole over the past 8 months. All source codes are for sale And our customers will be moved to [successor project, link redacted] So if you are a customers, please open a ticket at our customers server and ask for support.

s1xteen, Black Hole Discord, shutdown announcement

Three claims sit at the centre of this post. Morning was the wrongdoer. s1xteen was the one who caught it and shut things down. Customers were being moved to the named successor project as a protective gesture. Each of those claims is contradicted by the receipts below.

The Successor Operator's Rebuttal (What Actually Happened)

Posted by the operator on the receiving end of the customer migration deal, who had first-hand knowledge of the money that was never delivered. Project and product names in the quote have been redacted to keep the focus on the operator being profiled.

BLACKHOLE IS A SCAM. I want to clarify the situation surrounding BlackHole because there is a lot of misinformation going around. Originally, Sixteen came to me because he wanted to shut down his project. He asked me to transfer his customers over for $50 per public user and $100 per private user, with an agreement to split part of the transfer fee. I accepted the responsibility of answering tickets and migrating users simply to ensure the community wasn't left stranded. Around that same time, a separate issue occurred where I paid a few hundred dollars for related work. I never received what I paid for. At the time, Sixteen told me the developer Morning was responsible, so I believed Morning had scammed me. Recently, the truth came to light after Morning stopped being extorted by Sixteen, who had been threatening to leak his private information. It turns out Morning was not the person behind it. Sixteen planned the entire scam to take my money and blamed Morning for it all along. Because Sixteen scammed me out of hundreds of dollars and misled the entire community, I refused to send him any portion of the transfer funds. I will not send money to someone who actively defrauded me. Despite all of this, I am keeping my promise to the community. I will personally take care of every BlackHole customer who paid and make sure you get set up properly.

Successor project operator, response to the Black Hole shutdown

A followup line from the same operator was quoted separately:

End of the story, I have thousands of dollars for Sixteen, but I refuse to pay someone who scammed me. I'm not going to support or make money for someone who moves like a snake behind my back. Business is built on trust, and once that trust is gone, there is no relationship left to continue.

Successor project operator, followup on the migration split

A separate set of translated private messages was also circulated. The two lines quoted are not from s1xteen. They are from Morning and a second developer discussing shutting the Black Hole VPS off and holding it hostage until s1xteen paid them to bring it back online. Morning is the one who actually took the VPS down at that point, not s1xteen.

"Son of a bitch." "Fuck the customer. Turn it off, and we'll charge s1xteen to turn it back on."

Morning and a second Black Hole developer, translated private messages

These messages complicate the simple villain-and-victim reading of the earlier posts. On the successor operator's timeline s1xteen had been extorting the same developers for months with threats to leak their personal information. On this shorter and later timeline the developers pulled the infrastructure and made the paying customer base collateral in a fight for payment from s1xteen. Both things being true at the same time is uglier than either post frames it, and it matters here because the point of documenting this operator is accuracy, not team allegiance.

Morning's Reply (The Named Developer)

Morning, the developer publicly named as the villain, posted his own clarification. His account was that Black Hole was originally his and Tryhard's project and that server ownership was voluntarily transferred to s1xteen for administrative reasons, at which point s1xteen refused to give it back. Update decisions on the product were also not his to make.

I want to clear up a few things because I've seen a lot of misinformation being spread. For those who don't know, BlackHole has always been my project. I founded it together with Tryhard. Sixteen was responsible for the financial side, marketing, and some administrative tasks. At one point, I transferred ownership of the Discord server to Sixteen. That was my decision, and I take responsibility for making that mistake. After that, I was never able to regain ownership of the server, despite asking for it back multiple times. As many of you already know, I ended up losing two Discord servers during that period. I'm not making this post to start drama or attack anyone. I just don't think it's fair for false information to be spread using my name. To everyone who has used my products, you know the quality I've always tried to deliver. My goal has always been to provide a reliable product that stays updated and maintains a high standard. I also want to address the update situation. Some customers were upset with me because they believed I simply didn't want to keep updating the project. That wasn't the case. I always wanted to continue improving BlackHole, but those decisions weren't entirely up to me. Sixteen didn't want to spend money on updates and said he was fine leaving the project as it was. I'm willing to take responsibility for the decisions that were mine, especially transferring ownership of the Discord server, but I also believe it's important that everyone is held accountable only for their own decisions.

Morning (Hitaloy), reply to the shutdown post

The disclosure that developers from the Black Hole team had been quietly working with the successor project on alternate accounts for months did not come from Morning's post. It came from the successor operator's own rebuttal in the section above. He stated that he had been in contact with those developers throughout, watching them get pressured into working under threats that their personal information, home addresses and families would be exposed if they stopped, and that both of them had been on his side long before the public shutdown.

Morning's post also does not mention that he was the one who shut the Black Hole VPS down, or that he and another developer had been recorded discussing charging s1xteen to bring the infrastructure back online. The translated messages in the successor rebuttal section are attributed to them, not to s1xteen. Reading Morning's post alongside those quotes makes the shutdown look less like a mutual project ending and more like a pressure move that s1xteen then used as material for his own farewell post a short time later.

The Followup: Source Code Sale Scam

The shutdown post ended with the line that all source codes were for sale. Within days of that offer going live a buyer paid 200 USD for a menu source and never received the product. The chat log below was posted by the buyer as proof.

hyper674 [CLUB] — 6:03 AM sixteen scammed you? --- — 6:03 AM yh for their menu payed 200 this was he sent me hyper674 [CLUB] — 6:08 AM wtf --- — 6:08 AM yh im lost in words the onetime i buy an good menu instant scam idk anymore in this scene

Chat log between a buyer and hyper674, both in the CLUB server

The sequence matters. The public shutdown post advertised source code sales on the same message that named a scapegoat developer, moved the customer base to a project s1xteen was already refusing to pay, and set up a new revenue stream from selling the source. The buyer above paid into that new revenue stream and got nothing back.

Pattern Summary

Reading the four blocks of text above in order gives a single consistent pattern. It is not a technical pattern like the ones normally documented on this research site. It is a business pattern, and it is the same one that keeps recurring in the paid bypass market when a project reaches the end of its useful life.

1. Extort the developer over an extended period with threats to leak their personal information, home address and family details so they keep supplying labour while the owner keeps the revenue. The successor operator says he watched this happen for months.
2. Take a separate few-hundred-dollar payment from the successor operator for other work. Never deliver the work. Blame Morning to keep the accusation pointed at someone else. Only get caught once Morning stops being extorted and can speak freely.
3. Post a farewell that identifies the developer as the wrongdoer. Conveniently, the developer had just shut the VPS off and demanded payment to bring it back online, which gave the post a real event to point at even though the shutdown post never mentions that fight. Include a successor Discord link so the customer base migrates before the receipts catch up. Sell the source code on the way out to squeeze one more revenue stream from people who trusted the brand.
4. Take the payment for the source code and deliver nothing.

Sources

Every quote in this post is drawn directly from a public message on Discord or a screenshot circulated openly in the FiveM cheating and anti-cheat research community during and immediately after the Black Hole shutdown on August 6, 2026. No private DMs from anyone other than the parties who voluntarily posted their own DMs are quoted here. The wallet address was disclosed by the parties involved.

If any individual quoted in this post believes a specific line has been misrepresented, an updated or corrected version can be added by opening a ticket with the original screenshot attached.