A District 9 Penthouse Was Sold Four Times in 90 Seconds Via a Legal Loophole in the Platform's Deed Transfer API — All Four Buyers Currently Hold Valid Deeds — MetaCity's Property Registry Shows All Four as the Registered Owner

At 8:47 AM EST, a District 9 luxury penthouse listed at 2.4 million RealCoin completed its first sale. At 8:47 AM and 31 seconds, the same property completed a second sale to a different buyer, using the same listing. At 8:47 AM and 58 seconds, a third sale. At 9:08 AM — 21 minutes after the first transaction — a fourth sale completed, bringing the total revenue generated from the single property to 9.6 million RealCoin. All four transfers were processed and confirmed by the platform's deed registry. All four buyers received valid, platform-signed deed tokens. MetaCity's property registry currently lists all four accounts as the property's registered owner simultaneously. The platform has frozen further transactions on the listing. No refunds have been issued. MetaCity's legal team has confirmed they are reviewing the situation.

The deed transfer API vulnerability that allowed this morning's District 9 penthouse to sell four times in 90 seconds has been present in MetaCity's property transaction infrastructure since the platform's last major real estate system update in September 2025. The vulnerability — identified this afternoon by independent security researcher @HexBreaker in a thread that has since been viewed 900,000 times — exploits a race condition in the API's deed issuance sequence. When a property sale is initiated, the API creates a pending deed transfer object and begins a confirmation sequence. During the window between confirmation initiation and the final registry write — a window that typically lasts between 800 milliseconds and 2.4 seconds — the property's listing status is not updated. The listing remains active. A second buyer can initiate a second transfer on the same listing during this window. Both transfers will complete. Both deeds will be issued. Both buyers will be registered as owners.

The first three sales of the District 9 penthouse exploited this window precisely. The first sale initiated at 8:47:00 AM EST. The second initiated at 8:47:31 AM, while the first confirmation sequence was still processing. The third initiated at 8:47:58 AM, while both prior sequences were completing. All three ran to completion. All three deeds were issued. The fourth sale, at 9:08:14 AM, was executed by a different mechanism — a delayed requery of the listing that found it still active in the directory cache following a cache refresh delay — and represents a separate but related vulnerability in the platform's listing synchronization architecture. As of 9:30 AM, when MetaCity froze the listing, the property registry showed four simultaneous registered owners: @KaelisVen (first buyer, 2.4M RealCoin), @TwoDeep (second buyer, 2.4M RealCoin), @PriorityUser_88 (third buyer, 2.4M RealCoin), and @Stratum9 (fourth buyer, 2.4M RealCoin). Total value extracted: 9.6 million RealCoin.

Four Owners. One Penthouse. Zero Refunds.

The legal situation is, by all available assessments, genuinely novel. MetaCity's property law framework — the MetaCity Digital Property Act of 2024 — does not contain provisions for simultaneous valid ownership of a single property. The deed token system was designed to be non-duplicable; its issuance of four valid tokens for the same property is described by legal analysts as 'a failure mode that the Act did not contemplate.' The MetaCity Virtual Bar Association issued a statement at 11:00 AM noting that all four buyers have valid claims under current property law, that the platform's legal team has no established precedent for resolving the conflict, and that any attempt to selectively invalidate one or more deeds would itself be legally challengeable. The only unambiguous path to resolution — a full platform-mediated settlement distributing the 9.6 million RealCoin among buyers and compensating with equivalent properties — would require MetaCity to have four equivalent properties available, which they do not. The penthouse is one of two Apex-tier properties in District 9.

All four buyers are currently occupying the penthouse simultaneously. This is possible because MetaCity's property access system grants all registered owners access to a property, and the property registry lists all four as registered owners. As of 12:30 PM, the rooftop terrace of the District 9 penthouse has four avatars standing on it — @KaelisVen, @TwoDeep, @PriorityUser_88, and @Stratum9 — and at least 200 spectator accounts observing from adjacent buildings. None of the four buyers have spoken to each other in the public property chat. All four have confirmed they have legal representation. MetaCity has not removed any of them. The listing remains frozen. The registry still shows four owners. One of the four buyers — @TwoDeep — posted at 1:00 PM: 'i bought this for the view. the view is still good. i will be here.'