diff --git a/CHANGELOG.md b/CHANGELOG.md
index a8138f35..7970e57b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -32,6 +32,7 @@ This is the rolling changelog for TShock for Terraria. Use past tense when addin
 * Removed `/restart` command. (@hakusaro)
 * Removed `Permissions.updateplugins` permission. (@hakusaro)
 * Removed REST `/v3/server/restart/` route and `/server/restart/` route. (@hakusaro)
+* Fixed a critical exploit in the Terraria protocol that could cause massive unpreventable world corruption as well as a number of other problems. Thanks to @bartico6 for reporting. Fixed by the efforts of @QuiCM, @hakusaro, and tips in the right directioon from @bartico6.
 
 
 
diff --git a/TShockAPI/Properties/AssemblyInfo.cs b/TShockAPI/Properties/AssemblyInfo.cs
index f4030480..a4982df5 100644
--- a/TShockAPI/Properties/AssemblyInfo.cs
+++ b/TShockAPI/Properties/AssemblyInfo.cs
@@ -53,5 +53,5 @@ using System.Runtime.InteropServices;
 // Also, be sure to release on github with the exact assembly version tag as below
 // so that the update manager works correctly (via the Github releases api and mimic)
 
-[assembly: AssemblyVersion("4.3.24")]
-[assembly: AssemblyFileVersion("4.3.24")]
+[assembly: AssemblyVersion("4.3.25")]
+[assembly: AssemblyFileVersion("4.3.25")]
diff --git a/TerrariaServerAPI b/TerrariaServerAPI
index faa3b956..2c25bb68 160000
--- a/TerrariaServerAPI
+++ b/TerrariaServerAPI
@@ -1 +1 @@
-Subproject commit faa3b95697bbf675503b2823c5f59593cf825bb3
+Subproject commit 2c25bb68fde0e2c40a32d639ff79d614d3fb1580