fix exploit, close #43