fixed exploit with abusing mock feature