Persistant Phantom Drawings on tabletop

Hi, I've been running the Lost Mine of Phandelver LMOP campaign for around 12 months with around 6 DnD first timers ranging in age from 7 to 50+. For the second time now over several months I've had random drawings appearing on the Token layer of several maps during gameplay and all players swear they aren't the culprit. I've asked each of them verbally if they are pranking the group (kids being kids) and still all deny any involvement. Generally I'm able to clear the drawings but they come at such a frequent pace its impossible to continue playing until they are removed. Some drawings look automated (oval tool) and possibly from an awry API script and others human authored (pen scribble).  It really impacts gameplay and I've done all I can think of and have just sent a Roll20 customer support ticket with the screenshots below and a HAR file export as I'm lost how to proceed. We use dynamic lighting on the included LMOP maps and tokens as well as some maps and tokens I've created and added. Troubleshooting so far : When it happened initially I removed all API scripts I had enabled (AOE, An Auto Turn Tracker) - no change Added the API script that restricts drawing ability based on assigned player permissions.  - no change  Next I recreated the campaign from backup - no change. I then created the campaign from scratch from the purchased LMOP and had the players all clear their browser caches and reinstall the Beyond20 Chrome extension (we use dndbeyond for character sheets). This resolved the issue for around 2 months then it reverted yesterday. Checked campaign is set to private Checked only the necessary player accounts were shown in the campaign Had each player change their Roll20 player profile color to observe any change - no change      What did I miss ? Anyone else had this happen ?  Admins - Ok to move this post to another area if it's truly not a Roll20 bug.

I can't think of anything other than a malfunctioning or malicious script that would cause that to happen, outside of human interaction. Is the script you used the Dry Erase script (Available in One-click)? It should be configurable enough to identify the creator of any drawing. I believe it can also be set to move new drawings to the GM layer until approved.

I recommend you change your Roll20 password to something long and random and use a password manager to keep track of it. If you haven't done that already. 

Andrew R. said: I recommend you change your Roll20 password to something long and random and use a password manager to keep track of it. If you haven't done that already.  Thanks - yes I already have massive passwords for every account I own courtesy of a password manager. I was thinking along this line wondering if like other SAAS platforms if Roll20 had an activity log showing user activity for a campaign ?