question about possible sudo duping?

recently a guy by the name of "Synister" has been popping loads of event keys in a server ill let you find on your own. he doesn't join the runs or anything like that. i suspect he is though on an alt acc, my idea of what he might be doing is either using CL and finding a way to use a key without using the key, or manipulating the packets. "i know nothing of how someone would go about it but id assume that isnt something very simple to do" or using some bot in some way... all the account does is load into nexus run down or to a corner on the ice pop 1-3 keys in diff spots and then logs off instantlly. if anyone has some ideas that would be great as people could make much better use of this than just for events.
p.s. hes actually a white star if that matters..

i MAY be wrong, okay, so they do go in sometimes? they pop shatters aswell and they do do those. Also they are in a guild called deca hq, im not sure how legit it is but yeah... for anyone curious they host alot of keys so if you find the server maybe dont tell everyone >.< have a nice day-
that said, he is the only member for that guild. both him and guild are private for the most part on realmeye