GamingMeccha Chameleon

Meccha Chameleon: how a $6 paint hide-and-seek game ate Steam

Two Japanese indies built MECCHA CHAMELEON in about two months. It hit 15 million sales, then walked straight into Workshop malware and a Discord takeover. Here is the story, and where it stands now.

Meccha Chameleon: how a $6 paint hide-and-seek game ate Steam

If you have been spelling it Mecha Chameleon, same game. The official title is MECCHA CHAMELEON (めっちゃカメレオン): a multiplayer hide-and-seek party game where you paint your white blob body to match the room, then hope nobody notices the piano that just blinked. It launched on Steam on June 10, 2026 for about $6. By early July it had sold more than 15 million copies and peaked around 340,000 concurrent players. That is the miracle. The news this week is the hangover.

Meccha Chameleon mansion map with party decorations and a painted figure near a pillar

The news right now

  • Sales: developer lemorion_1224 marked 15 million sold in under a month, with a tease for a collaboration with a famous Japanese star

  • Workshop malware: security researcher Feint flagged community map Laser Tag Neon as a malware dropper that wrote a batch file and tried to pull a second-stage script via PowerShell. More malicious maps followed. The team shipped version 3.1.0 to patch the vulnerability

  • Discord takeover: while cleaning that up, a system engineer’s PC got infected. Attackers bypassed Discord 2FA, flipped server permissions, and banned staff. The original official Discord is effectively gone

So the current chapter is two stories stacked: one of the fastest indie sales runs of 2026, and a live security fire in the Workshop and community stack that grew around it.

How it came to be

MECCHA CHAMELEON was built by Japanese indie pair lemorion_1224 and Haganeiro on Unreal Engine 5. They already knew Epic’s toolchain from Fortnite creative work in UEFN. Lemorion had shipped penguin-party experiments like Penguin Hotel and Link Penguins. Haganeiro handled systems and effects. Lemorion handled the look, maps, models, music, and the joke that became the product.

The spark was simple. They were living in Fortnite-style hide-and-seek lobbies, then Lemorion remembered a TV bit where an artist painted themselves into the scenery. Translate that into a match: everyone starts as a white biped, chameleons eyedrop colors and poses onto themselves, hunters hunt before the timer dies. Keep the controls dumb. Keep the systems from collapsing under their own weight.

Calendar reality: about two months of focused build time, closer to four or five if you count reused assets from the penguin games. Matchmaking rides Epic Online Services. A two-hour playtest with about 100 players from mixed countries landed late. Feedback bought them three more maps in the final two weeks. Announced May 15. Shipped June 10. No big ad buy. Streamers and short-form clips did the marketing for free.

Meccha Chameleon hunters with paint-splattered shotguns and white chameleon players on the floor

What you are actually playing

Core loop is prop-hunt energy with a paintbrush. Chameleons blend with color pickers, eyedroppers, poses, size tricks, and later clone tools. Hunters clear the room before time. Modes expand the party: Infection, Double, Reverse Chicken Race. Public and private lobbies. Up to 24 players if the host connection holds. Sweet spot is closer to a living-room crew than a raid.

Maps started with Hide-and-Seek Mansion, Indoor Country, Sewer, Backrooms, and Penguin Hotel, then grew into Sugarland, Osaka, and a Workshop culture that made the game feel endless. That Workshop culture is also how the malware got a door.

Where it is now

Commercially, it is still the freak of the year: million-copy weeks, Steam chart dominance against bigger-budget releases, GeForce Now support so Mac and non-gaming PCs can join the paint fight. The team keeps shipping maps, poses, modes, and bug fixes like a studio ten times its size.

Operationally, July got ugly. A Workshop map that passed review still executed out-of-game scripts. Patch 3.1.0 closed the hole. The Discord loss is the harder scar: when staff lose the server, the community has to re-home while trust recovers. Treat random Workshop maps carefully until the dust settles. Keep Steam and Windows scanners honest if you subscribed to suspicious items during the scare.

Next tease on the board is that unnamed Japanese-star collaboration. The sales number did not need it. The brand might. Either way, MECCHA CHAMELEON already proved the thesis: a clear party idea, cheap price, and streamable absurdity can outrun a marketing department.

Follow the Meccha Chameleon hub and the Gaming feed when the collab drops and the post-patch Workshop rules settle.