Riot Turned $6,000 Cheat Hardware Into Expensive Paperweights
On May 21, 2026, Riot Games deployed an update to Vanguard, the kernel-level anti-cheat system powering Valorant and League of Legends — and cheaters using expensive DMA (Direct Memory Access) hardware found out the hard way.
In a post on X that instantly went viral, Riot's official anti-cheat account shared an image of disabled cheat hardware alongside the caption: "congrats to the owners of a brand new $6k paperweight."
The devices shown — known as Heino 2s and similar DMA boards — retail for thousands of dollars, sold to cheaters specifically to bypass kernel-level anti-cheat systems. Now, many of them don't work anymore.
What Is DMA Cheating?
DMA cheating represents the high end of the cheating hardware ecosystem — expensive, sophisticated, and designed specifically to evade detection by software-based anti-cheat systems.
| Concept | Explanation |
|---|---|
| DMA (Direct Memory Access) | Hardware function allowing devices to access system RAM without CPU routing |
| DMA Cheat Device | A PCIe card installed in a PC that reads game memory via a second computer |
| Why It Works | The cheat software runs on a separate machine, invisible to anti-cheat on the main PC |
| Common Uses | Wallhacks, radar hacks, ESP (enemy outlines through walls) |
| Cost | $2,000–$6,000+ for purpose-built hardware |
The reason DMA cheats were so dangerous is that they operated outside the machine being monitored by anti-cheat software. Even kernel-level systems like Vanguard historically struggled to detect them.
How Riot Killed DMA Cheats
The solution involved cooperation with major PC hardware manufacturers — a technically sophisticated multi-step operation.
The Technical Process
- 1Riot partnered with MSI, ASRock, ASUS, and Gigabyte (major motherboard makers)
- 2Manufacturers released firmware updates enabling IOMMU to initialize at system boot
- 3Vanguard (VGK) was updated to detect the specific firmware signatures of DMA cheat cards
- 4With IOMMU active, Vanguard blocks DMA device memory access via the hardware-level protection
- 5Result: DMA firmware becomes corrupted and the card stops functioning — often requiring a full OS reinstall to clear
What IOMMU Is
IOMMU (Input-Output Memory Management Unit) is a standard hardware security feature built into modern CPUs and motherboards. It controls which connected devices can access which parts of system memory. When enabled and enforced, it can prevent unauthorized PCIe devices from reading game memory — exactly what DMA cheat setups require.
Important clarification: Riot has officially stated that Vanguard does not damage hardware. Regular PC components (SSDs, NVMe drives, GPUs) are not affected. Only purpose-built DMA cheat devices are blocked.
Riot's Official Statement
After the community backlash intensified, Riot posted a formal clarification:
""Vanguard does not damage hardware or disable your devices. These protections are already part of modern systems, and when enabled, they block DMA cheat devices (such as those shown in the photo) from accessing memory in downstream applications, like our games. The 'paperweight' comment was about VALORANT cheat devices that no longer work in VALORANT. No hardware is being damaged, and no other functionalities are impacted." — Riot Games, via X
Riot's anti-cheat analyst GamerDoc added: "All that DMA gear just to get blocked by a pop-up box is crazy 🤣 6k bricks all over the floor."
Community Reactions — Deeply Divided
The gaming community split sharply on whether Riot's approach was justified.
Cheering the Ban
""Finally. These cheaters spend thousands to ruin ranked games for everyone. Losing $6,000 is a fitting punishment." — Reddit r/VALORANT
""Riot just made DMA cheating economically unviable. You can't justify $6k+ in hardware that can be disabled by a software update." — X (Twitter)
""This is the most effective anti-cheat action I've seen in years. Other studios need to take notes." — competitive FPS community post
Raising Concerns
""I understand the severity of hacking, but bricking a user's hardware should be illegal. What happens with false positives?" — viral X post, 50k+ likes
""Congrats to the soon-to-be owners of a brand new class action lawsuit." — reply to Riot's tweet
""This is extremely dangerous. What if Riot is ever compromised and everyone's computer is affected at the same time?" — Reddit security concern thread
Are Normal Players at Risk?
| Situation | Affected? |
|---|---|
| Normal play without any cheat hardware | Not affected ✅ |
| Using standard NVMe / SSD drives | Not affected ✅ |
| IOMMU already enabled in BIOS | Not affected ✅ |
| Running DMA cheat hardware | Device blocked ❌ |
| DMA card installed but Vanguard removed | Card may remain blacklisted ❌ |
If you don't cheat, you're fine. Riot's system targets the firmware signatures of known DMA cheat hardware, not standard PC components. Players who want to re-enable DMA cheat devices after removal would need to disable IOMMU — which also prevents Valorant from launching, creating a catch-22 for cheaters.
The Broader Implications
This incident marks a significant escalation in the ongoing arms race between cheaters and anti-cheat developers.
| Era | Anti-Cheat Approach |
|---|---|
| Early 2010s | Client-side software scans |
| Mid 2010s | Server-side behavioral analysis |
| Late 2010s–2020 | Kernel-level anti-cheat (Vanguard, Riot) |
| 2024 | Industry-wide deployment (Vanguard in LoL) |
| 2026 | Hardware-manufacturer collaboration to enforce IOMMU |
Content creator 3kliksphilip raised the question of whether Valve should follow suit with Counter-Strike, noting that if DMA cheating becomes unviable in Valorant, cheaters may migrate to games with weaker anti-cheat systems.
""The final frontier in cheating may not be hardware but public relations — cheat makers flooding Reddit with horror stories about legitimate PCs being 'bricked' to discredit anti-cheat efforts before they reach their full potential." — 3kliksphilip analysis
What Happens Next?
Riot has drawn a clear line in the sand. Whether this prompts a hardware counter-escalation from cheat developers, or whether the economic calculus of spending $6,000+ on hardware that can be disabled by an update simply collapses the high-end cheat market, remains to be seen.
What's certain is that Vanguard is now the most aggressive major game anti-cheat system in the industry — and the conversation about how much access game companies should have to player hardware is far from over.
Ongoing debate: The privacy and kernel-access concerns raised by this update are legitimate and worth watching. Riot has strong incentives to avoid false positives, but the community remains skeptical. Follow developments via Riot's official channels.