What Riot Changed in Valorant’s Anti-Cheat – And Why It Matters
Valorant’s latest Vanguard anti-cheat update is a kernel-level security change that uses hardware memory protections to block DMA-based cheating devices, disabling costly external setups by cutting their access to game data and sparking fresh debate over how much control competitive gaming security tools should have over a player’s system. Riot Games has upgraded Vanguard to target premium DMA cheat hardware, mocking owners of what it called a “$6k paperweight” after the patch began blocking those devices. These tools do not run as normal software on the gaming PC; instead, they sit on external or disguised hardware and read Valorant’s memory from outside the operating system. By extending Vanguard’s reach down to how connected devices access memory, Riot is moving the Valorant anti-cheat battle from application-level scanning to system architecture itself, raising both the cost and complexity of cheating.
How DMA Cheat Hardware Evades Traditional Anti-Cheat Systems
DMA cheat hardware abuses Direct Memory Access, a standard feature that lets components read and write system RAM without routing every request through the CPU. In a cheating setup, a device connected over PCIe or disguised as storage can quietly read Valorant’s memory, power radar tools, wallhacks, or ESP overlays from a second machine, and stay out of sight of normal software checks. Because these DMA devices impersonate trusted components like SATA or NVMe drives, they appear to the operating system as legitimate hardware instead of suspicious programs. That design makes them hard to flag with conventional anti-cheat techniques that focus on processes, drivers, or injected code. The result is an expensive but attractive option for high-end cheaters who want to avoid bans, pushing developers to rethink competitive gaming security beyond the operating system and down into how devices are allowed to see memory in the first place.
Vanguard’s Hardware-Level Counter: IOMMU and Firmware Targeting
To counter DMA cheat hardware, the new Vanguard update leans on IOMMU, a hardware-level memory protection unit that decides which devices may access which parts of RAM. According to Digital Trends, Vanguard now enforces stricter IOMMU settings so that external devices posing as SATA or NVMe storage cannot freely read live game data. When a DMA cheat continues probing protected memory, the system can generate hardware faults or become unstable, which Riot says is expected behavior when a device demands access it no longer has. PC Guide reports that Vanguard also targets the firmware linked to these devices and worked with motherboard makers such as MSI, ASUS, and ASRock to improve detection. Once flagged, Vanguard can warn the player and block communication between the PC and the cheat hardware, leaving some DMA firmware “completely unusable” unless Windows is reinstalled.
Did Vanguard Break PCs, and What About False Positives?
The aggressive behavior of the Vanguard update has led to claims that it damaged SSDs or bricked systems, but Riot disputes that. Digital Trends notes that Riot has clarified Vanguard “does not damage PC hardware or disable real SSDs,” and that the affected devices are DMA cheat tools sold for Valorant, not standard components. Some users report needing to reinstall Windows after IOMMU protections clash with rogue DMA firmware, but the instability stems from blocked memory access rather than physical harm. The bigger concern is trust: if Vanguard can interfere with firmware-level behavior, players worry about what happens if legitimate NVMe or SATA drives are misidentified. Riot insists Vanguard does not disable normal hardware, yet the possibility of kernel-level false positives keeps the debate alive around how far competitive gaming security should extend into a user’s system.
The Arms Race in Competitive Gaming Security
Vanguard has long been one of the most intrusive anti-cheat systems in gaming because it runs at the kernel level, granting it deep visibility into the operating system. The latest move to enforce IOMMU protections and target DMA firmware marks an escalation in the arms race between Riot and sophisticated cheat makers. As cheats shift from simple memory edits to disguised hardware, developers respond with system-level controls that blur the line between game software and security infrastructure. For many Valorant players focused on competitive integrity, blocking premium DMA cheat setups is worth the trade-off. Others view any kernel-level system that can influence device behavior as a risk that relies on continued trust in the developer. The Vanguard update shows where competitive gaming security is heading: toward tighter integration with hardware, higher stakes for cheaters, and harder questions for everyone who queues into ranked.