A single Vanguard update permanently disabled $6,000 DMA cheat devices — and Riot celebrated it publicly. Here is the full breakdown.
The tweet that broke the internet
On May 21st, Riot Games posted a photo on X. It showed a pile of circuit boards — FPGA chips, PCIe cards, expensive-looking hardware — with a single caption:
@riotgames “Congrats to the owners of a brand new $6k paperweight.”
The post went viral within hours. Gaming forums erupted. People assumed Riot was bragging that its anti-cheat had physically fried players’ computers. The panic was immediate — “they can destroy your hardware now?” was everywhere.
Riot scrambled to clarify. “Well, that escalated quickly,” they wrote in a follow-up. The image wasn’t a pile of innocent gaming PCs — it was a pile of DMA cheat devices, hardware sold specifically to help players cheat in Valorant, rendered completely useless by Vanguard’s latest update.
The controversy didn’t die down though. Because the deeper you dig into what actually happened, the more interesting — and uncomfortable — the story gets.
What Vanguard actually is
To understand why this matters, you need to understand what Vanguard is doing on your PC in the first place.
Most anti-cheat software works at the application level — it watches what’s happening while a game runs, checks for suspicious processes, and flags anything that looks off. Cheaters found ways around this pretty quickly by running their tools at a deeper level of the system, below where the anti-cheat could see.
Vanguard runs at the kernel level — Ring 0. That’s the deepest layer of your operating system, the part that communicates directly with your hardware. It starts when your PC boots, before the game opens, before you’ve even logged in. It has more access to your system than almost any other software you’ve ever installed.
“Vanguard doesn’t wait for the game to start. It’s already running when you turn your computer on.”
That’s why Vanguard has always been controversial. The level of access it requires is the same level that malware operates at. Riot has consistently argued this depth is necessary — that anything less gives cheaters room to operate. Large parts of the gaming community have never fully accepted that trade-off.
The $6,000 cheat nobody was talking about
For a while, even kernel-level anti-cheat had a blind spot. And cheaters with serious money found it.
DMA — Direct Memory Access — cheating isn’t software. It’s a physical device. An FPGA chip that plugs into your PC’s PCIe slot, the same slot your graphics card uses. It connects your main gaming PC to a second computer, where the actual cheat software runs. Because the cheat executes on a completely separate machine, traditional anti-cheat has no visibility into it at all.
How DMA cheats work — simplified
Step 1: The DMA card plugs into your gaming PC’s PCIe slot and disguises itself as a standard storage device — an NVMe SSD, as far as your operating system is concerned.
Step 2: The card connects via cable to a second PC. All cheat software runs entirely on that second machine — away from Vanguard’s view.
Step 3: The second PC reads the game’s memory directly from RAM through the DMA card — getting real-time data on enemy positions, health, items — without a single process running on the main PC.
Result: Perfect wallhacks and aimbots that no software-based anti-cheat can detect. These setups cost $500 for basic kits and over $6,000 for premium boards with custom evasion firmware. And for years, they worked.
What Vanguard’s update actually did
Riot’s May 2026 update changed one critical thing: it enforced IOMMU — the Input-Output Memory Management Unit — at a hardware level on accounts detected using DMA devices.
IOMMU is a security feature built into modern processors. Think of it as a gatekeeper for your system’s memory. It checks every device trying to access RAM and blocks anything that isn’t authorised. When Vanguard enforces mandatory IOMMU, the DMA card can no longer read game memory. Its entire purpose is gone.
But it gets worse for the cheaters. Vanguard generates repeated page faults and IOMMU restarts that interfere with the custom firmware running on the DMA device’s FPGA chip. That firmware corrupts. The device stops functioning — not just in Valorant, but entirely. The $6,000 hardware in Riot’s photo isn’t metaphorically a paperweight. It functionally is one. OS reinstall required, and even then the hardware itself may not recover.
“The device doesn’t stop working in Valorant. It stops working, full stop.”
Riot is careful with its language. Disabling IOMMU on your system will allow a cheat device to technically function again — but IOMMU is now required to launch Valorant. So the cheater has a choice: play Valorant without their cheat hardware, or keep the hardware and never play again. For firmware-corrupted devices, even that choice is gone. Riot was also clear that regular players with no DMA hardware will experience none of this.
The community is split — here’s both sides
The reaction wasn’t unanimous celebration. Even players who hate cheaters are uneasy about what this update represents. Here’s where the debate actually stands:
The case for Vanguard
- DMA cheats are hardware — banning an account doesn’t stop the device
Legitimate players deserve actual competitive integrity- Cheaters chose to buy hardware explicitly designed to break the game
This is arguably the only technically viable solution at this scale- Normal PCs are completely unaffected
The concerns
- False positives reported — some clean players flagged
Kernel-level access is the same level malware uses- Corrupting firmware may violate the Computer Fraud and Abuse Act
Vanguard runs even when no Riot game is installed or open- You’re trusting a games company with Ring 0 access indefinitely
The legal angle is serious. Some players have cited the Computer Fraud and Abuse Act, which prohibits intentionally damaging systems through transmission. Riot argues IOMMU enforcement is a standard security feature, not intentional damage — technically accurate. But the real-world effect on corrupted firmware is hard to describe any other way. That question isn’t fully settled.
There are also unresolved reports from players claiming they don’t own DMA hardware but still triggered IOMMU warnings. Riot hasn’t addressed the false positive question with the same clarity it brought to everything else. That gap matters.
The real question this raises
The destroyed cheat hardware isn’t really the story. People spending thousands of dollars to ruin other players’ games having that hardware turned to scrap — most will call that fair.
The real story is what this confirms about where anti-cheat is heading. The arms race between cheaters and developers has moved from software to hardware. That was probably inevitable. What Vanguard has demonstrated is that stopping hardware-level cheats requires hardware-level intervention — and that capability now exists inside a piece of software running in Ring 0 on 30 million computers.
“This isn’t Riot doing something wrong. It’s Riot doing something that works — and that’s the uncomfortable part.”
Riot says those effects are limited to cheat devices, and there’s no evidence they’re lying. But “we would never misuse this” is a promise, not a technical constraint. The capability to interact with hardware in permanent ways exists in Vanguard. Today it’s aimed at $6,000 FPGA boards. The community’s discomfort isn’t paranoia — it’s a reasonable question about what kernel-level access actually means in practice.
Cheating is genuinely corrosive. It drives players away, hollows out ranked modes, and poisons competitive communities that people have spent years building. Stopping it matters. Vanguard’s update is the most effective anti-cheat move in competitive gaming history. It’s also the most invasive. Both things are true, and the gaming industry is going to be wrestling with that trade-off for a long time.
The Takeaway
Vanguard’s update is technically impressive, legally murky, and brutally effective. If you’re a legitimate player, nothing changes. If you’re running a $6,000 DMA rig — Riot has made their position very clear. The paperweight joke landed because it was true.
