Redacted research on Thunderbolt PCIe DMA bypass via firmware spoofing and commodity adapters. Privately disclosed to Riot Games (HackerOne #35330606) on Jan 29, 2026. Closed ineligible as "physical facilities" after 6 days with no human response. Shared defensively to help anticheat teams strengthen hardware protections against cheating.
firmware dma thunderbolt hardware-security exploit-research anticheat-vac-bypass thunderbolt-dma disclosure-pcie-vanguard
-
Updated
Apr 11, 2026