Riot Games' Vanguard anti-cheat got an update late last week, and as of this morning the more populated cheating subreddits and Telegram channels are openly arguing about whether to risk running anything until the dust settles.

The story, as best we can reconstruct it from forum threads, vendor refund posts, and a single Riot social-media reply, is this: the update reaches deeper into PCIe device enumeration than previous Vanguard versions, and it is correctly identifying firmware signatures that ship on specific direct memory access cheat boards. Where it finds them, it is not silently denying access to Valorant — it is forcing a kernel panic and bluescreening the machine.

What the cheat sellers are saying

Two of the largest English-language DMA vendors have paused new orders pending a firmware update. Both have posted what amount to refund-but-please-be-patient notices to their private channels. A third vendor — the one that historically pitched itself as the most undetectable option — has gone quiet, which usually means either a vacation or an internal scramble. Either way, the rhythm of the past three years (a quiet Vanguard update, twelve hours of forum panic, then a firmware patch that restores the status quo) is taking longer to complete this time.

This matters because DMA cheats have been the headache that Vanguard had not really solved. Traditional aimbots that hook the game process were broadly under control; what worked, and what an irritating subset of competitive Valorant lobbies had moved to, was hardware running on a second machine reading memory off the target through a PCIe slot. From the operating system's perspective, nothing untoward was happening on the gaming PC at all.

What we don't know

Three things are still genuinely unclear. The first is whether the BSOD effect is intentional or a side-effect of a more conservative driver check. Riot's reply — which is one sentence and somewhat vague — leans towards intentional, but a hostile reading is possible. The second is how many devices are affected: anecdotal counts on forums vary by an order of magnitude depending on which thread you read. The third, and the one most relevant to legitimate players, is whether any non-cheat firmware can collide with the new detection rules. We have not seen credible reports of that, but we will keep an eye on the help desks of capture-card vendors over the next week.

What it means for tournament integrity

If the update is what it appears to be, it is the most aggressive enforcement action against the DMA market that any major shooter has shipped. The practical effect over the next month will be a measurable cooling-down of pub paranoia, which is currently at one of its periodic highs. The longer-term effect depends on whether vendors find a workaround inside one update cycle, the historical pattern, or whether this particular check is robust enough to require a hardware revision. Hardware revisions are slow and expensive. They are not a problem the cheat ecosystem is equipped to solve in two weeks.

None of this is going to be the silver bullet anyone wants, but it does change the shape of the conversation. For the first time in a while, the people selling the boards look like they are on the back foot rather than the developers. That is novel enough to be worth noting on its own.