For years, game developers relied on kernel-level anti-cheat to catch cheaters. Scan for injected code, monitor running processes, flag suspicious behavior—problem solved. But a new threat has emerged that makes kernel detection obsolete: DMA hardware.
What Is DMA Hardware?
DMA stands for Direct Memory Access. In computing, DMA allows hardware devices to read system memory directly without involving the CPU. It’s a legitimate feature used for high-performance tasks like video capture or network cards.
Cheat developers have repurposed this technology. A DMA cheat uses a second device—often a Raspberry Pi or cheap PCIe card—connected to your gaming PC via Thunderbolt or internal slot. This device reads game memory directly from the hardware bus, extracting player positions, loot locations, and enemy data.
The crucial difference? No code runs on your gaming PC. No injected DLLs, no suspicious processes, nothing for kernel anti-cheat to detect.
Why Traditional Anti-Cheat Fails
Kernel-level anti-cheat like BattlEye, Easy Anti-Cheat, and Ricochet work by scanning your system for cheat signatures. They look for injected code, debuggers, and memory modifications.
DMA hardware bypasses all of this because:
- No code executes on the target PC — The cheat runs entirely on the second device
- Memory reads are hardware-level — Anti-cheat can’t intercept what it can’t see
- No traces left behind — When the match ends, disconnect the device and nothing remains
For anti-cheat systems, a player using DMA looks exactly like a legitimate player.
The Hardware Arms Race
Game developers haven’t ignored the threat. Modern anti-cheat now includes IOMMU (Input-Output Memory Management Unit) enforcement, which restricts DMA access at the hardware level. Games like Valorant, Fortnite, and Delta Force now require Secure Boot and TPM 2.0 for ranked play.
But IOMMU comes with tradeoffs. Enabling it can impact performance, and many players leave it disabled. Telemetry suggests over 60% of gaming PCs have IOMMU turned off—either by default or user choice.
DMA hardware has also evolved. Modern devices spoof their firmware to appear as standard storage peripherals, bypassing IOMMU restrictions. The cat-and-mouse game continues.
The Underground Market
DMA hardware has created a new tier in the cheating economy. Basic setups cost $150-200, with premium devices reaching $500+. Providers offer pre-configured cards with custom firmware already flashed, plus 24/7 support for setup and troubleshooting.
Dedicated platforms like eshub have emerged as leaders in this space, offering DMA solutions that maintain compatibility through every anti-cheat update. Their customers report zero detection across thousands of matches, highlighting the growing divide between hardware and software-based cheating.
What’s Next
As more games implement IOMMU requirements, DMA hardware will adapt. Future devices may include onboard machine learning to parse game data without exposing memory reads. Anti-cheat will respond with stricter hardware validation.
The only certainty? This war has no end.
