Predecessor

Predecessor blends the intensity of an over-the-shoulder shooter with the strategic depth of a MOBA. Built on Unreal Engine 5 and released on PC via Steam and the Epic Games Store, the game depends on secure multiplayer infrastructure and reliable live services.

Players assume defined MOBA roles — carry, jungler, solo-laner, support — and engage in coordinated team-based combat. In competitive titles like this, vulnerabilities in gameplay validation or service infrastructure can directly impact balance and player trust.

Omeda Studios required an external, attacker-perspective evaluation of their systems prior to broader scale.

Cyrex conducted comprehensive black box penetration testing, evaluating Predecessor without access to internal source code.

This methodology mirrors real-world attacker conditions, assessing how exposed services and gameplay systems behave when probed externally.

Our engagement focused on:

• Physics and shooting systems
• Character management logic
• Reward distribution mechanisms
• Matchmaking infrastructure
• Chat systems and player interactions

We tested live services and gameplay networking to identify potential exploit paths that could be leveraged without insider knowledge.

Using a black box approach, Cyrex:

• Interacted with exposed endpoints and gameplay flows
• Attempted manipulation of gameplay-related interactions
• Assessed authentication and session handling
• Evaluated server-side validation boundaries

The objective was to identify vulnerabilities from the same vantage point available to malicious actors.