SerumCity
Cyrex partnered with Faraway and Novel Labs to conduct penetration testing for Serum City, securing its blockchain gaming ecosystem and reinforcing protection of user assets within a Web3-enabled city-building experience.
The Challenge
Securing a Web3 City-Building Ecosystem
Serum City is a blockchain-powered city-building game set within the Yugaverse. Developed by Faraway and Novel Labs, the title integrates Web3 mechanics into a broader gaming ecosystem, enabling cross-universe interactions and digital asset ownership.
Blockchain gaming introduces additional security considerations beyond traditional multiplayer systems. The platform needed to protect:
- User-owned digital assets
- Blockchain-integrated transactions
- Backend gameplay services
- Platform-level authentication and account flows
- Interactions across the broader Web3 ecosystem
With on-chain elements and integrated gaming logic, vulnerabilities could affect both gameplay integrity and digital asset security. As Serum City prepared for launch, Faraway required a security partner capable of assessing blockchain-specific risks alongside traditional platform vulnerabilities.
The Cyrex Solution
Focused Penetration Testing for Blockchain Gaming
Cyrex conducted comprehensive penetration testing tailored to the architecture of a Web3-enabled gaming platform.
Our security engineers approached the ecosystem with an attacker mindset, simulating real-world threat scenarios specific to blockchain-integrated games.
Blockchain & Platform Security Assessment
The engagement included:
- Evaluating blockchain integration points
- Assessing transaction handling mechanisms
- Reviewing user authentication and account systems
- Testing backend gameplay services
- Identifying potential intrusion points unique to Web3 environments
We focused on areas that could impact asset integrity, transactional logic, or gameplay fairness. By combining blockchain knowledge with gaming security expertise, our team assessed both on-chain and off-chain components of the ecosystem.
Real-World Threat Simulation
Rather than relying on theoretical reviews, Cyrex simulated practical attack scenarios relevant to blockchain gaming.
This included testing for:
- Improper trust assumptions between client and backend
- Weak validation of transaction-related interactions
- Exploit paths affecting gameplay or asset handling
- Vulnerabilities that could undermine user trust
Findings were documented with clear remediation guidance, enabling Faraway and Novel Labs to address weaknesses prior to scale.
The Outcome
Reinforced Security for a Growing Web3 Universe
- Identification and remediation of blockchain-related vulnerabilities
- Improved protection of user assets and platform integrity
- Strengthened validation across gameplay and backend systems
- Increased confidence in the platform’s readiness for public release
Client Feedback
Faraway
“The Cyrex team have been an absolute pleasure to work with on multiple products now. The security team has consistently been able to ramp up quickly and adapt to our needs as Faraway has grown over the years. They are hard-working, extremely knowledgeable, and are always fast to respond. We’re excited to continue working together.”
Don't Let Players Find the Weakness
Your launch is months away. Hackers will find exploits in hours. Let our engineers secure your game before it's too late.
Response time: <24 hours • NDA included • No commitment required