Security Testing

Voxie Tactics

Client:AlwaysGeeky Games

Cyrex partnered with AlwaysGeeky Games to deliver white box penetration testing for Voxie Tactics, securing its Polygon-based blockchain infrastructure, live services, NFTs, wallet integrations, and multiplayer systems.

The Challenge

Securing a Blockchain Tactical RPG with True Digital Ownership

Voxie Tactics is a turn-based tactical RPG built on the Polygon blockchain, combining PvE campaigns, PvP arenas, and a player-driven NFT economy. Players can earn cryptocurrency, own in-game NFT items, and trade assets on-chain.

This ownership model significantly expands the security surface.

AlwaysGeeky Games required validation across:

Live services and backend infrastructure
NFT minting and trading logic
Wallet integrations
Player inventory systems
Marketplace transactions
PvP battle mechanics

In blockchain games, vulnerabilities can impact not only gameplay fairness but also asset ownership and token integrity. With on-chain interactions and a competitive multiplayer environment, security had to be embedded at both the gameplay and blockchain layers.

The Cyrex Solution

White Box Penetration Testing Across Web3 & Live Services

Cyrex conducted comprehensive white box penetration testing, reviewing internal implementations of both gameplay systems and blockchain integrations.

This approach enabled deep analysis of server-side validation, trust boundaries, and on-chain/off-chain interaction points.

Core Gameplay & Multiplayer Assessment

Our security engineers evaluated:

Battle systems and PvP mechanics
Physics systems
Player and inventory management
Classes and races logic

We assessed whether gameplay actions were properly validated server-side and resistant to client-side manipulation.

Marketplace, Wallet & NFT Security

Given the integration with Polygon and digital asset ownership, Cyrex tested:

Wallet interaction flows
NFT handling and token integrations
Marketplace transaction logic
Buy, sell, and transfer mechanisms

The objective was to ensure that digital asset interactions were securely validated and could not be tampered with through crafted requests or improper authorization flows.

Live Services Validation

Cyrex reviewed backend services supporting:

Player account management
Asset persistence
Reward distribution
API endpoints connected to gameplay and blockchain interactions

By identifying weaknesses before launch scale, we helped reinforce the integrity of both gameplay systems and token-related infrastructure.

The Outcome

Reinforced Web3 Infrastructure & Gameplay Integrity

Identification and remediation of vulnerabilities across NFT and wallet integrations
Improved validation of marketplace and transaction flows
Hardened gameplay systems against exploit paths
Increased confidence in player asset security

Start Your Security Assessment