hard20 pts · first answer countsmobile-securityapi-security

Stopping cheaters calling the API

A game grants coins through an API call. You added root and jailbreak detection in the app, but cheaters still farm coins by calling the API directly. What is the better approach?

A.Obfuscate the app code more heavilyB.Add more checks inside the appC.Move the API URL and a reward secret into native C code with string encryption, so the endpoint cannot be found by decompiling the appD.Verify on the server: check Play Integrity or App Attest tokens on your backend and keep reward rules and validation server-side

Discussion 0

Join free to post in the discussion.

Stopping cheaters calling the API

Discussion 0

Related questions