: Encouraging players to use official character sheet buttons rather than custom macros makes it easier to verify that standard modifiers are being used.
Several community-developed projects on platforms like GitHub demonstrate these vulnerabilities for educational or illustrative purposes: roll20-cheat-dice
: Monitoring the chat archive for unusual patterns—such as long delays before rolls or a total lack of "average" results—can help identify users employing packet filtering software. : Encouraging players to use official character sheet
: While primarily used for automation, some scripts are designed to track and average player rolls to identify statistically improbable "hot streaks" that might indicate cheating. Detection and Mitigation for GMs Detection and Mitigation for GMs GMs can use
GMs can use built-in Roll20 features to verify the integrity of dice rolls and prevent common exploits:
: Using the platform's 3D Dice feature is often recommended, as these visual representations are harder to manipulate through simple packet editing.
While Roll20 uses a "Quantum Roll" system to generate random numbers server-side, vulnerabilities often stem from how these results are communicated to and from the player's client.