Easy Anti-Cheat Denies Responsibility for Apex Legends Hacking Disaster ‘There is No RCE Vulnerability Within EAC’

Apex Legends North American Finals Postponed After Hack: Easy Anti-Cheat Responds

Following the postponement of the North American finals of the Apex Legends Global Series due to a mid-match hack, Easy Anti-Cheat has stated that “there is no RCE vulnerability” in its software that was exploited in the attack.

The first hack targeted Noyan “Genburten” Ozkose of DarkZero during the third match, allowing him to see all players on the map, even through walls. Forced to drop out, his teammates still secured second place despite being one player down. The second hack in the next match affected Phillip “ImperialHal” Dosen of TSM, who suddenly found himself using an aimbot. That match was abandoned, and the finals were postponed to maintain the series’ competitive integrity.

The Anti-Cheat Police Department, a volunteer group specializing in gathering intelligence on cheats, claimed that an RCE (remote code execution) was being abused in the game, though it was unclear if it stemmed from the game or the anti-cheat software.

Remote code execution exploits allow attackers to run software on remote machines, posing significant risks. Previous RCE vulnerabilities led to the suspension of PC PvP servers for Dark Souls games in 2022 and a similar issue in GTA Online in 2023. According to Anti-Cheat PD, this RCE was used to inject cheats into streamers’ machines, potentially allowing the installation of malicious software like ransomware.

Although the exact method of the attack remains unknown, Easy Anti-Cheat issued a statement denying responsibility. “We have investigated recent reports of a potential RCE issue within Easy Anti-Cheat,” it tweeted. “At this time—we are confident that there is no RCE vulnerability within EAC being exploited. We will continue to work closely with our partners for any follow-up support needed.”

This marks Easy Anti-Cheat’s first tweet since May 2019, underscoring the seriousness of the issue. Identifying the source of the vulnerability—whether in Easy Anti-Cheat or Apex Legends itself—is crucial, as it could affect other games using EAC, such as Fortnite, War Thunder, Lost Ark, Elden Ring, and Hunt: Showdown.

Anti-Cheat PD suggested that the issue lies within the Source engine, which Apex Legends uses, and could be similar to a vulnerability identified in 2021.

Respawn has yet to comment on the hack, leaving key questions about how it happened and the risks of playing Apex Legends unanswered. There is no indication when the North American finals of the ALGS will resume, but it’s likely to be delayed until Respawn ensures the game’s security. EA has been contacted for comment and updates will follow if a response is received.