Forgot password
Enter the email address you used when you joined and we'll send you instructions to reset your password.
If you used Apple or Google to create your account, this process will create a password for your existing account.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Reset password instructions sent. If you have an account with us, you will receive an email within a few minutes.
Something went wrong. Try again or contact support if the problem persists.
Dota 2 Bounty Hunter
Image via Valve

No backdoor protection: Dota 2 players were at risk of being hacked via ​​custom games for almost a year

The saga is over, thankfully.

Custom game modes have been a part of Dota 2 since its inception. They’re a way for players to create their own modified versions of the game, including spin-offs like Auto Chess, Overthrow, and Pudge Wars.

Recommended Videos

It turns out, however, there was a massive security hole in them for about a year between 2022 and 2023, giving hackers backdoor access to players’ computers.

The issue was fixed via a minor patch on Jan. 12, but Avast Threat Labs, who first discovered and reported the threat to Valve, revealed the shocking details about how it worked.

According to their report, a hacker created four custom games—’entitled test addon pls ignore,’ ‘Overdog no annoying heroes,’ ‘Custom Hero Brawl,’ and ‘Overthrow RTZ Edition,’—all of which were adaptations of popular modes.

The difference, however, was they exploited a vulnerability in V8, Google’s open-source JavaScript and WebAssembly engine, to gain backdoor Dota 2 access.

Fortunately, Valve handled the situation well. Not only did they push a fix immediately, but they also took down the custom games, notified affected players, and introduced new measures to prevent similar things from happening in the future.

But while custom games are safe to play, it’s still important to keep a lookout for ones that seem dodgy, since other security holes could pop up at any point.


Dot Esports is supported by our audience. When you purchase through links on our site, we may earn a small affiliate commission. Learn more about our Affiliate Policy
Author
Image of Alex Tsiaoussidis
Alex Tsiaoussidis
Staff Writer for Dot Esports. I am a passionate gamer with years of experience covering all things gaming, esports, and streaming. I have extra love for Dota 2, Pokémon, and Apex Legends.