Betsoft

Betsoft is an established iGaming software provider known for cinematic 3D slots and table games. With the Max Quest platform, they introduced a social casino environment featuring titles such as Triple Cash or Crash, Dragon Stone, and Amazon.

In iGaming, security directly impacts credibility. Any weakness affecting match validation, balance handling, or multiplayer integrity can undermine player trust and regulatory confidence.

Betsoft required a security partner capable of evaluating:

• Match result validation logic
• Multiplayer gameplay functionality
• Registration and authentication flows
• Account management mechanisms
• User balance validation systems
• Overall platform security posture

For platforms where gameplay outcomes and balances are tied to real-world value, server-side validation and logic integrity are non-negotiable.

Cyrex conducted comprehensive penetration testing of the Max Quest platform, focusing on both gameplay-specific logic and core account infrastructure.

Our security engineers assessed key gameplay mechanics, including:

• Match result validation in Triple Cash or Crash
• Multiplayer functionality in Dragon Stone and Amazon
• Server-side validation of gameplay interactions

The objective was to ensure that gameplay outcomes could not be tampered with and that multiplayer interactions remained secure and fair.

Beyond gameplay systems, Cyrex evaluated the broader platform architecture, including:

• Registration and authentication processes
• Account management workflows
• User balance validation mechanisms
• Access control and session handling

We assessed whether authentication flows, balance updates, and account interactions were properly secured against manipulation, privilege escalation, or logic flaws.

This layered approach ensured that both player-facing features and backend financial logic were scrutinized under realistic attack scenarios.