Ultimate Pirates

Ultimate Pirates is a base management and fleet combat strategy game available on Android and Microsoft Windows. Players build islands, manage resources, and engage in real-time PvP naval battles.

The game’s progression and economy systems rely on:

• Resource gathering and management
• Time-based building mechanics
• Premium currency transactions
• Military unit limits and fleet capacities
• Quest systems (daily, weekly, tutorial paths)

Because the title operates across both mobile and browser environments, the attack surface expands to include client-server communication, session handling, and cross-platform validation.

Moonmana required structured penetration testing to identify weaknesses that could impact gameplay balance or monetization integrity.

Cyrex conducted comprehensive grey box penetration testing, combining architectural awareness with real-world attack simulation.

The objective was to validate server-side controls and ensure that progression and economic systems could not be manipulated.

Our engagement included testing of:

• Quest systems (daily, weekly, and tutorial flows)
• Resource gathering and management logic
• Building systems and time-based progression
• Military unit limitations (unit numbers and ship capacities)
• Builder unit limits

We evaluated whether server-side validation properly enforced progression rules and prevented exploitation of timers or capacity limits.

Cyrex also assessed:

• Premium currency shop functionality
• Transaction handling and validation
• Mobile and browser communication flows

The goal was to ensure that premium currency systems and cross-platform interactions were secure against tampering and unauthorized manipulation.

Following testing, Cyrex delivered a comprehensive report detailing:

• Identified vulnerabilities
• Risk severity and potential impact
• Recommended remediation strategies aligned with best practices

This enabled Moonmana’s development team to patch vulnerabilities efficiently and reinforce system integrity.