NFL Rivals is an Android Arcade-style Football game blending the exciting and accessible arcade action with the real-life cream of the crop NFL players. Created by Mythical Games, this multiplayer NFL experience is all about creating your perfect team and claiming victory over your opponents!
Challenge
Our cybersecurity team were brought on for penetration testing the marketplace integration in NFL Rivals. A Unity-powered game, Mythical entrusted the security and preparedness of their system against malicious attacks and hacking. The Mythical Marketplace is the heart of the NFL Rivals player experience, where players engage with a dynamic and evolving user economy. Given its importance and the nature of the marketplace, the security had to be tested and refined to a significant degree. One major interaction we had to prepare for was the purchasing of player cards using in-game currency. Given the interaction between the player’s financial details and the larger workings of the marketplace itself, this took particular focus.
Solution
Magic Media’s cybersecurity team and security engineers conducted rigorous penetration testing with a focus on the payment interaction as described above as well as multiple key gameplay components including:
– Matchmaking
– Authentication & Registration
– Leagues system
– Squad (clan) system
– In-game shop (packs)
– Chat system
– Events
– Team management
– Achievement & rewards
– Campaigns
Results
The Mythical Games team were delighted by our pinpoint discovery and comprehensive evaluation of vulnerabilities. This analysis covered all aspects of the gaming experience including in-game transactions and player authentication, each of which were scrutinized for vulnerabilities. Thanks to this investigation and testing, we were able to collaborate with the security engineers at Mythical. Together, solutions were designed and implemented, resulting in a safer and more secure foundation for NFL Rivals.
