GMs can use built-in Roll20 features to verify the integrity of dice rolls and prevent common exploits:
This report examines technical vulnerabilities and common exploits associated with "roll20-cheat-dice," specifically focusing on client-side manipulation of the Roll20 virtual tabletop platform. Overview of Exploits
: Encouraging players to use official character sheet buttons rather than custom macros makes it easier to verify that standard modifiers are being used.
: While primarily used for automation, some scripts are designed to track and average player rolls to identify statistically improbable "hot streaks" that might indicate cheating. Detection and Mitigation for GMs
: Some exploits allow players to "throw away" unfavorable rolls before they are finalized. Since the client reports the final result to the game log, a player can repeatedly roll until a desired number is generated, then only permit that specific packet to reach the server.
Several community-developed projects on platforms like GitHub demonstrate these vulnerabilities for educational or illustrative purposes:
: Monitoring the chat archive for unusual patterns—such as long delays before rolls or a total lack of "average" results—can help identify users employing packet filtering software.