: A non-technical "cheat" involves temporarily inflating ability scores or modifiers on a character sheet before rolling, then quickly reverting them before the Game Master (GM) notices. Known Tools and Scripts
While Roll20 uses a "Quantum Roll" system to generate random numbers server-side, vulnerabilities often stem from how these results are communicated to and from the player's client. roll20-cheat-dice
: Monitoring the chat archive for unusual patterns—such as long delays before rolls or a total lack of "average" results—can help identify users employing packet filtering software. GMs can use built-in Roll20 features to verify
GMs can use built-in Roll20 features to verify the integrity of dice rolls and prevent common exploits: roll20-cheat-dice
Several community-developed projects on platforms like GitHub demonstrate these vulnerabilities for educational or illustrative purposes:
: While primarily used for automation, some scripts are designed to track and average player rolls to identify statistically improbable "hot streaks" that might indicate cheating. Detection and Mitigation for GMs
: Encouraging players to use official character sheet buttons rather than custom macros makes it easier to verify that standard modifiers are being used.