Bungie’s Marathon Cracks Down on Cheaters

Bungie is positioning Marathon, its extraction-based sci-fi shooter, as a clean slate for competitive integrity. After years of battling cheaters and exploiters in Destiny 2, the studio is promising a far more aggressive, technology-first approach for Marathon — including permanent bans for verified cheaters and a security model designed from the ground up to minimize exploits.

The original article this is inspired by describes how Bungie is confronting a familiar problem: cheat software that undermines fair play, shakes community confidence, and damages a game’s long-term health. Here we’ll unpack what the studio is promising for Marathon, why it matters, and how it compares with broader trends in online game security.

Why Cheating Is Such a Threat to Competitive Shooters

For online games, especially shooters with ranked modes or high-stakes loot, cheating isn’t just an annoyance — it can erode the entire experience. Aimbots, wallhacks, and resource-duplication exploits create a sense that skill and effort don’t matter, discouraging honest players from sticking around.

Research on online multiplayer communities has shown that perceived unfairness is one of the fastest routes to churn: players who believe the game is rigged, unbalanced, or infested with cheaters are much more likely to quit and less likely to recommend the game to others.¹ As Marathon aims to be a long-lived, competitive extraction shooter, Bungie has strong incentives to visibly and aggressively clamp down on cheating from the outset.

Learning From Destiny 2’s Struggles

For years, Destiny 2 has fought an arms race with cheat creators — particularly on PC. Bungie has tried multiple approaches: legal action against cheat distributors, anti-cheat partnerships, in-house detection tools, and sandbox adjustments that reduce the impact of some exploits. Despite that, Destiny 2 players have often reported recurring waves of cheaters, especially in high-stakes PvP modes.

Bungie even pursued lawsuits against several cheat makers, arguing that cheat software violated its terms and harmed the integrity and commercial viability of Destiny 2.² Those cases signaled that the studio is willing to go beyond in-game measures, but lawsuits alone don’t fix moment-to-moment gameplay. Marathon’s security design is an attempt to address the problem at the systems level by changing how the game handles data, authority, and visibility.

Marathon’s Zero-Tolerance Policy for Cheaters

One of the headline promises is blunt: if you are caught cheating in Marathon, you are permanently banned. Bungie is explicitly rejecting a ladder of escalating penalties for serious cheating.

From Bungie’s official networking and security update for Marathon, the studio states that players found to be cheating or developing cheats will be permanently banned from playing the game in the future.³ In practice, that means:

• No warning period or gentle probation for verified cheat use.
• No temporary timeouts that let players “test the boundaries” and return.
• Account-level removal from Marathon, with no second chances for serious infractions.

Bungie does, however, draw a line between deliberate cheating (like using external software to aim or see through walls) and less severe issues such as exploiting unintended glitches. While the studio has been clear that intentionally abusing exploits can still lead to bans, the harshest penalties are reserved for outright cheating and cheat development.

Behaviors Bungie Has in Its Crosshairs

While the full list of disallowed tools will be detailed in Bungie’s terms of use and security documentation, the broad categories are familiar from other shooters:

• Aimbots and recoil scripts that artificially steady aim and track enemies.
• Wallhacks and ESP tools that show players or loot through walls or at long range.
• Packet manipulation to fake positions, speed, or actions to gain an advantage.
• Item duping and economy exploits that inflate or corrupt progression.
• Cheat development, including making or distributing tools that bypass protections.

By publicly committing to permanent bans up front, Bungie is trying to set expectations early and discourage casual experimentation with cheat software.

Server-First Design: Making the Game Itself Harder to Exploit

Beyond policy statements, the most important piece of Marathon’s anti-cheat story is its server-authoritative architecture. In older and less secure designs, the client (your PC or console) can be trusted with too much power: it decides whether hits land, what loot you get, or where your character is, with only minimal server validation. That creates openings for cheats that modify local memory or send spoofed messages.

Bungie’s Marathon security update emphasizes that the studio is taking a “fully authoritative” approach for key actions like movement, combat, and looting.³ In simple terms, that means:

• The server is the source of truth for important gameplay events.
• Clients can request actions (move, shoot, pick up loot), but the server decides whether they are valid.
• If the client sends impossible or invalid data, the server rejects it without affecting other players.

While server-authoritative design isn’t unique to Marathon – it’s common in modern competitive shooters – Bungie is emphasizing that it has deliberately chosen a higher level of server control than in Destiny 2, specifically to reduce the impact of client-side cheats.

Fog of War: Starving ESP and Wallhacks of Data

Another major pillar of Marathon’s anti-cheat approach is a fog-of-war system. This concept is widely used in strategy games, and has been adapted in shooters like Riot’s Valorant to limit how much information the client receives.⁴

The core idea: your game client only receives data about entities (players, loot, etc.) that you could plausibly perceive from your current position and line of sight. Anything beyond that is never sent to your machine in the first place.

In practice, that means:

• If an enemy is behind a wall or far outside your sensor range, the server doesn’t even tell your client they exist.
• Cheat tools that try to read hidden entities from memory have nothing to work with, because the data isn’t there.
• Only when the server determines that you should be able to see or detect something does it send that information to your game client.

Bungie notes that this “fog” also applies to loot visibility. Many cheats attempt to reveal high-value items or the contents of containers through walls. Because Marathon’s server doesn’t share those details until you’re close enough or have genuine sight, loot-scanning tools are far less effective.³

Balancing Security and Performance

Fog-of-war systems are not trivial to implement. The server has to constantly evaluate what each player could see based on geometry, distance, abilities, and effects. Riot has previously described the technical complexity of its own fog-of-war implementation in Valorant as a key component of its anti-cheat strategy.⁴

Bungie’s challenge is similar: it must strike a balance so that security gains don’t introduce excessive latency, desync, or visual oddities. Players will be quick to notice if enemies “pop” into view too late or if information feels inconsistent.

Client-Side Protections and Kernel-Level Tools

Server-side authority reduces the power of cheats, but it doesn’t erase the need for client-side defenses. Bungie has stated that Marathon will combine third-party anti-cheat tools with its own custom systems, including user-mode and kernel-level components.³

Kernel-level anti-cheat is controversial because it operates with very high privileges on a user’s system. However, several major competitive titles — like Valorant with Riot Vanguard — have adopted this approach to detect low-level cheats that start before the game launches or hide from normal system monitoring.⁵

Bungie’s reasoning is similar: to catch sophisticated cheats that operate at the driver level, the anti-cheat must also be able to see at that level. The studio will need to balance this against privacy and compatibility concerns, clearly explain what its tools do, and ensure that its kernel components are as secure and stable as possible.

Data-Driven Detection and Post-Match Analysis

On top of real-time checks, Bungie is planning to analyze gameplay data on the server side to flag accounts that behave suspiciously. By aggregating large volumes of match data, the studio can look for patterns that are extremely unlikely for legitimate players, such as:

• Unnaturally high headshot rates over long time periods.
• Perfect tracking through walls or in low-visibility conditions.
• Consistent exploitation of bugs or obscure interactions at scale.
• Economy anomalies suggesting item duplication or resource injection.

Many modern anti-cheat systems use a combination of signatures (known cheat tools or behaviors) and heuristic models (suspicious statistical patterns) to detect and verify cheating.⁶ Bungie’s promise to continue evaluating data after matches indicates that bans may sometimes be issued after manual or automated review, rather than instantly mid-match.

Protecting Player Progression and the In-Game Economy

Marathon isn’t just about winning gunfights; it’s an extraction-based game where loot, progression, and long-term investment are core motivators. Bungie explicitly says it wants to protect the time players put into the game and prevent economic exploits that devalue that effort.³

Measures the studio is emphasizing include:

• Server-side control of loot drops and inventory state to prevent duping.
• Audit trails for high-value items so suspicious transfers can be tracked.
• Detection of unusual spikes in wealth or item acquisition that hint at exploits.

By taking these steps, Bungie is trying to avoid scenarios where black-market items, duplicated gear, or inflated economies ruin the sense of fair progression — a problem that has plagued other online titles, from MMOs to looter shooters.

Community Role: Reporting and Trust

Even the most sophisticated anti-cheat tools need players’ help. Bungie is encouraging Marathon players to report suspicious behavior both in-game and via online forms. Those reports can feed into investigation pipelines and machine learning models, making future detection more accurate.

However, trust cuts both ways. If legitimate players feel wrongly banned or if the enforcement process appears opaque, frustration can spike quickly. To maintain credibility, Bungie will need to:

• Communicate clearly about what constitutes cheating and what doesn’t.
• Provide some form of appeal process for bans, especially in edge cases.
• Share periodic updates on anti-cheat improvements and enforcement results.

The studio’s transparent technical blog for Marathon’s networking and security is a good start, but ongoing communication will matter even more once large numbers of players are involved.

What This Means for Marathon’s Long-Term Health

Cheating will never be fully eradicated in a popular competitive game, but the design decisions Bungie is making for Marathon show that the studio has learned from Destiny 2’s pain points. By embracing server-side authority, fog-of-war data limitations, kernel-level detection, and a public zero-tolerance stance, Bungie is trying to raise the cost and complexity of cheating to a level where only a tiny minority can keep up.

For honest players, the promise is straightforward: your wins should feel earned, your losses should feel fair, and your time investment should be protected from those attempting to circumvent the rules. Whether Bungie can maintain that standard over years of patches, content updates, and new exploits remains to be seen, but Marathon is clearly being built with competitive integrity as a core pillar rather than an afterthought.

FAQs: Marathon’s Anti-Cheat and Security Approach

Will I be permanently banned for using visual mods or reshades?

Bungie generally focuses its harshest penalties on tools that provide competitive advantages or compromise security. Cosmetic-only visual adjustments occupy a gray area and will be covered in Bungie’s official policy. When in doubt, avoid unsupported tools that interact with the game process.

How is Marathon different from Destiny 2 in terms of anti-cheat?

Marathon is built from the ground up with more server-authoritative systems, fog-of-war data control, and a publicly stated zero-tolerance policy for cheaters. Destiny 2 has many legacy systems and design decisions that are harder to rework.

Can I appeal if I think I was banned unfairly?

Bungie historically provides ban appeal channels for its games through its support pages. While not every decision is overturned, players can submit evidence if they believe a mistake has been made.

Does kernel-level anti-cheat mean Bungie can see my personal files?

Kernel-level anti-cheat tools are designed to monitor processes and drivers that interact with the game. Reputable implementations limit data collection to what is necessary for security. Bungie will need to publish privacy and technical documentation explaining its exact approach.

Will cheaters still exist in Marathon?

Almost certainly, but the goal is to minimize their numbers and impact. By raising the technical bar and enforcing strict penalties, Bungie can make cheating rarer and less disruptive to the average player.