Files
elysium/apps/api
hikari dc1353a15c fix: strengthen cloud save anti-cheat with resource delta validation
Replaces the flat RESOURCE_CAP on gold and essence with a per-save
maximum derived from the player's actual income rate. The server now
computes max legitimate earnings using the previous (DB-trusted) state's
adventurers, upgrades, prestige multipliers, and equipment, then applies
a 2x buffer to cover mid-session purchases. Quest rewards are only
credited when the quest was active with an expired timer in the previous
state (using authoritative game data to prevent reward/duration
tampering). Boss rewards are included as a race-condition safety buffer
for simultaneous boss-write and save requests. Runestones are capped at
the previous value since they are only granted server-side via prestige.
2026-03-06 22:56:45 -08:00
..