: Some exploits allow players to "throw away" unfavorable rolls before they are finalized. Since the client reports the final result to the game log, a player can repeatedly roll until a desired number is generated, then only permit that specific packet to reach the server.
: The primary technical method involves hijacking the window.WebSocket.prototype.send function. By using tools like Tampermonkey or Charles Proxy , users can intercept outgoing data packets. roll20-cheat-dice
: Encouraging players to use official character sheet buttons rather than custom macros makes it easier to verify that standard modifiers are being used. : Some exploits allow players to "throw away"
: While primarily used for automation, some scripts are designed to track and average player rolls to identify statistically improbable "hot streaks" that might indicate cheating. Detection and Mitigation for GMs By using tools like Tampermonkey or Charles Proxy
: A showcase repository illustrating how to hijack WebSocket objects to modify client-side dice results.