Real money rides on every wagered duel, so fairness is not a feature here — it is the architecture. This page documents every layer of it: how the server referees every blow, how the blockchain guards every coin, and why a hacked client wins a cheater precisely nothing.
Every anti-cheat system on earth rests on one question: what do you trust? GLADIATORS' answer is: nothing the player's machine says. The game running in your browser is treated, by design, as if it were already hacked. It renders the fight and forwards your inputs — and that is the entire extent of its authority.
One rule outranks every other rule in the codebase, and every settlement path is built around it:
A self-reported victory never pays. Ever.
During a wagered match, the server shadows the fight with a rules engine that knows exactly what the game's combat can and cannot produce — because we measured it. Every attack event is checked against physical law before it counts:
The maximum honest damage of any single blow — the heaviest weapon, the strongest champion style, a desperate riposte, every multiplier stacked — is a known number. Any attack event exceeding it is discarded as forged, and the forger is penalized. You cannot deal damage the game cannot produce.
No legitimate weapon in the game can attack faster than its measured minimum interval. Attack events arriving faster than steel can physically swing are dropped, and repeated machine-gun forgery forfeits the match to the honest fighter.
Finishers are only physically possible against a foe who is staggered or below the execution health threshold. An "execution" event against a healthy opponent is a forgery by definition, and it is thrown away — the laundered instant-kill exploit is structurally impossible.
The server tracks legal damage absorbed per round. When a fighter soaks more damage than any health pool in the game could survive, the round is declared unjudgeable — the god-mode hacker gains nothing, the honest fighter loses nothing, and the account is flagged.
Kicks, shoves and signature moves have server-known cooldowns and minimum intervals. Spam that outpaces the real game's rate limits is discarded as fabricated input.
Every weapon's true striking distance was physically measured from its animations. Combat events implying hits far outside a weapon's real reach, or blows that land before their windup could complete, fail plausibility and are rejected.
The money layer assumes attackers, because money always attracts them. Every coin's journey is verified on the Solana blockchain itself — the one ledger no game hacker can edit:
Even though the client holds zero authority, we still raise the cost of tampering with it:
Security is a moving battle, and we treat researchers as allies. If you believe you have found a vulnerability in GLADIATORS — game, platform, or payment flow — report it privately through our community channels (Telegram or X). Verified findings are rewarded, fixed, and credited. Exploiting a vulnerability against real players' money is a permanent ban and evidence preservation; reporting one is a bounty.
Summary for people who skim: the fight you see is rendered on your machine, but the fight that decides money happens on ours, checked blow-by-blow against measured physical limits, settled only from evidence the server witnessed, on money the blockchain itself verified. Hack your client all you like — you will only be lying to yourself.