Denuvo Responds to DRM Virtual Machine Monitor Crack: Developing Updated Secure Version
Recently, a method to bypass DRM protection systems like Denuvo using a virtual machine monitor has emerged, providing game crackers with a new breakthrough. This bypass technology is so effective that renowned game repackager FitGirl declared "all single-player and non-VR Denuvo games have now been cracked or bypassed."
This statement was released following the publication of four virtual machine monitor bypass tools targeting EA Sports games. It is reported that this virtual machine monitor bypass technology relies on installing a new virtual machine monitor driver at the Ring -1 level, thereby gaining extremely low-level system access, which has raised serious security concerns.
The emergence of this general-purpose Denuvo bypass method has prompted Denuvo to implement new countermeasures. According to recent reports from online players, Denuvo has requested regular DRM online server verification every two weeks. This updated verification mechanism has been applied to games published by 2K, including NBA 2K25, NBA 2K26, and Marvel’s Midnight Suns. Denuvo’s parent company, Irdeto, also issued a statement saying, "We are already developing updated secure versions for games affected by the virtual machine monitor bypass. Players will not experience any performance impact from these enhanced security measures." Notably, Denuvo also stated that any upcoming solutions will not run at the Ring -1 level, contrary to previous speculation.
Denuvo’s response is significant because the DRM software has long been criticized for causing game performance degradation, especially when running on low-end hardware. Game studios have also become accustomed to adding Denuvo protection at the last minute before game release, often catching pre-order customers off guard and facing potential performance changes. In addition to performance controversies, issues of game ownership and preservation have also been raised, as game preservation will be impossible if Denuvo’s DRM servers are taken offline at the end of a game’s lifecycle.