

So what’s wrong with Candy Crush Saga’s implementation that allowed me to so easily build a tool that lets anyone cheat? In short – beating a level in Candy Crush is as easy as sending a request to the Candy Crush server, saying you beat the level.

You can see Candy Crush Cracker in action below, where I use it to get extra lives and to beat levels with any score I want: Just like with Trivia Crack, over the course of a weekend I was able to write and release a Chrome extension, Candy Crush Cracker, that converted me from a medicore-at-best Candy Crush player to a god-like crusher of candy. But, as it turns out, writing some code to cheat at Candy Crush is actually fairly simple. Given its popularity, you’d think the developers of such a polished and successful game might have taken the time to implement it in a way that is secure from cheating. And that’s not to mention the insane 75 million likes Candy Crush has racked up on Facebook. Even now, three years after its release, it’s still going strong as a top app in both the iOS and Google Play app stores. Even though it is essentially a re-skinned Bejeweled, Candy Crush has managed to ride the “most popular” app store charts unlike any game before it. Given its insane popularity, the first game I thought to investigate, of course, was Candy Crush.įor those of you living under a rock, Candy Crush Saga is a match-three puzzle game for Facebook, iPhone, and Android, released back in 2012. Links below have been updated to point at the new location, which contains the source and installation instructions.Īfter receiving a lot of interest in Trivia Cracker, a Chrome extension that lets you easily cheat in the popular game Trivia Crack, I decided it might be interesting to see if the same kinds of vulnerabilities existed in other popular games. Due to this, it can no longer be installed directly via the Chrome Extension store, and must be downloaded and installed from its source instead. Update: King, the maker of Candy Crush, has request Candy Crush Cracker be removed from the Chrome Extension store.
