Denuvo Sues Cracker voices38 for the First Time#

Hey everyone, Long Zhui Ri here.

There is one name in gaming you cannot get around, one that is even spoken of in hushed tones — Denuvo. It is the target of plenty of player abuse, and also the “last line of insurance” that countless small indie studios and AAA publishers rely on to protect their sales. Over the past decade and more, the back-and-forth between Denuvo and crackers has never stopped, yet it has always stayed at the level of a “technical duel”: today’s encryption gets cracked, tomorrow’s patch hardens it, the day after it gets cracked again — a spiral of escalation.

But just recently, that unspoken arrangement was broken. Irdeto (Denuvo’s parent company) filed a complaint in the U.S. District Court for the Northern District of California on September 14, 2026, taking aim at a well-known cracker going by the handle voices38. The industry reads this as the first time Denuvo has ever truly taken a cracker to court, and the weapon it chose is not the familiar charge of “piracy infringement,” but Section 1201 of the DMCA (the Digital Millennium Copyright Act’s provision on “circumventing technological protection measures”).

The weight of this goes far beyond letting off steam. It may mean Denuvo’s defensive strategy is pivoting from “technical resistance” to “legal deterrence,” and it foreshadows a structural re-rating of the entire cracking ecosystem — and of every smaller publisher that depends on Denuvo. In this piece, we will take the lawsuit apart from beginning to end.

1. The Core Event: The Day Irdeto Filed#

1.1 The Whole Story in One Sentence#

Irdeto (Denuvo’s parent company) filed a formal complaint in the U.S. District Court for the Northern District of California, accusing the cracker known as voices38 of violating Section 1201 of the DMCA — “circumventing a technological measure protecting a copyrighted work.” This is the first lawsuit Denuvo has ever filed against a cracker.

1.2 Key Facts at a Glance#

This article relies on qualitative description; for the specific legal details of the complaint, defer to the official filing text.

2. Who Is voices38?#

2.1 A Cracker Profile#

In the cracking scene as it stands today, voices38 is not the most senior name, but it has been one of the most active crackers as of late. Unlike teams that “mass-produce” releases, voices38 takes a precision-siege route: it specifically picks the hardened targets running the latest Denuvo builds that nobody else can crack for the time being.

Its targets are almost entirely highly anticipated, high-budget headliners whose launch-window sales matter most. The interest logic behind that is airtight: the bigger the title, the more its launch-window sales depend on the encryption holding; once it falls, the diversion of players to pirated copies hits first-week sales hardest. In other words, voices38 strikes precisely at the moment Denuvo and publishers care about most.

3. The Cracking Method: Traditional Patching, Not a “Full Crack”#

3.1 Breaking In Is Not “Removal” — It Is “Bypass”#

Many people assume cracking Denuvo means “deleting” the encryption. It does not. Denuvo’s verification logic is deeply coupled with the game’s main executable; simply ripping it out crashes the game. What voices38 uses is what the community calls the “traditional patch method.”

3.2 Directly Modifying the Game’s Internal DRM Checkpoints#

Specifically, at the execution level of the game’s main program, voices38 locates and modifies the game’s internal DRM verification logic so that the “check passed” verdict always evaluates true, thereby skipping Denuvo’s authorization checks and letting the game run outside its original launch environment.

3.3 The Legal Implications of This Method#

The legally crucial point about the “traditional patch method” is that it is not a direct copy-and-pirate of game content, but a circumvention of technological protection measures. That is exactly why Irdeto sued under DMCA Section 1201 rather than “piracy infringement” — Section 1201 targets the act of “circumvention” itself, not the act of “copying.” That is the first cornerstone of this case’s legal logic.

4. Legal Breakdown: Why DMCA Section 1201 and Not Piracy Infringement?#

4.1 The Fundamental Difference Between the Two Charges#

This is the heart of the case, and the part outsiders most easily miss. Traditional “copyright infringement” targets the unauthorized copying, distribution, and public dissemination of copyrighted works; DMCA Section 1201 targets the act itself of circumventing technological measures that control access to or copying of a work.

4.2 Why It Favors Denuvo#

For Irdeto, choosing Section 1201 has several clear practical advantages:

1. No need to prove “the game was copied”: crackers often release patches rather than full game images; a copyright-infringement suit would require proving they copied protected content — a longer evidentiary chain — while Section 1201 locks directly onto the act of “circumvention,” which is tighter to prove.
2. It sidesteps the gray areas of piracy law: traditional piracy cases often leave room to argue over “substantial non-infringing use,” whereas circumvention of technological measures is clearer on the face of the statute.
3. It matches Denuvo’s commercial position: what Denuvo sells is precisely “technological protection measures” themselves; attacking circumvention is defending its core commercial value.

4.3 Defendant’s Real Identity Unknown — Sued Under the Handle First#

One more closely watched technical detail: the defendant’s real identity is currently unclear, and Irdeto’s complaint names “voices38” — the online handle — as the defendant for now. This “sue the handle first, identify later” approach usually means the plaintiff will try to pin down the defendant’s real identity through subsequent discovery and subpoena procedures (e.g., demanding records from third-party platforms, forums, and payment channels). It is one of the biggest variables in where this case goes, and a common strategy in anonymous online infringement matters.

5. Is This a Landmark “Warning Shot”?#

5.1 The Pivot From “Technical Resistance” to “Legal Deterrence”#

For over a decade, the Denuvo-cracker relationship could be summarized as “the higher the wall, the taller the ladder”: stronger encryption, faster cracks, patch iterations, another breach, on repeat. Irdeto rarely resorted to law, leaning instead on technical iteration to buy time. There were practical reasons: crackers are anonymous, globally distributed, and extremely expensive to pursue — the traditional legal route too often ends as “won the lawsuit, never found the person.”

But this first lawsuit sends a clear signal: Irdeto is putting “legal deterrence” into its defensive toolbox. Even if the defendant is never fully identified, the filing itself creates real psychological pressure inside the cracking scene — cracking is no longer a “technically zero-risk activity” and can carry the legal consequence of cross-border prosecution.

5.2 The Suit’s Symbolic Value Outweighs Its Immediate Win-Loss#

It must be said objectively: the symbolic significance of this lawsuit likely outweighs any direct courtroom result. The reasons:

• Anonymous identity, hard to hold accountable: how to unmask the natural person behind the handle “voices38” is the first mountain standing in the plaintiff’s path.
• Cross-border enforcement is hard: even with a win, if the defendant is not in the United States, enforcing the judgment across borders faces obstacle after obstacle.
• Damages may never actually be collected: unless the defendant has executable assets, any damages award likely stays on paper.

The industry’s consensus, therefore, is that Irdeto’s move is mostly a strategic declaration — a message to every potential cracker: “We are serious now, and what you do may carry legal consequences.”

6. The Structural Impact on the Denuvo Ecosystem#

6.1 For Denuvo Itself: Encryption Plus Law, a “Double Guarantee”#

For Irdeto, if this lawsuit moves forward, the commercial story of Denuvo stops being “we stay one step ahead of the crackers” and becomes “we can slow them down technically and hold them accountable legally.” That strengthens Denuvo’s bargaining position with publishers — after all, what an encryption product sells is a kind of “certainty,” and legal deterrence is, to a degree, part of that certainty.

6.2 For the Cracking Supply Chain: Risk Gets Repriced#

The cracking scene has always rested to a large degree on the assumption of “anonymous and low-risk.” If this lawsuit produces enforceable precedent or credible deterrence, the possible chain reactions include:

• Top crackers may turn more cautious or pivot to other protection: high-risk flagship targets may be avoided in favor of lower-risk ground.
• Patch release and distribution go quieter: out of public forums and into more closed, more anonymous distribution channels.
• The power structure of cracking teams may be reshuffled: who can carry higher risk, and who is willing to publish first under the pressure of prosecution, will reshape the scene’s hierarchy.

6.3 For Indie and Mid-Size Studios: A Chill, and a Choice#

This is the most noteworthy “iceberg under the waterline” of the whole episode. For AAA publishers, a cracked Denuvo build is a comparatively survivable loss — brand pull and launch-window stickiness are enough to offset part of the piracy diversion. For indie and smaller studios, the picture is entirely different:

• Denuvo’s cost is itself no small expense, and especially painful for budget-strapped small studios.
• The timing window of a crack decides first-week sales, and small studios rarely have the shock absorption of the giants.
• Now that Denuvo has begun showing a “legal defense line,” it has to some degree raised the “added value” of Denuvo, and small studios that were hesitating may be more willing to pay for the service.

That said, a real paradox follows: a small studio can afford legal-dimension protection, but cannot necessarily dodge the technical-dimension crack. The encryption-vs-cracking arms race remains, for small studios, a sword forever hanging overhead.

6.4 For the “Wait-for-the-Crack” Player Crowd: Psychological and Practical Shifts at Once#

“Waiting for the free copy” is the consumer end of this ecosystem’s chain. What does the lawsuit mean for them:

• Psychologically: “waiting for the crack” shifts from a near “zero-risk,” tacitly tolerated behavior to something stamped “potentially unlawful,” and some players may lean toward legitimate copies because of it.
• Access: if the cracking supply chain contracts or retreats into closed channels over elevated risk, the difficulty and timeliness of getting cracked copies may both rise, and the packaging gets more convoluted.
• Platforms and speech: in the relevant forums and communities, cracking talk may be self-censored out of caution, and the lifespan of resource links may shorten.

One thing must be stressed: this article describes the phenomenon strictly from an industry-observation perspective and in no way encourages any infringement. Paying for games is the most direct respect for developers’ labor, and that should not change whether or not the encryption falls.

7. A Systematic Map of the Structural Effects#

For clarity, the table below organizes the effects above by “affected party” and “nature of impact” (this is industry analysis, not official data):

8. The Case’s Objective Uncertainty: This Will Not Be a Quick Win#

At this point, I owe readers a sober judgment: this lawsuit is nowhere near “settled,” and the outcome is highly uncertain. Based on public information, at least the following key questions remain open:

8.1 Can the Identity Be Unmasked#

This is the case’s “first checkpoint.” Whether Irdeto can dig the real natural person out from behind the anonymous handle “voices38” — via subpoenas, third-party records, and the like — will directly decide whether the suit can enter substantive combat. If the defendant cannot be located, the case may spin its wheels procedurally.

8.2 Is There Room for a Defense#

DMCA Section 1201, though explicit about punishing circumvention, is not without defenses. Exceptions such as “interoperability research” and “security research” could be raised by the defense. Whether those defenses hold will shape the final characterization.

8.3 Jurisdiction and Cross-Border Enforcement#

Whether the defendant is inside the United States, how the place of infringement is determined, and whether a judgment can actually land afterwards are all real obstacles in front of Irdeto. Even winning on the merits leaves cross-border execution far more complicated than the verdict.

8.4 Will General Deterrence Actually Form#

Between winning a single case and creating general deterrence lies a long distance. Crackers are numerous, globally distributed, and technologically restless; one lawsuit will not fundamentally restructure the ecosystem’s supply and demand. The real variable is whether this case becomes a “replicable precedent” that prompts more rights holders to file suit.

9. The Long View: Where the Denuvo Ecosystem Goes From Here#

9.1 The Encryption-Cracking Arms Race Will Not Stop#

It must be admitted: whatever the outcome of this lawsuit, the technical contest will continue. Denuvo must keep upgrading its protection against new techniques, and crackers will keep hunting for new openings. The legal dimension adds an “external constraint” to this arms race; it will not replace the technical contest itself.

9.2 Rights Holders May Lean Toward the “Combination Punch”#

Looking ahead, it is reasonable to expect more Denuvo-powered publishers to follow Irdeto and layer legal tools on top of technical encryption — a “technology + law” combination. But the cost must be weighed: litigation is real money, and not every publisher can afford it, so this combination is likelier to appear at the level of top publishers and the protection vendor itself.

9.3 Where That Leaves Mid-Size Studios and Indie Developers#

For studios on limited budgets, this episode mostly amounts to a subtle environmental shift — the “legal added value” of encryption services may have risen, but the real core pain points (first-week sales, piracy diversion, the technical contest) have not gone away. They now have to weigh encryption cost, legal protection, and their own resilience more carefully than ever.

9.4 The Long-Term Effect on the Player Ecosystem#

Over the longer term, if this lawsuit helps the industry build a more effective accountability mechanism, it should in theory support healthier growth in developer revenue, which feeds back into the whole gaming ecosystem — more good games get development funding, and players ultimately benefit. But the road is not smooth; anonymity, cross-border enforcement, and technical iteration all stand in the middle as sources of uncertainty.

10. Closing: One Legal Card Will Not Topple an Ecosystem#

Friends, let me close on a deliberately cool-headed note.

Denuvo suing voices38 for the first time is, without question, a landmark turning point in the history of Denuvo. It marks the first time the protection vendor has genuinely picked up a legal weapon, moving from “technical resistance” toward “legal deterrence.” That pivot will bring structural effects — deep or shallow — for Denuvo itself, the cracking supply chain, indie and mid-size studios, and millions of players alike.

At the same time, we must stay clear-eyed: one legal card will not topple an ecosystem built jointly on supply and demand, technology, anonymity, and cross-border complexity. Where this lawsuit ultimately lands is far from clear, and its immediate win or loss may not even be the most important thing — what matters more is that it may open a new era in which rights holders run “technology + law” on dual tracks in the protection space.

To players, one more thing: whether the encryption holds or falls, whether the suit wins or loses, respecting developers and supporting legitimate copies remains the best way to keep this industry producing good work. We are all witnessing a historic juncture, and the way each of us votes with our wallet is collectively shaping this industry’s future.

This contest around Denuvo — technical and legal — has only just begun. I will keep following the developments and keep unpacking them for you.

— Long Zhui Ri, Editor-in-Chief, NTGame