14 Oct 2025 Andy Greenberg from WIRED, Sal Piacente, an expert on casino cheating, and Joseph Tartaro, a researcher at IOActive, collaborated in a new episode of Hack-Lab to reveal how a common card shuffler used in U.S. casinos can be hacked to change hands in real time. Andy Greenberg The Birth of a High-Tech Heist Andy Greenberg, known for exploring the shadier sides of technology, teamed up with Tartaro, a security expert from IOActive, to execute what resembled a Hollywood-style gambling scam. Their job was to investigate if the Deckmate 2, a shuffling machine trusted by casinos from Las Vegas to Atlantic City, could be hacked. There is a high-tech gadget called Deckmate 2 that can shuffle cards more quickly and securely than a human dealer. Major events, such as the World Series of Poker, utilize the Deckmate 2. The Deckmate 2 sits flatly under the poker table, making it invisible to players. Inside the machine, as many as 26 shelves automatically shuffle the cards, creating random patterns to ensure that the game is both fair and fast. However, there is a catch: the same system also allows the machine to arrange a deck in perfect order, from ace to king, by suit. The intended use of that function for maintenance and testing led to a significant security vulnerability. Tartaro said, "If the shuffler can perfectly sort a deck, then if you can hack it, you can control every card's position." That was precisely what Tartaro and his team aimed to demonstrate. The Deckmate 2: A Hacker’s Dream Tartaro first demonstrated his ability to program the Deckmate 2 to deal any poker hand. He even made a replica of the famous scene from Casino Royale in which James Bond wins with a straight flush. By changing the machine's software, Tartaro could control the cards dealt to each player, creating results that appeared random but were actually manipulated. Even more shocking, they discovered that the flaw could be exploited through an open USB port located under the table, right next to a player's knees. Tartaro explained, "All we had to do was plug in a small device, which functions as a compact computer that alters the machine's code and transmits information to a smartphone via Bluetooth." A hacker could sit at a live poker table, plug in a device under the table, and within seconds gain full access to the machine's camera that scans each card. Then, that information could be sent to a phone app that would show the exact order of the cards. When Knowing Beats Having the Best Hand Greenberg and Tartaro found that the best way to cheat was to find out who had the best hand. Their app showed them not only their cards but also those of everyone else at the table, which helped them make the best decisions. He added, "Once you know the deck order, you don't have to win every hand." You just need to know when to bet, when to fold, and how to deceive other players. To test their theory, they came up with a way to send signs that looked like something out of a spy movie. Private game Tartaro would quickly fold his hand, look at his phone to see how the cards were stacked, and then use his chips to signal Greenberg to fold quietly. There was one chip that meant "fold," two chips that meant "call," and three chips that meant "raise." Testing the Hack in a Real Game They set up a private game in a Las Vegas dealer training school that looked and felt like a real casino because they weren't allowed to test in a licensed casino. Local players Elle and Fernando didn't know what was going on when Greenberg sat them down. The people involved thought they were just playing poker for fun. His hacked shuffler was hidden under the table. While the cards were being dealt, the hack worked excellently. Tartaro folded early on. Thereafter, he used his phone to check the order of the cards and signal Greenberg when to bet and when to fold. In the end, Greenberg admitted, "I was sweating even though I was cheating." I was worried that someone would catch me. Initially, communication breakdowns made it difficult to see the results, which led to some hands being misplayed. As the game went on, though, it became clear how effective the technique was. He was able to anticipate what his opponents would do more accurately, which helped him win big pots. In an exciting hand, he put all of his money on the line. On the river, he got a straight, which caught Fernando by surprise. “You got so lucky,” Fernando said. Greenberg could only smile. Casino Security Responds and Experts Warn Wired contacted Light & Wonder, the parent company of Shuffle Master, after its first report in 2022. They claimed it was impossible to hack. When Greenberg called the company again after two years, they told him that all of its shufflers were now safe because they had fixed the security loopholes. Tartaro was still not convinced. He stated, "These machines don't connect to the internet." "To keep them up to date, a technician has to go to each casino in person." That's not likely. Even though the USB ports were turned off, there are still repair holes and Ethernet ports. Doug Polk, a professional poker player and YouTuber, agreed with these concerns. Big casinos are generally safe, but uncontrolled private games and cardrooms are prime locations for cheating. Polk said, "You should run for the hills if you ever walk into a private game and see a Deckmate 2 on the table." Inside the Mind of a Casino Cheater Sal Piacente is a senior casino security expert who has seen every kind of scam you can think of, from fake shuffles to marked cards. He helped Greenberg understand the psychology and skills involved in cheating. To ensure that their "cheating" remained undetected, Piacente conducted the test alongside Greenberg and his team. He said it was one of the most impressive scams he had ever seen. The scheme utilized technology, timing, and subtle signals. Piacente said, "That was great," after seeing the video. "There's nothing to see." You could cheat for years without getting caught if you played your cards carefully and slowly. A Wake-Up Call for the Poker World Even though the experiment was conducted in a controlled setting, the results remain quite alarming. Numerous Deckmate 2 machines are available for purchase online, many of which have undergone refurbishment by unknown individuals. As a result, unregulated poker rooms may be vulnerable to this type of hacking attempt. The fact that the machine itself could be hacked is a significant blow to the ethics of poker, which relies on trust and technology designed to prevent cheating. Piacente expressed it well: "If there's money on the table, someone is already planning how to steal it." Always think that someone is ahead of you.
