State integrity is the reliability of stored data over time: the system must preserve records exactly as intended so they cannot be altered, duplicated, or counted incorrectly. In security terms, “state” can include account profiles, achievement counters, transaction history, permissions, or device settings. If that state is corrupted, a platform may reward the wrong user, lose audit accuracy, or make bad trust decisions.
Attackers often target state integrity by tampering with client-side values, replaying requests, exploiting weak synchronization, or abusing race conditions between devices and servers. Defenders protect it with server-side validation, authenticated writes, integrity checks, tamper-evident logs, and strict reconciliation rules for conflicting updates. Good state integrity is essential wherever a small data error becomes a security, fraud, or trust problem.