PARAGON ANTICHEAT
A modern, packet-based anticheat for Paper 1.21.11 - 42 checks, active mitigations, and a lag-compensation system that cheaters can't farm.
Paragon detects cheats at the packet level using a momentum-based movement simulation, statistical combat analysis, and active mitigations that make exploits not work instead of just flagging them. Built to be brutal on cheaters and invisible to legit players.
✨ WHY PARAGON?
- False-flag resistant by design - momentum-based physics prediction means sprint-jumping, ice runs, slime bounces, riptide tridents, and knockback momentum are all naturally legal. Every check is buffered and ping-scaled.
- Ping spoofing doesn't work - above the lag threshold, checks switch to mitigate-only instead of off: no VL, no kicks for laggy players, but flights still get set back and illegal hits still get cancelled. Spoofing ping buys silence, never immunity. A dedicated PingSpoof check punishes the spoofing itself.
- Active mitigations - attribute-swap macros (auto stun-slam, lunge-swap, breach-swap) get their hits cancelled, BoatFly ejects the driver mid-air, confirmed flight/speed gets pulled back to the last verified-safe position. Never a random teleport.
- ⚔️ Macro & ghost-client detection - identical-interval and alternating two-delay click patterns (stun/slam macro signature), swap→attack→swap-back streaks under human reaction time, silent killaura (no-swing), spinbot/AntiAim, and client brand detection.
- 👁️ RayTrace Anti-Xray - ores are invisible unless the player has actual line of sight to them.
- 📱 Bedrock friendly - Geyser/Floodgate players are auto-detected with configurable per-check exemptions.
- 🔧 Everything configurable - per-check enable/disable, kick/ban VL thresholds, VL decay, setback toggles, and a fully hot-reloadable styled message file.
📋 All 42 Checks
🏃 Movement (17)
| Check |
Detects |
| Flight |
Vertical motion outside gravity prediction, hovering |
| Speed |
Per-tick momentum violations + sustained speed ceiling |
| Timer |
Sustained >20 packets/sec game speed-up |
| TickShift |
Queued movement ticks dumped in one burst (teleport-speed that dodges Timer) |
| Blink |
Selectively held movement packets while the connection stays responsive |
| Velocity |
Ignored knockback — horizontal (wall-aware) and vertical (ceiling-aware) |
| Jesus |
Walking on water/lava — ground-flag independent, spoof-proof |
| BoatFly |
Vehicles gaining altitude; flags and ejects the driver |
| GroundSpoof |
Claiming on-ground with no supporting block below |
| NoFall |
Fall-damage spoofing (sudden ground claims while falling) |
| Step |
Stepping up more than vanilla allows |
| NoSlow |
Full speed while eating, drinking, or drawing a bow |
| Phase |
Moving through solid blocks |
| ElytraFly |
Elytra speed/altitude beyond physics, boostless climbing |
| Rotation |
Invalid pitch, NaN exploits, GCD aim analysis, spinbot/AntiAim (360 spin) |
| ClickTP |
Instant teleportation in a single packet |
| BunnyHop |
Machine-perfect jump timing with extra impulse |
⚔️ COMBAT (14)
| Check |
Detects |
| Reach |
Attacks beyond range (eye-to-hitbox AABB math, ping compensated) |
| Killaura |
Multi-target same-tick attacks, impossible attack angles |
| NoSwing |
Attacks landing without an arm-swing packet (silent killaura) |
| AutoClicker |
CPS limits, inhuman consistency, identical-interval macros, alternating two-delay (stun/slam) macro patterns |
| AutoSwap |
Attribute-swap macros: swap→attack→swap-back streaks under human reaction floor (Vape/Krypton-style auto spear/mace) |
| AimAssist |
Machine-precision rotation (GCD analysis) |
| Hitbox |
Expanded target hitboxes |
| Angle |
Attacking targets behind the player |
| Critical |
Forced/spoofed critical hits |
| AutoBlock |
Attacking while shield-blocking |
| AutoTotem |
Inhuman totem refills — offhand clicks and the swap-keybind path |
| CrystalAura |
Automated end crystal place/attack cycles |
| AnchorAura |
Automated respawn anchor combat |
| NoHurtCooldown |
Attacks faster than the damage cooldown allows |
🧱 WORLD (5)
| Check |
Detects |
| Scaffold |
Bridging modules: placement timing, rotation, patterns |
| FastPlace |
Placing blocks faster than possible |
| FastBreak |
Breaking blocks faster than tool/enchant timing |
| Nuker |
Area/multi-block breaking |
| AirPlace |
Placing blocks against air |
📦 PACKETS & MISC (6)
| Check |
Detects |
| BadPackets |
NaN/infinite coordinates, invalid pitch, out-of-bounds positions |
| PingSpoof |
Artificial latency: stalled ping responses while movement flows, keepalive/transaction RTT divergence |
| FastUse |
Eating/drinking faster than vanilla consume time |
| Inventory |
Inventory interaction exploits |
| ChestSteal |
Automated container looting |
| InvMove |
Moving while inventory is open |
🛡️ ACTIVE MITIGATIONS (NOT JUST DETECTIONS)
- Attribute-Swap Fix (MC-28289) - blocks lunge-swap / breach-swap / mace stun-slam macros. Three modes:
SMART (default - manual skill-based swap tech works, macros get their hits cancelled once a pattern is established), ALWAYS (block the tech entirely), DETECT (flag only).
- Smart setbacks - confirmed movement cheats get pulled back to the last position that passed every check on solid ground. Distance-capped, world-checked, lag-aware. No random teleports, ever.
- Hit cancellation - flagged combat packets (reach, killaura, swap-hits) simply don't land.
- Vehicle ejection - BoatFly drops the driver back into gravity.
📢 STAFF TOOLS
- Styled alerts with check name, VL, ping, and debug info - staff-only (
paragon.staff / op), on by default, personally toggleable with /paragon alerts. Silent mitigations get their own ⛨ alert line.
/paragon help | alerts | violations | info | exempt | reset | ban | reload | debug (full tab completion).- Per-check exempt permissions -
paragonac.exempt.<check> for a whole check, paragonac.exempt.<check><letter> for a single sub-check (e.g. paragonac.exempt.badpacketsa, paragonac.exempt.speedb), paragonac.exempt.* for everything.
- SQLite logging of every flag and punishment, client brand detection with staff announcements, punishment cooldowns so one lag spike can never chain-kick.
📥 REQUIREMENTS
|
|
| Server |
Paper 1.21.11 (or forks) |
| Java |
21+ |
| Dependencies |
None (PacketEvents is bundled) |
| Optional |
Geyser/Floodgate for Bedrock detection |
Drop the jar in /plugins, restart, done. Everything lives in config.yml and messages.yml.
Developed by Ascvnd
