Anti Cheat

🪴 THE PLUGIN IS DEVELOPED SPECIFICALLY FOR THE KWEEBEC WORLD SERVER 🪴
IP: world.kweebec.xyz

---

A server-side anti-cheat for Hytale, focused on cheat protection through packet analysis. Additionally includes an Identity-protection module to control secure/insecure connections and nickname conflicts.

---

Core Features

Movement Detection

• Speed Detects abnormal horizontal speed based on position delta between ticks, using tolerances and violation accumulation.
• Fly Detects illegitimate hovering/flying by analyzing airtime and vertical behavior.
• NoClip Detects when a player is in an invalid position relative to world collision (passing through walls/inside blocks). Checks are suppressed during chunk/instance loading to avoid false positives.

Smart Enforcement

• Violation Level (VL) Violations are not punished based on a "single event" — the system accumulates a violation level and reduces it over time (decay) to minimize false positives.
• Setback Teleports the player back to their last valid position instead of an instant kick (depending on settings).
• Kick Kicks the player upon reaching a specified violation threshold.

Portal / Instance Safe

• Grace periods after teleporting/transitioning and punishment suppression during world/chunk initialization and transitions.

Identity Protection

• Optional requirement for secure authentication.
• Nickname duplicate blocking (one nickname — one online player).
• Whitelist of bindings for insecure connections: username=uuid.

---

Configuration

Below is a description of the fields provided once (they are repeated in the Speed/Fly/NoClip sections, but the meaning remains the same).

General

• enabled Enables/disables the entire plugin.

Alerts

enabled Enables notifications for detections/punishments.

prefix Message prefix (e.g., [AntiCheat]).

minIntervalMillis Anti-spam: minimum interval between notifications.

sendToSuspect Whether to send notifications to the suspected player themselves.

logToConsole Whether to duplicate notifications to the console.

Identity

enabled Enables the identity module checks.

requireSecureAuth If true, insecure connections will be rejected.

preventDuplicateUsernames If true, a second player with the same nickname will not be able to join (protection against spoofing and conflicts).

allowInsecureAuthWithAnyUuid If true, allows insecure permissions "with any UUID" (less secure).

allowedInsecureBindings CSV string of allowed bindings for insecure connections in the format: username=uuid,username2=uuid2

kickReason The kick reason when an identity check is denied/fails.

duplicateUsernameKickReason The kick reason during a nickname conflict.

---

Check Settings (Common fields for Speed / Fly / NoClip)

Each check has its own section (e.g., speed, fly, noClip) and supports the following set of parameters:

enabled Enables/disables the specific check.

vlDecayPerSecond The rate of VL "decay" per second: the higher the value, the faster a player "clears" if they stop violating.

setbackVl The VL threshold at which a setback (rollback) is allowed to be applied.

kickVl The VL threshold at which a kick is allowed to be applied.

maxSetbacks Limit on the number of setbacks for this check.

0 = no limit (setbacks can repeat indefinitely, but the kick still depends on kickVl).

setbackCooldownTicks Minimum pause (in ticks) between setbacks to avoid "teleporting" the player every single tick iteration.

graceTicksAfterTeleport How many ticks after a teleport/portal to suppress this check (and its punishments).

graceTicksAfterVelocity How many ticks to suppress the check after server-side movement impulses/velocity (to avoid catching legitimate "kicks" or launches).

kickReason The specific kick reason text for this check.

Additional fields (not present in all checks)

Speed only

maxMultiplier General tolerance multiplier for expected speed.

extraSpeed Additional "cushion" (absolute increase to allowed speed).

vlScale Scaling of violation contribution to VL (makes the system more or less sensitive).

Fly only

maxAirTicks Maximum allowed "time in air" before suspicion.

maxUpSpeed Threshold for suspicious upward vertical speed.

NoClip only

validateEveryTicks Frequency of the heavy position validity check:

• 1 = every tick
• 2 = every other tick
• 5 = once every 5 ticks
  Higher values reduce load but slow down reaction time.

---

Permissions

Bypass permissions are supported:

• Full bypass of all checks.
• Selective bypass for Speed/Fly/NoClip.
  (Exact permission node strings are defined in the permissions config).

---

Future Development

Expansion of detections is planned:

• X-Ray
• Combat cheats (killaura, reach, aim assist)
• Inventory / duplication
• Network / timing abuse