Flint AntiCheat v2.0.0

Flint's standout feature: when a player is suspected of using KillAura, Flint can spawn a completely fake, packet-only NPC that only that player can see. It borrows a real nearby player's name and skin, holds a sword, swings, and follows behind the suspect like a normal player would. Legitimate players simply ignore it. Aura cheats, which auto-target anything humanoid in range, attack it — and land a hit on an entity that was never actually there.

It's invisible to everyone else on the server, fully configurable, and gives you a near-certain confirmation instead of a guess.



Input-Aware Hitbox — the phone false-positive fix

Bedrock touch players attack where their finger taps, not where the crosshair points — so legit taps can land tens of degrees off from the camera the server sees. This was the #1 cause of Hitbox false flags, and no threshold value fixes it.

Flint splits players by input mode: touch players get their own relaxed profile that only catches physically impossible hits, while keyboard/mouse, controller, and VR get a strict profile that is tighter than a single global setting ever could be. Crosshair-aim inference watches whether the camera is moving at the moment of a hit and promotes accordingly. Evidence can only ever make a check stricter, never more lenient — so spoofing your device to claim TOUCH gains a cheater nothing. Ships alert-only by default, so a wrong guess never bans a phone player.



Combat

• Reach — hits from farther than legally possible, checked separately per movement state, with two-sided lag compensation
• Hitbox — an artificially enlarged hitbox, detected via raytrace against the real per-axis target box, split by input mode
• KillAura — target-switching, impossible attack angles, through-wall hits, no-swing attacks, and the verification bot confirmation
• Aimbot — impossible rotation snaps and unnaturally smooth/robotic aim
• AutoClicker — CPS caps for both Java and Bedrock/touch input, plus click-timing consistency analysis
• Velocity — anti-knockback, catches reduced or missing knockback after being hit
• AutoTotem — inhumanly fast totem re-equips

Movement

• Speed — excess movement speed across walking, sprinting, jumping, and sustained long-window travel
• Fly — hovering, sustained ascension, excess air-time, and frozen-hover/noclip patterns
• Jump — excess jump velocity, bunny-hopping, and excess airborne height
• Step — stepping up more height per tick than physically allowed
• AirJump — jumping again while already airborne
• Spider — climbing solid, non-climbable surfaces
• Jesus — walking on top of water
• NoFall — spoofing ground contact to dodge fall damage
• Phase — moving through solid blocks (sustained-movement gated to avoid Bedrock false flags)
• Elytra — impossible glide speed and unboosted sustained acceleration
• InventoryMove — moving while the inventory is open (off by default)

Player / World

• Timer — client speedhacks, both burst and sustained detection methods
• FastUse — using items faster than possible
• Nuker — breaking too many blocks per second
• FastBreak — breaking a single block faster than physically possible
• FastPlace — placing blocks faster than physically possible
• Scaffold — illegal bridge-placing without looking near the block (off by default)

Every sub-check has its own enable toggle, violation threshold, ping/TPS gates, and decay rate — nothing is one-size-fits-all.



Aliases: /flintac


Granular bypass is also available: flint.bypass.<check> (e.g. flint.bypass.reach) and flint.bypass.<check><type> (e.g. flint.bypass.reacha) — covering all 24 checks and every sub-check.



Requires PlaceholderAPI installed on the server (soft dependency, registers automatically, only needed for placeholder support).


⚙ Why Flint Doesn't Ban Your Legit Players

• Input-aware detection — touch, keyboard/mouse, controller and VR players are each judged by their own profile instead of one global setting
• Modelled Geyser desyncs — sprint/glide flicker, non-20Hz movement, mining-swing spam, and liquid packet floods are compensated for instead of flagged
• Two-sided lag compensation on all combat checks — both attacker and target are rewound by ping, and mobs are now rewound per-tick too
• Broad, deliberate exemptions — potions, ice, slime blocks, riptide, levitation, vehicles, knockback, climbables, bounce blocks, wind charges, and more
• TPS and ping-aware — checks automatically skip during server lag or high-ping spikes

Requirements

• Server software: Spigot, Paper, or Folia
• Minecraft version: 1.20 and up to the latest
• Required dependency: PacketEvents
• Recommended (Bedrock detection): Floodgate and/or Geyser-Spigot
• Optional (placeholders): PlaceholderAPI