PARAGON ANTICHEAT

A modern, packet-based anticheat for Paper 1.21.11 - 42 checks, active mitigations, and a lag-compensation system that cheaters can't farm.

Paragon detects cheats at the packet level using a momentum-based movement simulation, statistical combat analysis, and active mitigations that make exploits not work instead of just flagging them. Built to be brutal on cheaters and invisible to legit players.

---

✨ WHY PARAGON?

• False-flag resistant by design - momentum-based physics prediction means sprint-jumping, ice runs, slime bounces, riptide tridents, and knockback momentum are all naturally legal. Every check is buffered and ping-scaled.
• Ping spoofing doesn't work - above the lag threshold, checks switch to mitigate-only instead of off: no VL, no kicks for laggy players, but flights still get set back and illegal hits still get cancelled. Spoofing ping buys silence, never immunity. A dedicated PingSpoof check punishes the spoofing itself.
• Active mitigations - attribute-swap macros (auto stun-slam, lunge-swap, breach-swap) get their hits cancelled, BoatFly ejects the driver mid-air, confirmed flight/speed gets pulled back to the last verified-safe position. Never a random teleport.
• ⚔️ Macro & ghost-client detection - identical-interval and alternating two-delay click patterns (stun/slam macro signature), swap→attack→swap-back streaks under human reaction time, silent killaura (no-swing), spinbot/AntiAim, and client brand detection.
• 👁️ RayTrace Anti-Xray - ores are invisible unless the player has actual line of sight to them.
• 📱 Bedrock friendly - Geyser/Floodgate players are auto-detected with configurable per-check exemptions.
• 🔧 Everything configurable - per-check enable/disable, kick/ban VL thresholds, VL decay, setback toggles, and a fully hot-reloadable styled message file.

---

📋 All 42 Checks

🏃 Movement (17)

Check	Detects
Flight	Vertical motion outside gravity prediction, hovering
Speed	Per-tick momentum violations + sustained speed ceiling
Timer	Sustained >20 packets/sec game speed-up
TickShift	Queued movement ticks dumped in one burst (teleport-speed that dodges Timer)
Blink	Selectively held movement packets while the connection stays responsive
Velocity	Ignored knockback — horizontal (wall-aware) and vertical (ceiling-aware)
Jesus	Walking on water/lava — ground-flag independent, spoof-proof
BoatFly	Vehicles gaining altitude; flags and ejects the driver
GroundSpoof	Claiming on-ground with no supporting block below
NoFall	Fall-damage spoofing (sudden ground claims while falling)
Step	Stepping up more than vanilla allows
NoSlow	Full speed while eating, drinking, or drawing a bow
Phase	Moving through solid blocks
ElytraFly	Elytra speed/altitude beyond physics, boostless climbing
Rotation	Invalid pitch, NaN exploits, GCD aim analysis, spinbot/AntiAim (360 spin)
ClickTP	Instant teleportation in a single packet
BunnyHop	Machine-perfect jump timing with extra impulse

⚔️ COMBAT (14)

Check	Detects
Reach	Attacks beyond range (eye-to-hitbox AABB math, ping compensated)
Killaura	Multi-target same-tick attacks, impossible attack angles
NoSwing	Attacks landing without an arm-swing packet (silent killaura)
AutoClicker	CPS limits, inhuman consistency, identical-interval macros, alternating two-delay (stun/slam) macro patterns
AutoSwap	Attribute-swap macros: swap→attack→swap-back streaks under human reaction floor (Vape/Krypton-style auto spear/mace)
AimAssist	Machine-precision rotation (GCD analysis)
Hitbox	Expanded target hitboxes
Angle	Attacking targets behind the player
Critical	Forced/spoofed critical hits
AutoBlock	Attacking while shield-blocking
AutoTotem	Inhuman totem refills — offhand clicks and the swap-keybind path
CrystalAura	Automated end crystal place/attack cycles
AnchorAura	Automated respawn anchor combat
NoHurtCooldown	Attacks faster than the damage cooldown allows

🧱 WORLD (5)

Check	Detects
Scaffold	Bridging modules: placement timing, rotation, patterns
FastPlace	Placing blocks faster than possible
FastBreak	Breaking blocks faster than tool/enchant timing
Nuker	Area/multi-block breaking
AirPlace	Placing blocks against air

📦 PACKETS & MISC (6)

Check	Detects
BadPackets	NaN/infinite coordinates, invalid pitch, out-of-bounds positions
PingSpoof	Artificial latency: stalled ping responses while movement flows, keepalive/transaction RTT divergence
FastUse	Eating/drinking faster than vanilla consume time
Inventory	Inventory interaction exploits
ChestSteal	Automated container looting
InvMove	Moving while inventory is open

---

🛡️ ACTIVE MITIGATIONS (NOT JUST DETECTIONS)

• Attribute-Swap Fix (MC-28289) - blocks lunge-swap / breach-swap / mace stun-slam macros. Three modes: SMART (default - manual skill-based swap tech works, macros get their hits cancelled once a pattern is established), ALWAYS (block the tech entirely), DETECT (flag only).
• Smart setbacks - confirmed movement cheats get pulled back to the last position that passed every check on solid ground. Distance-capped, world-checked, lag-aware. No random teleports, ever.
• Hit cancellation - flagged combat packets (reach, killaura, swap-hits) simply don't land.
• Vehicle ejection - BoatFly drops the driver back into gravity.

📢 STAFF TOOLS

• Styled alerts with check name, VL, ping, and debug info - staff-only (paragon.staff / op), on by default, personally toggleable with /paragon alerts. Silent mitigations get their own ⛨ alert line.
• /paragon help | alerts | violations | info | exempt | reset | ban | reload | debug (full tab completion).
• Per-check exempt permissions - paragonac.exempt.<check> for a whole check, paragonac.exempt.<check><letter> for a single sub-check (e.g. paragonac.exempt.badpacketsa, paragonac.exempt.speedb), paragonac.exempt.* for everything.
• SQLite logging of every flag and punishment, client brand detection with staff announcements, punishment cooldowns so one lag spike can never chain-kick.

---

📥 REQUIREMENTS

Server	Paper 1.21.11 (or forks)
Java	21+
Dependencies	None (PacketEvents is bundled)
Optional	Geyser/Floodgate for Bedrock detection

Drop the jar in /plugins, restart, done. Everything lives in config.yml and messages.yml.

---

Developed by Ascvnd