32 checks, four categories.

Lag-compensated reach — catches attackers hitting victims from beyond vanilla melee reach. Ported from Nemesis RangeA + Grim Reach.

Multi-aura / multi-target — a cheater hitting two or more distinct player victims in one tick, or three across a 2-tick lag-absorb window. Grim MultiInteractA proxy.

Autoclicker via four independent signals on a swing: CPS, Robot (sub-10ms nano-delta), StDev (too-uniform intervals), and Kurtosis (near-uniform fixed-delay). Ported from Nemesis AutoClickerA-D.

Through-walls / no-LOS KillAura — landing a hit through a solid block (the aura has no line-of-sight filter).

Criticals spoof (CritOnGround) — the cheat injects a tiny Y hop (~+0.11) around the attack tick so the server awards a crit while the player is grounded (a real jump impulse is 0.42).

Anti-knockback / Velocity — cancels or scales the ~0.4 horizontal KB a sprint-hit applies so the victim barely moves. Nemesis VelocityA/B proxy.

KeepSprint / NoSlow on attack — cancels vanilla's ~0.6 motion decel on hit so the attacker keeps full speed and sprint never drops.

WTap / SuperKnockback — toggles sprint state (STOP then START) around each attack so the server awards sprint-bonus KB even though the cheater isn't really sprinting.

JumpReset / JumpOnHurt — auto-jumps the instant the cheater is hit to 'reset' knockback.

Backtrack / StalePositionReach — the cheat delays victim packets ~80-150ms to hit the victim at an older (closer) position. Weak, corroborating only.

Unified killaura / silent-aim detector ported from Rain-Anticheat's 1.8.9 KillauraCheck. Seven sub-components share one VL pool: heuristic(aim|constant|sync), pattern(snap), silent(snap|return|track), movement(fix|lock|sprint), consume. Silent-aim swaps yaw/pitch only in look packets so the head visibly snaps onto enemies while the cheater's screen never moves. Corroborator only: contributes to red only alongside a primary definitive check; a lone KillAura alert marks yellow, never red.

AutoBlock — holds a block/shield up while continuously swinging at enemies. On 1.8 it's block-hit autoblock, on 1.21 shield-while-attacking. Ported from Rain's AutoBlockCheck. Vanilla can't swing and use an item simultaneously for more than an instant.

HitFlick / KnockbackDisplace — flicks attacker yaw OFF the victim hitbox at the attack tick (Vape 90/180/270deg; Slinky configurable) to redirect KB sideways, then snaps back. Vanilla never looks away at the hit instant then returns.

Triggerbot — deliberately LAX, only flags really blatant sub-reaction auto-attackers. The cheat auto-attacks the instant the crosshair reaches a victim's hitbox. Unlike KillAura/HitFlick, a triggerbot DOES face the target, so the only inhuman signal is timing.

Horizontal-speed envelope — flags sustained or alternating overspeed. Catches both sustained speed hacks (all 6 ticks over) and alternating BHop (3 over / 3 under) while rejecting 1-2 tick spikes.

Flight envelope — three airborne signals while groundedProxy is false: physics breach, hover/AirWalk, and ascend-without-jump. Ported from AvA checkFlight + Nemesis FlyB.

NoFall detector — accumulates downward distance while airborne, flags when a player lands from a damaging fall (fallAccum > threshold 8.0) without a hurt signal. Also catches ground-spoof-over-air and Verus stair-step.

Step detector — flags the Step cheat raising step height beyond vanilla 0.6: a single-tick deltaY in (threshold, 2.5] that follows a grounded tick (no airborne lead-up) and is not a 0.42 jump, with a solid block within reach below the new feet.

VClip / SlyPort / InfiniteAura detector — single-tick vertical clip |dy| > threshold (1.5) or horizontal teleport > 2x threshold (3.0), with no jump/knockback/velocity source. Only flags the 1.5-8 block range; the >8-block server-teleport heuristic is handled upstream.

LongJump detector — boosted horizontal velocity on jump launch. Vanilla sprint-jump first airborne tick ~0.31; flags if any airborne tick within 6 of the jump impulse (prevDeltaY ~0.42) has horizontal delta > threshold (0.6/tick ~12 bps) with no knockback/velocity/elytra source.

NoSlow detector — vanilla slows to ~20% while using an item; NoSlow cancels that, so the player sprints full speed with using-item metadata set.

BackwardSprint / OmniSprint detector — vanilla cannot sprint backward; OmniSprint forces it. BLATANT-ONLY by design.

LiquidWalk / Jesus detector — the cheat rewrites liquid bounding boxes to solid so the player stands/walks on water. Signature: near-constant Y with horizontal motion while the block at the feet is a liquid and NOT a solid, sustained >=3 ticks.

ElytraFly detector — vanilla elytra caps ~1.5 b/t (30 bps); firework boosts briefly 40-50 bps. Flags when gliding is active for >=3 sustained ticks of either blatant (bps > 40) or a pitch-vs-speed anomaly (bps > 34 while |pitch| < 8deg).

Phase / no-clip detector — the Phase cheat moves through solid blocks. Samples lower-body and upper-body centers; requires BOTH bands inside a FULL-CUBE solid (not either), so a player standing against a wall has at most one band in a solid. Sustained >=5 ticks.

Silent-aim / AimAssist detector — the cheat silently rotates to face a target; the player's look consistently points at one nearby entity's body center.

Snap-back KillAura tell — the attacker yaw snaps to the victim on the attack tick, then snaps back to the pre-attack travel bearing within 1-3 ticks.

Max-rotation-rate / snap detector — flags a single-tick yaw rotation larger than threshold (150deg) coming out of a near-still tick (previous wrapped delta < 30deg): a classic aimbot snap from rest.

Invalid-pitch detector (BadPacketsD / NCM WrongTurn) — the server normally clamps pitch to +-90deg, so a broadcast |pitch| > threshold (90) is impossible from a legit client. Trivially portable, low fire-rate, zero FP.

Scaffold / BridgeAssist detector — two paths share one VL pool: (1) rotation-snap godbridge (snaps pitch to ~78deg and yaw to cardinal while airborne over air, sustained >=8 ticks), and (2) LegitScaffold sneak-tap bridge (taps sneak 1-2 ticks at crouch-end with a swing timed to crouch-end, looking down holding a block).

Blink / FakeLag / ScaffoldBlink / LagRange detector — the cheat cancels and queues outgoing packets, so the entity appears frozen then snaps a large distance.

Timer / Boost / TickBase detector (delta-based surrogate) — the cheat accelerates the local tick rate, observable as horizontal bps far above the sprint-jump envelope sustained for several ticks. Conservative surrogate flagging the blatant sustained-overspeed tier (>14 bps) distinct from SpeedEnvelope's cap.