SquidLab Anti-Cheat | Advanced Detection | Web-Dashboard | O

• Reach A: attack distance with ping and victim-motion compensation. Honors the interaction-range attribute, so spears and tridents stab as far as vanilla lets them
• KillAura A: NoSwing, damage without any attack animation. Thrust weapons are use-based attacks and are understood as such
• KillAura B: impossible attack angles, hits far outside the field of view
• KillAura C: multi aura and rapid A-B-A target switching. Piercing weapons and sweeping swords hit several targets from ONE swing and are never counted as a switch
• KillAura D (EXPERIMENTAL): computed rotations, aura angles ignore the mouse sensitivity raster
• KillAura E (EXPERIMENTAL): aim consistency, auras center the target hit after hit while humans scatter
• AutoClicker A: CPS ceiling, the whole mining window excluded
• AutoClicker B: consistency analysis, a click rhythm steadier than a hand can produce
• AutoClicker C: endurance analysis, even randomized clickers never pause and human hands always do
• Hitbox A: the crosshair ray misses even the lag-expanded hitbox
• Criticals A: fake criticals while provably standing on solid ground
• Velocity A: anti knockback, with walls, webs, liquids and laggy victims excluded
• WallHit A: attacking through fully occluding blocks, body AND head must be covered
• ShieldAttack A: attacking while actively blocking (1.9+)

• GroundSpoof A: the client's own ground flag against real block collision. A short disagreement makes the air checks stand down, a sustained lie flags
• Flight A / B / C: hovering, impossible vertical acceleration, and glide (falling slower than gravity allows)
• Speed A / B: ground and air speed against real physics, attribute based, with a rolling average so bhop cannot hide in the mean
• Jesus A: walking on the water surface
• Timer A: packet balance, catches game speed manipulation. Lag credits and a TPS gate keep bad connections out of it
• Blink A (EXPERIMENTAL): withholding movement packets while the connection provably stays alive
• NoFall A: skipped fall damage, honors the safe-fall attribute
• Step A, HighJump A, LongJump A: impossible vertical and horizontal jumps, with the step-height and jump-strength attributes included and the effect values frozen at take-off
• WallClimb A (Spider): rising along a sheer wall long after any jump would have peaked
• FastClimb A, NoClip A
• ElytraFly A: energy model, climbing while gliding has to consume speed. Dive pull-ups and rockets of every duration stay legit
• BoatFly A: entity flight
• Strafe A (EXPERIMENTAL), Sprint A (omni-sprint), NoWeb A

• BadPackets A / B / C / D: illegal flight packets, sneak spam, swing spam, InventoryChat
• Scaffold A / B and Tower A: bridging and towering beyond any vanilla rhythm
• FastBreak A: break rate and dig timing against the REAL required time for that player, tool, enchants and haste included, so Efficiency V netherite in the nether never flags
• FastPlace A, FastUse A (FastEat), FastBow A
• Regen A, AutoFish A, ChestStealer A
• Inventory A: InventoryMove, judged on sustained walking rather than leftover momentum
• PingSpoof A (EXPERIMENTAL): transaction versus keepalive divergence
• Improbable A: meta check. It counts DISTINCT checks failed within a minute, not raw flags, so one noisy check can never snowball into a ban. The safest autoban anchor in the plugin

• XRay A: ore hiding. Ores that are not exposed to a cave or to air are sent to clients as plain stone, deepslate or netherrack. XRay texture packs still load, but there is simply no ore data left to shine through. Legit players notice zero difference because embedded ores are invisible anyway, and mining a neighbouring block reveals the real ore instantly
• XRay B: decoy ores. Fake veins are embedded into untouched stone around each player, invisible to legit eyes. XRay users see ore everywhere, and the moment they dig towards one the area snaps back to plain rock

Both are OFF by default and tagged EXPERIMENTAL in the dashboard: they rewrite what clients see, and that costs real CPU and bandwidth per player. Enable them only with TPS headroom. Both pause automatically below your MIN-TPS and both always skip Bedrock players.

Shared grace handling. Before a movement check looks at anything, a single exemption gate runs: freeze, bypass permission, Bedrock, vehicles, creative and spectator, flight permission, gliding, swimming, riptiding, join, teleport, world change, gamemode change, vehicle exit, piston, flight toggle, container open, low TPS and high ping. Combat checks have their own gate on top.

Buffers everywhere. No check flags on a single measurement. A pattern has to repeat, and the buffer drains again whenever the player looks normal. If a check is ever noisy on your server, raising its BUFFER is the safest knob there is.

Merged movement events. Under lag, one Bukkit move event can contain several client ticks. Its deltas are then doubled, which looks exactly like a speed cheat. Every per-tick check detects and skips those.

Terrain rescue. Fences, walls and gates are 1.5 blocks tall, so their base block sits a full block below your feet. Slabs, trapdoors, carpets, snow layers, grates, bulbs and every unknown modern block are handled through the server's own collision data. On top of that, air-based checks ignore anyone still within reach of real blocks below: a fly module floats far above terrain, a player walking a fence line does not.

Values frozen at take-off. A jump is judged with the jump boost, jump strength, speed multiplier and safe-fall distance the player had when they left the ground. A potion running out mid-air can no longer make an already legitimate arc look impossible.

Attribute watch. Taking armor off mid-sprint swaps attribute modifiers between two ticks. The new, lower limit would flag the old momentum. A drop in the movement-speed attribute opens a short grace window, drop-only and with a re-arm cooldown so gear-swap spam cannot farm a permanent exemption.

Setbacks are a last resort. They need a long series of violations, not one flag, and a setback further than 16 blocks is skipped entirely. Being yanked back across half a cave is worse than the cheat it was meant to stop. Only the three Flight checks set players back at all by default.

Prevention only after repetition. Cancelling a hit or a block placement is the most visible thing an anti-cheat can do. Reach only cancels once the over-reach repeats, Scaffold only once the flat-pitch bridging clearly repeats. A single lag spike never costs anyone a legitimate hit.

And when you still want to know why: /squidlab check <player> tells you live whether a player is being checked, and if not, exactly which gate is exempting them.

/sl                               - "This server is protected by SquidLab" card (everyone)
/squidlab help                    - command overview
/squidlab reload                  - reload the configuration     (squidlab.reload)
/squidlab client <player>         - show the client brand        (squidlab.client)
/squidlab freeze <player>         - (un)freeze a player          (squidlab.freeze)
/squidlab disablecheck <check>    - toggle a check live          (squidlab.disablecheck)
/squidlab violations <player>     - current violation levels     (squidlab.violations)
/squidlab cps <player>            - clicks per second            (squidlab.cps)
/squidlab connection <player>     - transaction ping, flying delay, lag spikes (squidlab.connection)
/squidlab profile <player>        - version, brand, sensitivity, CPS, totals   (squidlab.profile)
/squidlab check <player>          - live: why is this player (not) being checked (squidlab.check)
/squidlab createdash <user> <pw>  - create a web dashboard login (squidlab.createdash)
/alerts                           - toggle ingame alerts         (squidlab.alerts)
/logs <player> [page]             - violation logs               (squidlab.logs)
/punishlogs <player> [page]       - punishment logs              (squidlab.punishlogs)

squidlab.admin grants every command. squidlab.alerts receives alerts (hover for debug details, click to teleport). squidlab.bypass bypasses all checks: give it to nobody you do not trust.