Anti-Cheat, referred to in the kill feed at SWORD, is a countermeasure designed to prevent exploitation. While not perfect, it prevents games from being completely ruined. It is constantly being updated to combat new exploits.
Countermeasures[]
Anti-Cheat only acts up when it detects suspicious activities and will do the following:
Detection[]
Whenever the server detects suspicious movement activity (such as using speed exploits, flying etc.), the server will be in charge of calculating the speed of the player, making it difficult to move around. It is mostly proceeded after teleporting the player. This is Roblox behavior which is caused when BedWars Anti-Cheat uses Character.PrimaryPart:SetNetworkOwner(nil) for a few seconds then set it back to Character.PrimaryPart:SetNetworkOwner(game.Players:FindFirstChild(PlayerName)). More information here: Roblox Developer Documentation.
Exploits[]
There are many exploits made for the game. While most exploits are public, some of the better ones are private.
Legend[]
- U = Unknown If Patched
- P = Currently Private
- PP = Previously Private
- X = Patched
- W = Working
- I = Now Inefficient
- H = Host Only
- G = Exploit can also be done via a glitch
Allows exploiters to access the host panel. The host panel exploit worked by spoofing/modifying the teleport data in the connect controller, then firing the PlayerConnect remote followed by firing the PlayerReady remote, which made the server think that the game was a custom match.
An exploit that abuses the grapple having really high speed tolerance. Used to be able to disable the anticheat but later put down as GrappleExploit, allowing for temporary anticheat disabling when the grapple cooldown is replenished. Now inefficent because it is not sold in the shop normally.
Exploiter auto-leaves when a staff member joins to avoid getting banned. Inefficient only if they aren't using alts
Allows the player to bypass shop tier, accessing early items.
Allows players to manipulate a projectile's position allowing them to hit a player behind walls from anywhere.
The cheater would manipulate the projectile by sending multiple LongShot(); packets to the server adding up damage. Example: Doing this 100 times when it was not patched would deal 100 x N, where N is the damage from shooting a player with a bow.
Exploiter will teleport to every bed and automatically break them, then teleport to players and kill them.
Allows the player to change the holding item amount to inf. If the item is not droppable it will not work. It can glitch sometimes causing the attempted duped item to be unusable or nil.
Firing chest remotes allows you to steal any item from any player's inventory. It was patched only 30 minutes after the exploit was discovered.
Using tables and hit remotes would allow you to do x damage in 0 seconds. Other exploits which kill other players nearly instantly also fall under here.
Allows the player to fly. Variations of fly can be frame, normal, or Anti-cheat. Regular fly lasts more than 1 second before Anti-cheating.
Modified version of fly that teleports the exploiter's body really high up (1m+ studs), and makes a clone where the exploiter can control where the real character will go once disabled. This worked because after a certain vertical position, the anticheat will stop attempting to control the player.
One of the most common exploits. They can increase the speed of the player just enough for them to avoid being detected by anti-cheat while still having a semi blatant advantage.
This exploit causes the player to automatically build wherever they walk to.
Allows the player to constantly damage any enemy near sword attacking range. The exploiter does not need to have a weapon held to deal damage.
Tracers, radar, ESP, chams all fall under here. Just a way for the cheater to gain an advantage visually.
This exploit makes it so the player takes a set % of knockback from any source which the cheater decides.
Aims at the closest player at its head or body.
This exploit abuses the bedwars animations, and plays animations at certain time positions, so the character is either above or below the map, while the true character is still touching a surface. Due to the nature of the exploit, there will almost never be a time where this exploit is not possible.
The cheater will either teleport back to a block, bounce back up, or walk on an invisible surface when their character exceeds a certain Y threshold.
Made a clone of the exploiters body, and made their real body teleport to bypass the speed check, as the teleport checks were more lenient back then.
The exploiter will occasionally send toxic messages in the chat, insulting things such as the player’s skill level, internet connection, device, etc. This also happens when the exploiter performs certain actions, such as breaking a bed or killing a player.
The exploiter will be able to teleport through blocks. This is easily countered by suffocation.
The exploiter will be able to cause other players game to slow, and eventually crash. Usually the exploit works by overflowing other players with spawned game objects.
The player can jump or lunge by abusing the movement ability of items/abilities. Exploiters are able to use this exploit to travel through the map.
The exploiter will automatically buy items if they are in the radius of the Item Shop.
Removes the 0.33 second delay on swords. Now will not work due to damage being server sided.
The exploiter will automatically report a player for saying a list of blacklisted words, and later you will get a false ban for a certain amount of time or a warning.
Will climb any walls in front of them without placing blocks.
An exploit of automatically storing items in the personal chest to keep emeralds and diamonds. Now Inefficent due to bedwars adding serverside checks on if you are in range of your personal chest.
A disabler method found from sending "RocketBeltUsed" remotes to the server, disabling movement checks up to 74 speed along with disabling float checks.
This exploit will also ragdoll players nearby with it being enabled, even when in the spectator box. This was a result of the rocket belt's function being exploited when it was left unused.A method of the exploiter changing their state to "Dead" which disables block placement, block breaking, and item collection and gives the user a "godmode". While this normally is useless and the equivalent to spectator mode, a recently found exploit called multiaura allows attacks and damage while in this state.
An exploit which allows exploiters to make a 2-layer bed defence with whichever resource they have most of at an extremely fast rate.
An exploit involving firing an unprotected void turret remote which allowed dealing 20 damage every 5 seconds for 1 enemy without being near.
Will nuke any blocks selected by the cheater.
Allows exploiters to loot chests at an impossibly fast rate. Exploiters often use this exploit in the SkyWars gamemode.
Allows exploiters to deal multiple ticks of damage with 1 attack. This exploit can be covered up by either clicking quickly or using an autoclicker but is blatant most of the time.
This exploited an obscure bug that allowed for the cheater to break any block.
An exploit that uses the raven and how the localplayer is the network owner of all raven entities spawned by them to apply a bodyforce to the nearest player, then explodes the raven.
Allowed arbitrary custom match scripts to be run in any match. The exploit used the visual studio code extension, along with an unprotected remote, which allowed for the exploiters to send custom scripts to any ongoing match.
Trivia[]
- Anti-cheat can also be triggered in the Lobby.
- The Anti-Cheat can be disabled in Custom Matches by using
/setAC disabled, it can be re-enable using/setAC enabled.- Even with anti-cheat disabled, players are still able to be anti-cheated while using the Jade Hammer or knocked out of the map.
- Anti-Cheat is disabled when using Zephyr. This is because of a quick bandaid patch to solve the problem of players Anti-Cheating when attempting to double jump as Zephyr.