Detections

Every plan runs every check. Tier changes how many players you cover, how far back you can read and which features are included, never which detections run.

Thorium judges each player’s tick-by-tick movement and actions against what a vanilla client can produce, and flags what one could not. How each check decides is deliberately not documented: a description precise enough to reproduce is a description precise enough to evade.

Each detection carries a confidence between 0 and 1. Your network’s alert threshold decides which are announced; everything is recorded either way.

Movement

Speed, flight, falling, stepping, climbing, liquid walking, timer manipulation, knockback and vehicles.

MCSpeed MCFly MCNoFall MCGroundSpoof MCStep MCJesus MCSpider MCFastClimb MCAirJump MCPhase MCNoSlow MCNoWeb MCSprint MCElytra MCVehicle MCVelocity MCExplosion MCTimer MCTickTimer MCNegativeTimer MCTimerLimit MCPrediction MCBaritone

Combat

Reach, aim, targeting, attack timing and combat-related item use.

MCReach MCHitbox MCHitAngle MCThroughWalls MCAim MCAimAccuracy MCMultiAura MCAutoClicker MCCriticals MCNoSwing MCBlocking MCInvalidInteract MCToolSwitch MCAutoTotem MCFastUse MCCombatHistory

World

Building, breaking and interacting with blocks and inventories.

MCScaffold MCFastPlace MCFastBreak MCNuker MCBlockReach MCBlockSight MCGhostBlock MCAutoTrap MCInventoryMove MCXRay

MCXRay flags mining straight to diamonds, emeralds or ancient debris that had no open face, far more often than branch mining finds them. It is flag-only.

Packets

Malformed, out-of-order or abusive traffic, and known cheat clients.

MCBadPackets MCPacketOrder MCPacketRate MCPacketDelay MCMultiActions MCTransactionOrder MCCrash MCExploit MCChat MCClientBrand

On the Free plan

Until a network is on a paid plan, alerts arrive a little late and name the category (Movement, Combat, World, Packets) rather than the check. Verifying your public server does not change this — it only keeps a Free network’s alerts from being paused seven days after it was created. See plans and billing.

False positives

The most common causes are severe packet loss, a proxy adding latency, and plugins that move players directly. If a check misfires on your server, lower its ladder to flag-only and press False positive on the alert in Discord or the dashboard. That sends it, with its replay, to the Thorium team.

If Thorium misses someone you are sure is cheating, run /missed <player> in Discord while they are online. It records a clip and sends it to us.