Pandora AntiCheat

Pandora AntiCheat is a layered anti-cheat mod for Minecraft Forge. It helps server owners detect suspicious movement, combat, mining, placement and client-side behavior while providing configurable alerts, punishments and moderation tools.

Pandora is designed for multiplayer servers that want stronger server-side validation without relying on a single detection method.

Features

• Movement checks for fly, hover, speed, NoFall, NoSlow, WaterWalk, Spider, Step, ground spoofing, invalid vertical movement and teleport anomalies.
• Combat checks for reach, attacks through walls, invalid aim angles, multi-target attacks and excessive attack rates.
• World interaction checks for FastBreak, Nuker, Scaffold, GhostHand, block reach, fast placement and interaction spam.
• Client challenge/response, heartbeat validation, jar integrity verification, loaded-mod policy and runtime-injection reporting.
• Per-check violation levels, automatic decay, operator alerts, movement setbacks and configurable kick thresholds.
• Configurable punishment commands, visual punishment effects, HWID bans and manual or automatic ban waves.
• HackerFinder, player-profile, violation-history and punishment-log interfaces.
• Optional Discord webhook alerts for violations, client-security events, server startup/shutdown and moderation actions.
• Public Java API and cancellable violation/punishment events for other Forge mods.
• sandbox mode for testing detections without applying gameplay punishments.

Installation

Install the same Pandora jar on the dedicated Forge server and on every client.

Pandora uses client attestation for its client-security features. When requireClient is enabled, players without the mod or without a successful attestation can be rejected. Version 1.4.0 uses network protocol 5, so server and clients must use compatible Pandora versions.

Configuration

Forge creates config/pandora-server.toml in the server directory. Important settings include:

• enforcementMode: use enforce to apply punishments or sandbox to record detections safely.
• setbackVl and kickVl: violation thresholds for movement setbacks and kicks.
• disabledChecks: disable individual checks when tuning your server or modpack.
• allowedClientMods, bannedClientMods and strictClientModList: control client-mod policy.
• exceptionItems and exemptPlayers: define intentional movement exceptions and exempt players.
• aggressiveMode: enables faster telemetry, shorter buffers and stricter detection behavior.

Start with alerts or sandbox mode when tuning Pandora for a new modpack. No anti-cheat can guarantee detection of every modification, so server-side checks and sensible configuration remain important.

Discord alerts

Discord integration is optional and disabled by default. When enabled, Pandora sends webhook messages to the URL configured by the server owner. Webhooks can report violations, security events, moderation actions and lifecycle events.

Do not share pandora-server.toml publicly: a Discord webhook URL contains a secret token.

Privacy and hardware bans

Pandora stores player profiles, violation history, punishment logs and ban-wave data in config/pandora-data.json.

Optional hardware bans use locally derived, domain-separated SHA-256 device-fingerprint signals. Raw machine identifiers are not sent to or stored by the server. When hardware bans are enabled, these hashed signals can be retained by the server to identify banned devices. Hardware fingerprints can increase the cost of repeated ban evasion, but they can still be spoofed by determined users and should be used alongside gameplay checks.

Pandora does not require a license key or an external license service.

Commands

All Pandora commands require permission level 2.

• /pandora status <player> — view a player's attestation and violation state.
• /pandora reset <player> — reset live violations.
• /pandora verify <player> — request a new security challenge.
• /pandora gui — open HackerFinder.
• /pandora profile <name|uuid> — open a stored player profile.
• /pandora history <name|uuid> — view stored violations.
• /pandora punishments — view punishment logs.
• /pandora webhook test — send a test Discord notification.
• /pandora banwave ... — manage and run ban waves.
• /pandora hwid ... — manage hardware bans.

For developers

Other Forge mods can use PandoraApi to flag players, inspect or reset violations, and access attestation and profile information. PandoraViolationEvent and PandoraPunishmentEvent are available on MinecraftForge.EVENT_BUS and can be cancelled.