Wither Anti Cheat | 1.13.X - 1.16.X | Paper, Tuinity Support | Free, Accurate, Optimized Anti Cheat 0.24.0

The anti cheating solution you have been looking for

  1. Olexorus
    Native Minecraft Version:
    Tested Minecraft Versions:
    • 1.13
    • 1.14
    • 1.15
    • 1.16
    WAC is my old anti cheat which I don't actively develop anymore (however I will still make sure that it keeps working). I recommend checking out my new anti cheat Themis (also free), for higher quality checks, faster detections and less false positives. If you're already using WAC, you can simply add Themis, and WAC will automatically disable checks which are already covered by Themis (this behaviour can be disabled by adding "themis-ignore: true" to the config file).

    This plugin only works on 1.13.X, 1.14.X, 1.15.X and 1.16.X. If the plugin doesn't work on your server, or if there's another problem, instead of just leaving a bad review please message me on Spigot or on Discord, so that I can help you and fix it!

    Also note that WAC depends on ProtocolLib, you need to have it installed on your server!


    Wither Anti Cheat, short WitherAC or WAC is a relatively new Anti Cheat. Although I'd say it's at a point where it can be used on production servers, be aware that false positives and other bugs are to be expected. However I'm regularly releasing updates with new features and fixes for bugs and false positives, and if you have any problems I'll be happy to help you out if you message me on Spigot or Discord (I'll usually respond faster on Discord).

    Spigot, Paper and Tuinity are supported!

    BungeeCord isn't directly supported, however @magefire9668 created an addon which uses WAC's API to distribute notifications accross server networks, you can find it here: https://www.spigotmc.org/resources/addon-witherac-bungee-link.76542/

    GitHub link: https://github.com/Olexorus/WitherAC (not the full source code, but issue tracker, default config files and API code)

    Discord link: https://discord.gg/2tzKFDJ2wW

    I really recommend you to join the Discord if you use WitherAC. You also don't need to download anything, and you don't need to create an account, you can just open Discord in your browser.

    If you find any bugs or bypasses please report them to me. I also take feature requests. If you want to become a tester, message me on Spigot or on Discord, all help is welcome!

    • Active development: WAC is getting updated regularly, sometimes multiple times per week. If you find a bug, bypass or a false positive, I will try to fix it as soon as possible.
    • Wide variety of checks: WAC has checks against many kinds of hacks, like movement related (e.g. Fly, Speed), combat related (e.g. Killaura, Reach) or others (e.g. Blink, Timer), you can check out the list below. The range of hacks which are blocked is also constantly expanded to combat new hacks.
    • Simple config: WAC allows you to configure which checks should run, if and when staff should be notified about hackers, if and when hacks should be blocked, and much more. However, in contrast to many other AntiCheats, it doesn't give you a ton of confusing options about the individual checks. The reason for this is that, in my opinion, those configuration options are mostly useless. If there is a problem with a check it shouldn't be fixed by changing the config, because that usually isn't a real fix but just a workaround, instead the problem should be reported and the code should be adjusted so that the problem doesn't happen anymore.
    • Easy to use: You don't need to spend hours configuring WAC before you can actually use it. While there is a configuration file, you don't need to touch it, you can just install WAC onto your server and let it take care of the rest.
    • Developer API: WAC offers an API which allows you to integrate it with your other plugins. You can read more about the API below.

    • Angle
    • BHop Speed
    • Blink
    • Boat Fly
    • Climb (aka Spider)
    • EntitySpeed
    • Fly
    • Jetpack
    • KillAura
    • NoFall
    • Nuker
    • OnGround Speed
    • Ping Spoof
    • Reach
    • Step
    • Timer
    • Vanilla Speed
    • Water Walk (aka Jesus)
    Note that this list is not complete. Some checks can catch hacks they weren't even designed for (for example Jetpack hacks are blocked by the Fly check even though I didn't add any special code for it, simply because of how similar Fly and Jetpack hacks behave). Also the same hack can have many different names in different hack clients, so even if a hack is not on this list, there's a decent chance it's blocked anyways.


    Can you add support for version X?
    If it's a new version (e.g. 1.17) I will almost certainly support it. However I won't support versions before 1.13, the reason for this is that the Spigot API was changed a lot in 1.13 and as a result it's really difficult to support old versions like 1.8 or 1.12 and new versions like 1.16 at the same time. It's possible using the compatibility layer, but that's officially discouraged by md_5, you can check out this thread for more information: https://www.spigotmc.org/threads/bu...ot-bungeecord-1-13-development-builds.328883/


    Shows if WAC is working and which version it is running

    /wacnotify [on|off] or short /wacn
    Toggles notifications from WAC about detections

    /wacinfo [playerName]
    Shows the current violation count of a player for each check

    /wacreload or short /wacr
    Reloads WitherAC and reads changes made to the config


    wac.bypass or wac.bypass.[checkName]:
    Allows players to bypass all or specific checks (default: false)

    Allows players to use the /wacinfo command

    Allows players to see notifications about detections and use the /wacnotify command (default: ops)

    Allows players to use the /wacreload command (default: ops)

    Allows players to see notifications when WAC detects a new update


    API jar file download: https://github.com/Olexorus/WitherAC/raw/master/WitherAC_API.jar
    In theory you should be able to use the normal jar file, but sometimes the obfuscation causes problems, the API jar is unobfuscated.

    API documentation:
    Every time WitherAC detects a hacker, it throws the following event which you can use to integrate it into your own plugin:
    Code (Text):

    class com.gmail.olexorus.witherac.api.ViolationEvent extends org.bukkit.event.Event implements org.bukkit.event.Cancellable {
        // returns the type of hack that was detected
        com.gmail.olexorus.witherac.api.CheckType getType()
        // returns the player who was detected
        org.bukkit.entity.Player getPlayer()
        // a runnable which blocks the detected hack when executed
        Runnable getBlockAction()
        // returns if the event is cancelled
        boolean isCancelled()
        // change if the event is cancelled
        void setCancelled(boolean)

    enum com.gmail.olexorus.witherac.api.CheckType {
        // returns the internal name of the Check
        String getCheckName()
        // returns the description of the Check
        String getCheckDescription()

    class com.gmail.olexorus.witherac.api.NotificationEvent extends org.bukkit.event.Event implements org.bukkit.event.Cancellable {
        // returns the main info, i.e. the first line of the notification
        String getMainInfo()
        // returns the extra info, i.e. the second line of the notification
        String getExtraInfo()
        // returns if the event is cancelled
        boolean isCancelled()
        // change if the event is cancelled
        void setCancelled(boolean)
    If you're wondering about the difference between the check name and the check description, the check name is what's used internally and in the config, for example "fly", the check description is what's printed out, for example "Fly / Illegal Movement"
    Diclo, ROWIMABLOX, lRAx and 6 others like this.

Recent Reviews

  1. ExagonoIZI
    Version: 0.24.0
    You can add anti auto fishing bro? I need it for my server, that have aurelium skills.
  2. gundami
    Version: 0.24.0
    good plugin, it works well.
    if it can ban a player for several times cheating, it will be better
  3. SumWhatSteve
    Version: 0.23.1
    Complete garbage. Even the most blatant anarchy server clients can bypass. Nice one.
  4. JondaMC
    Version: 0.23.1
    The server did not register that I added it there .:( :( :( :( :( :( :( :( :( :(
  5. popopopoopo
    Version: 0.23.1
    I am using a shockbyte server, I installed this plugin and it did nothing.
    If you could assist me, that would be great.
  6. Jonni_P
    Version: 0.23.1
    :D -------------------------------------------------------------------------------------------------------- Good
  7. erayco_47
    Version: 0.23.1
  8. Sa1azar
    Version: 0.23.1
    It has detected cheats very accurately.
    I am extremely grateful to you for distributing it for free.
  9. BlitzK1ng
    Version: 0.23.1
    First of all, the server version I use wac is git-Paper-433 (MC: 1.16.5) and it really works perfectly. There are no log errors and it prevents many cheats like fly speed freecam jesus aura. THE LAST RESCUE
  10. Kamil12213
    Version: 0.23.1
    Very good anticheat, the owner is really very nice and reactive on his Discord de Support. A must try!