What it does
Not a cheat but a tell that gives many cheats away. Within one tick — 50 ms — the Minecraft client sends its packets in a fixed order: first the actions from key presses — a hit, a placement, an item use — then the movement packet with that tick's position and rotation. The hit always comes before the rotation.
Cheats find that order inconvenient. KillAura has to turn the player toward the target before hitting, Scaffold toward the block's edge before placing, so they send a rotation ahead of the action. An honest client has no way to produce that sequence. DGuard's team took the Minecraft 1.21.11 client apart down to the packet to know the order exactly.
How to spot it
- You can't see it by eye — it shows up in the anticheat's report: a packet rotation before a hit or before a block placement
- This evidence comes alongside combat or building evidence, not on its own
- Flags don't depend on ping and persist for players with a perfect connection
- From the outside the player hits or places blocks without a visible turn toward the target — the head only twitches for an instant
How it gets caught
Order is checked every tick: which packets arrived between two movement packets, and in what sequence. The network can't help here — the connection delivers packets in the order they were sent, so lag shifts them in time but can't reorder them within a tick. A broken order has almost no honest explanation.
Still, one violation is evidence, not a verdict: allowed mods and keybinds are written into DGuard in advance and give no evidence, and a ban requires evidence across three separate episodes.