DonutSMP Exposed For Spying On Players Mods With Ancient Exploit

YouTubers reveal how the popular server uses a years old translation key vulnerability to scan client mods during loading screens and hand out automatic bans.

The Exploit Explained

During the loading screen DonutSMP sends packets to create signs with special translation keys tied to mod language files. If your client translates them in a certain way the server knows you have the mod installed. This all happens through block updates and container packets before you even spawn.

Mods That Get You Banned

  • Meteor Client and its Glazed addon
  • Free cam and auto totem
  • Inventory tweaks and sorting mods
  • Health indicators and accurate block placement
  • Macro mods and Tweaker

The system is not perfect. Resource packs that include the same language keys can trigger false positives and get players banned anyway. Sophisticated cheats can likely bypass it entirely.

Community Reaction

YouTube coverage has sparked widespread anger over the invasive tactic. Many see it as lazy server management that prioritizes control over fair play or actual security. Discussions highlight how the exploit has been known for years yet Mojang never patched it.

Some players are now testing the system with custom packs while others are avoiding the server completely until it changes its approach.

Why This Matters For SMPs

This incident shows the shaky ground many Minecraft servers stand on when it comes to anti cheat tools. Relying on old vulnerabilities instead of robust systems risks alienating the player base and creating more drama.

Reddit · Reddit

DonutSMP community subreddit