The Story of Minecraft’s Most Dangerous Exploit

The Wormhole exploit a bug reported countless times to Minecraft developers yet still left unpashed an exploit so dangerous that its true potential has been unlocked but hidden from the public for over a decade why hasn’t this bug been patched what makes it so dangerous and what even is it my name is Vitalis

And this is the full story the true story of the Wormhole glitch after the past year I’m manipulated and destroyed an entire server in order to get Minecraft’s most dangerous exploit patch by its developers so let’s start from the beginning Thank you it all started in early July when I began researching Minecraft exploits I messed with duping manipulating spawn mechanics trunk loading but nothing seemed to satisfy my desire for something greater something beyond the face of Minecraft until July 14th 2022. I Came Upon a video discussing the most dangerous glitch in

Minecraft imagine being able to bring items from your own private server where you have op and creative mode onto a server-like 2b2t if possible this bug could be game breaking which towards the end of the video turned out to be a completely harmless glitch you can see

That when I bring items from my local server onto the SMP they aren’t real and are purely visual ghost items well at least that’s what this YouTuber and the viewers believe this is silica alone I came in contact with him after watching the video to learn more about the

Seemingly useless glitch as far as I’m aware I was the first to actually find a consistent setup for this basically the glitch works by either joining a server why yes and then leaving so that you can join a different server so you are on two servers at once or alternatively you

Directly join two servers at the same time which gives you the same effect basically once you perform the glitch and you have your copy of your player on one server when you leave your server the copy still stays on that one server you can just leave to another server and

The glitch is still active so from then on I started messing with the glitch because I thought it had a lot of potential I saw that chat messages and stuff were sent twice but when you break it down to the actual useful Parts it’s basically like a very weak Hacked Client

I would say it’s not very dangerous at all I learned a few things from talking with silica firstly despite all the research silica has done there are still many holes in the understanding of this glitch for example because at the time version 1.19 had just been released he

Wasn’t sure how many effects of the glitch still worked and secondly I learned exactly how to perform the glitch in three different ways and also every known ability gained by executing it for example I learned that this exploit could be used to fly in survival Minecraft wait what’s this teleport in

Survival Minecraft double jump and survival x-rays literally grow taller or shorter with this information my initial idea was to Simply use this glitch to troll my friends on an SMP perhaps make a series because with this exploit the amount of ability seemed absolutely absurd but one thing stopped me and it was something

That silica had said in the call the biggest threat of this would be that it automatically performs when joining a server carpet mod adds a slash player command that you can use to make the copy of the player perform certain actions uh send the chat message or ran

A command that you didn’t actually want to send this in combination with automation through plugins would be incredibly dangerous oh yeah you basically have control over their game at that point if I made videos on the exploit and revealed it to the public the entirety of Minecraft multiplayer

Would be at risk I would not only be showing players how to fly teleport X-ray and so on all without hacks but if an admin of any server had malicious intent they could potentially Force players to unwillingly perform certain actions on other servers in conclusion revealing the glitch was simply not an

Option but that begged the question if this glitch was so dangerous why hasn’t it been patched after I found enough stuff I made a pop report for it I said hey if this could be automated that would actually be a pretty huge deal for this patchless it was basically set it

Was pretty unlikely like it would require the server they were joining to be malicious it was still ranked as a security issue on jira so that nobody else could see it but for two years they didn’t really see any activity at all I found the stuff with the book with

Running commands on the server so I added that with the report but um but I couldn’t get any more responses the bug was continuously deemed insignificant despite its numerous reports it was unclear how it worked and any attempts to show that the glitch was dangerous were quickly shut down take this bug

Report for example made in December of 2014. the reporter Jax States I found out you joined two servers at the exact same time sometimes I could fly a moderator responds that it sounds similar to another report in which the bug was dismissed as lag and said nothing about flying Jax responds it’s a

Bit different it doesn’t crash the server it technically joins two servers resolved scrolling through the bug reports I was dumbfounded at the amount of resolved bug reports similar to Jax’s still cat’s bug report however which held the true dangers of the glitch was the only report left unresolved and kept hidden

From the public regardless they still didn’t believe the bug could be used maliciously for the glitch to be truly patched it had to be proved as a threat to Minecraft multiplayer and that’s when I step in Thank you after hearing the story of the glitch and learning about its capabilities I made it my goal to show Mojang that this wasn’t just a harmless glitch in their game this was an exploit powerful enough to entirely decimate Minecraft multiplayer so I got my closest friend sub along with the

Minecraft command expert named spoke to begin testing the exploit someone invite me to This Server I’m gonna join another server and accept the server invite at the same time there were multiple ways to perform this glitch so we decided to roll with the most flexible option joining two servers at the same time

This could be done in vanilla Minecraft but we used a mod called Essentials with the server invitation function to speed up the process oh and the mod also comes with it it comes with emotes for now we focus we completely lost track am I on the other server right now yes

What the hell I’m on both what the hell oh you instantly just left wait I’m getting confused why did it work the first time and not the second time not lucky we couldn’t consistently execute the glitch but after three hours of testing we had a breakthrough all right

Uh I believe the order went spoke kills me first wait it’s out of curiosity this kill why do we have to kill exactly I don’t know it like resets the because now I think I’m in substance world after I’ve spoke yeah Subs kills me you’re dead it worked it worked I’m

Fully conscious and then I do this command that spots oh my God on the glitch by joining both servers and then dying on the host server but why was this happening maybe still a cat knows I have no idea what it what’s happening there I can’t really answer that

Now with the exploit applied We Begin testing its capabilities along with its limitations I moved to those chords that you put in try more that yeah it is eight blocks wait that just it worked through glass I feel like a test subject bro spectator mode Vitality wait

What almost like five totally fly hacks oh what is this try to fly out of the chunks how does that work what if I just enable fly I’m in Survival Minecraft defies the laws of Minecraft what makes survival survival isn’t Survival anymore even just the fact that we could

Teleport meant that all prisons in Minecraft no longer work finally there was one more ability we wanted to experiment with and that was the possibility of transporting items across servers items with Limitless attributes infinite speeds trains literal news and most notably a command block that when activated would give us

Server operator giving yourself items this is completely undetectable select the item by clicking it and then it becomes real so basically transferring items only works for people with creative mode yikes I was starting to understand why silica had said this glitch was just a weak hackline and why the moderators on

The Minecraft forums had dismissed it for so long was this glitch even dangerous I began questioning the realisticness of my own goal seeing as to transfer items across servers a player would have to be in creative mode on the receiving server the good news was that if this was accomplished

Transferring items would be completely undetectable from server console and we could also preload the transfers with operator items beyond the creative inventory so basically we needed to figure out how to gain creative mode on a receiving server introducing social engineering earlier in the video silke had said the exploit

Would be dangerous if it could be performed without the affected player’s knowledge so what if the affected player is an admin of a receiving server not only that but what if we showed him how to perform the glitch what I’m getting at here is that we could potentially manipulate a server admin into

Performing the glitch saying how we’re showing him a security issue on his server when in reality the server admin has just turned into our puppet because as described before this glitch could be used to make affected players inadvertently run command wait at this point why can’t you just make the admin

Give you slash Timmy we are trying to be discreet we use operator commands the admin will see that we have operator So the plan was complete and with the target server and an admin in mind the only thing in our way was you not hitting that subscribe button please

Subscribe only thing in our way was ourselves I barely have to do any social engineering or whatever literally I could just like tell pair like hey click on the selector and be like okay if we were to pull this off we would have access to anything and everything possible in the game With potentially Limitless power I pondered how I could use the glitch in the best way possible and the answer became clear to me when this happened what the frick what the heck what has happened to to everything what happened to this server I joined the lifesteal

Lesson P to see nothing but chaos the land was in shambles and the players had stopped playing and that’s when it hit me I could be like Spider-Man I can do both what I mean by that is I could simultaneously revive the server while destroying it to prove to Minecraft

Developers that this exploit had to be patched wait a minute that doesn’t make sense Vitality how are you gonna revive a server and destroy it at the same time oh Timmy the answer is simple project Wormhole officially began on January 21st 2023 our mission used the Wormhole exploit to increase server

Activity and fun we’d accomplished this in three ways firstly for the next five months we’d use the exploit to keep balance on the server as the reason people stopped playing was because of the mass disparity between powerful and weak players secondly we’d use the exploit to give players a genuine

Feeling of having fun playing a game finally we’d create a mystery on the server hinting at a doomsday in which we would finally destroy the server in order to prove to Mojang that this glitch had catastrophic abilities the only thing missing was to turn this potential ability to gain Limitless

Power into a reality February 10 spoke had successfully manipulated parrot into unknowingly performing the exploit and therefore giving a thousands of barrels filled with NBT data now if you don’t know what that means neither did I NBT data is like one of those flat Lego pieces once it’s attached to something it’s stuck

Like that forever in other words these barrels are pre-filled with a ton of illegal light including a command block that gives us server operator on that day we had officially obtained Limitless power meaning project Wormhole was a ghost if you break eye contact then oh I’m gonna die I I am too old

This is for you guys we’ll get it safe it is everything was going perfectly as planned every day we were revealing new items or mobs to the server and every day the players would log on to see what was new they made videos tweets and memes about it all but just when we

Thought our plan was secured on March 27th a player named Planet Lord was looking to solve the mystery of where these items were coming from while searching for answers he used a mod that basically lets you X-ray and found one of the Barrel stashes in which project Wormhole was supplying from nearly all

The contents of the barrel were leaked and as a result rather than seeing the items as fun and new the players viewed the barrel as dangerous and because the stash was located at my base the mystery was salt and all that fun energy from before turned into fear never gonna be

On board which then turned into hate what if you just become a tyrant no one understanding you’re not willing to change no matter how much how hard you try to speak I felt like throwing up I felt like I needed to disconnect I actually am so happy that I did that

In the moment I absolutely hated everything like genuinely I was so pissed now that I’m gone though I’m thinking we start showing signs of the server being corrupted I decided to take a break from playing the game but in the meantime the operation still needed to continue so we began planning the final

Doomsday which both had to be fun for the players and display the exploits true power nice fun field day wait can we can we get a content creator like a Discord of content creators they cannot leave it doesn’t I’m working with some command block Geeks to make a gigantic control room of

The server basically it’s going to be really really cool all right we’re gonna have to play our cards very right here players are aware that I have Bob but if parrot presents them the actual like like chance to actually save the server then they’ll they’ll still have like

Hope with a plan to destroy the server with a hopefully fun event for the players it was finally time for oh my God The final doomsday was in action each hour spoke would use server operator to gradually drill the server into the ground we began by unleashing 200 YouTubers onto the private server guys they’re everywhere they’re like little ants as players flooded the server I smiled with Glee knowing that

This was not only about to be the end of the server therefore forcing us all to make a new server and start fresh but also the end of project Wormhole I fought against the Wormhole with the other players to make the event fair but the Doomsday continued as planned as

Hours went by totems were removed Hearts were taken effects were cleared all to build up to the moment when we could finally stop the server for good but the more I fought against the Wormhole the more I found myself not having fun while the players had a goal to survive

The Wormhole event because I knew everything I didn’t really know what to do I could have continued mindlessly going into battle against the Wormhole but at the time that simply didn’t seem enjoyable for so long I had hidden behind the curtains of my great project

And now watching it unfold I had no role to play so seeing my best friend next to me just as lost as I was for the first time in 11 months I decided to put the Wormhole project aside why don’t we just log off don’t you

Remember like the good old days Days of Minecraft building just playing Minecraft why the hell does it matter what other people want or not really like that but no I get what you mean we are doing what we want for us yes yes that’s what I meant Freddie yep

So we waited and watched as the server we used to care about crumbled because in the end it didn’t matter server or not that’s why we made project Wormhole to end the server while bringing its players closer together us included yeah that was the prison yeah I’m sorry

What do we want to build just a little house how about we never go to the year 2035 I don’t want to be 32 years of age magnificent finally at the end of The Wormhole event once the server had been absolutely torn apart we got all the players into a call

We’ve been kind of orchestrating the season from the very beginning I really hope you all had fun that that’s it that’s what this game’s for that’s why we play on the server and with that project Wormhole had officially come to an end almost with literal proof that

This glitch could be used to shop Minecraft multiplayer servers down silkat sent one last update to the bug report it told the story I just told you how I obtained operator status without a single person realizing how I then shut down an entire server and could have

Done a lot worse this was our final plea if they dismissed this new information the past 12 months of my life so I waited waited and waited and sure enough five days later I remember I remember that moment I just gotten home in my car I opened up my phone and you

Sent me that I am a family-friendly streamer how however I I did not stay family friendly for that moment you got op through social engineering on lifesteal a server where basically everyone is always alert and expecting the unexpected of course there’s gonna be people who will not see the video but

There’s a possibility that it kind of spreads around it just becomes common knowledge that you have to be aware of something like this then to my surprise a few days later I got another message from silica according to uh to write’s already patched in pre-release five for

1.20 yes I will go as far as to say that basically in the end everything went exactly in the way it had to go for it to work out there were so many hurdles so many steps at which everything could have gone wrong but you guys managed to

Do it from July 14 2022 to June 23rd 2023 this project has done more for me than I ever would have imagined not only did I get to technically contribute you to Minecraft security but I also learned so much about myself when all the players wanted me off the server I

Learned it’s good to disconnect from the internet once in a while when project Wormhole was coming to an end I learned to genuinely have fun playing Minecraft and most importantly I’ve learned anything from the past year it’s that you don’t need to have it all to have

Power simply to be able to share your story is power in of itself I mean with that I managed to orchestrate 11 months of a Minecraft server without anyone knowing it got the most dangerous glitch patched by its developers and most importantly the end of each and every

Day I got to be myself if you made it this far thank you so much a subscription would be greatly appreciated as I’ve spent the past 382 days working on this video it’s free and helps me a lot more than you may think thank you