Nocom: The Exploit That Found Thousands of 2b2t Bases

Nocom was an exploit on 2b2t, the oldest anarchy server in Minecraft. 2b2t has seen many hacks and backdoors, but Nocom was the most powerful exploit ever used there. From July 2018 to July 2021, a group called Nerds Inc. used it to track players in the Overworld and the Nether and find about 15,000 bases. This is how it started, how it worked and how it ended.

The Birth of Nocom

In 2018, two well-known 2b2t players, 0x22 and Babbaj, found a way to crash 2b2t by loading thousands of chunks at once. Instead of abusing the crash, they crashed the server on purpose so that Hausemaster, the owner of 2b2t, would report the bug to PaperMC, the server software 2b2t runs on.

PaperMC fixed it the next day, and the fix did exactly what 0x22 and Babbaj wanted: it opened a new exploit that could track the movements of thousands of players. They shared their plan with fr1kin, a member of the notorious Nerds Inc., and together they laid the groundwork for Nocom.

How Nocom Worked

Nocom was simple but devastating. By sending the server requests about chunks and reading whether each chunk was loaded or not, 0x22 and Babbaj built a primitive version of what later became Nocom.

In March 2020, leijurv, the lead developer of Baritone, joined the Nerds Inc. team. Together they built a full system that could track players, work out which chunks belonged to which player, and rebuild whole bases from the answers the server gave when they tried to mine a block out of reach. It used a statistical method called a particle filter to follow each player as they moved.

Every time a player moved, the server would unknowingly reveal their position. Nerds Inc. used this exploit to track bases, raid stashes, and grief countless builds, all while the rest of the server had no idea they were being watched.

Widespread Destruction

Nocom tracked about 15,000 bases. Players could no longer hide anywhere on the 2b2t map, and even the most remote stashes were found and looted. Some of the most famous bases in 2b2t’s history were hit: Space Valkyria 3 V2 was raided, and Niflheim, the base with the Ice Dragon, leaked through Nocom.

What made Nocom so dangerous was that it tracked players live. Its software followed each player as they moved, across the whole map.

The End of Nocom

In 2020, the player 0Neb grew suspicious of accounts such as xz_9 that stayed online all day doing nothing. They turned out to be Nocom bots. On 15 July 2021, Hausemaster added a range limit that stopped chunks from giving away where players were, and that ended Nocom. A few days later, Nerds Inc. told the whole story themselves in FitMC’s video.

But by then, the damage was done. Nerds Inc. had gathered about 1.7 terabytes of data on the server, and many of 2b2t’s greatest bases and stashes had been destroyed.

What Nocom Left Behind

With Nocom finally patched, the 2b2t community could recover and rebuild bases from the ashes. But the fallout from the exploit left scars across the server. The exploiters behind Nocom, like 0x22, Babbaj and fr1kin, had shaped the server’s history in ways no one could have imagined. The server had fallen, but from its ashes, a new era of 2b2t began.

For a server built on chaos, Nocom proved just how fragile even the most chaotic worlds can be. While the exploit is now just a part of 2b2t’s long history, its effects will be remembered forever.

If you want to play on an anarchy server where you can still discover dupes, try 6b6t.

How to Join 6b6t

Java: install AnarchyMod once, then connect to join.6b6t.org.
Bedrock: br.6b6t.org, port 19132. No mod needed.
Cracked accounts work on Java. Bedrock needs an Xbox account.

Thanks to FitMC on YouTube for the information and screenshots.