# Rocket League's Anti-Cheat Got Bypassed in 12 days
Table of Contents
The quick version
| What happened | When |
|---|---|
| EAC went live on PC | April 28, 2026 |
| BakkesMod killed in ranked | Same day — kernel-level requirement |
| Bot activity resumed | May 10, 2026 — less than two weeks |
| Psyonix moved to server detection | Ongoing — flagging robotic behavior |
What players actually lost
The real gut punch wasnt the bots coming back. It was seeing what regular players gave up for a system that cracked in under two weeks.
BakkesMod was everywhere on PC. MMR display, custom car colors, training tools, workshop maps, a plugin ecosystem people spent years building. All of it killed in ranked play overnight. Psyonix added some native replacements after the fact, but it is nowhere close to what the community built.
The first week after EAC everyone was stoked. The game felt clean. Then the bugs hit: authentication errors booting people mid-match, lag spikes that made no sense, ghost touches that lost games. Getting kicked from a tournament because a background service hiccuped killed the vibe fast.
People settled on a rough feeling: we gave up mods for a system that had a workaround in under two weeks. I don’t blame anyone for being annoyed.
What EAC is and why it matters
Easy Anti-Cheat is a kernel-level security system. It sits at the door and checks if a process is carrying debuggers, known cheat files, or other suspicious tools. On April 28, Psyonix made it mandatory for all PC players on Steam and Epic Games Store.
For about a week, lobbies felt cleaner. There was a clear trade-off. EAC blocked obvious cheats on launch, but BakkesMod and all third-party plugins stopped working in ranked. Custom colors, MMR display, training plugins — all gone.
The community swallowed it because the bots were that bad before EAC.
The 12-day timeline
On April 23 Psyonix announced Season 22 ships with EAC. Five days to say goodbye to BakkesMod online. April 28 it went live. Cheat developers went quiet to study the integration. By May 5 rumors of successful injections spread in private Discord servers. On May 10 a bot provider unpaused subscription keys and clips of AI bots in SSL ranked matches flooded social media within hours.
Why client-side anti-cheat is not enough
EAC is client-side only. That means once someone figures out how to get past the door check, the protection is done. No matter how good the lock is, if the code runs on the user machine, a motivated person can eventually find a way around it.
This is not a knock on EAC specifically. Every kernel-level anti-cheat has the same limitation. The detection happens on hardware the cheater controls, which means the arms race never ends. EAC, BattlEye, Byfron — they all deal with this.
Server-side detection
Psyonix is not relying on the door check alone anymore. They started watching players inside the game.
Their heuristics look for robotic behavior: frame-perfect inputs no human could realistically hit. If a car is pulling off inhuman reactions consistently, the server flags it. Most bans right now come from server-side detection, not from EAC itself.
The fight shifted from “can you run the cheat” to “can your cheat act human enough.” Free and low-tier bots get caught almost instantly. Premium bots still get through, but the bar is much higher.
Where things stand
The scene is in an awkward spot. More native features than before, but the community lost a lot of what made PC Rocket League different from console. EAC is a real step forward, but it is not the fix people hoped for.
Server-side behavioral detection will keep improving. Premium bot developers will keep adapting. Free and low-quality bots will stay suppressed — that much is actually working.
FAQ
EAC only runs on the PC version (Steam and Epic Games Store). Console players on PS5 and Xbox do not need to do anything.
BakkesMod still works offline. Free Play, custom training, and local matches are fine. Queue for casual or ranked and the plugins get disabled.
Some players reported authentication errors and worse performance after launch. Psyonix is working on it. Kernel-level security usually causes growing pains like this.
Premium bots got through, but the entry bar is higher now. Most free bots get caught on sight. The real fight moved to server-side behavior analysis, which is harder to fake consistently over time.
