The Bunni Spoofer was not created by a large hacking syndicate. According to documentation leaked on GitHub and cheat forums (like Vape.gg and Crypt), the tool was originally developed by a user known as "Bunni" in late 2021.
Bunni was reportedly frustrated with "toxic moderators" on a specific anarchy server. Instead of moving on, Bunni developed a proof-of-concept that could:
Initially, it was a niche tool for a small Discord community. But by mid-2022, the source code was leaked to a public repository. From there, it was repackaged by dozens of cheat clients (like Rise, LiquidBounce, and Novoline) into a user-friendly "spoofer module."
Today, the Bunni Spoofer is no longer a single program. It is a technique—a standard for brute-force UUID spoofing that has been copied and iterated upon. bunni spoofer
To understand why the Bunni Spoofer is so effective, you need to look at how Minecraft authentication works (and fails).
Beyond the technical risks, using a Bunni Spoofer has severe real-world consequences for your gaming and digital life.
Let’s cut the fantasy: Using the Bunni Spoofer is against the law in most Western countries. The Bunni Spoofer was not created by a
While Minecraft is a game, circumventing authentication systems violates the Computer Fraud and Abuse Act (CFAA) in the US and the Computer Misuse Act in the UK. When you spoof a UUID to evade a ban, you are technically committing "unauthorized access to a protected computer."
If you are a server owner, you might be thinking: "Just turn on Online Mode = True. Problem solved."
Not exactly. Even with Online Mode enabled, the Bunni Spoofer creates specific problems. Initially, it was a niche tool for a small Discord community
In your server.properties, set:
online-mode=true
prevent-proxy-connections=true
This forces every connection to verify with Mojang in real-time.
Paper 1.20.4+ includes a "Session Lock" feature. It ties the UUID to the IP address and client token. The Bunni Spoofer cannot change your IP without a VPN, and changing your VPN mid-game kicks you. This is the most effective fix as of 2025.