NightCoop guide

Is NightCoop safe?

Last checked: 2026-11-04 · Official version: v0.2.0-beta (2026-11-02) · Protocol 164 · Free · Windows 10/11 64-bit · Up to 8 players · RED4ext only (no CET) · Phantom Liberty not required

You can check the official v0.2.0-beta archives against the published SHA-256. An independent audit of 0.1.0-beta.1 and 0.1.1-beta.2 reported no malicious code and no critical or high finding. That audit does not cover 0.2.0-beta.

What the audit covers

The kalopsia-space write-up looked at the two older plugin builds. It reports no process creation, no injection, no download-and-run, no persistence, and no credential theft. The bundled RED4ext matched the 1.30.0 bytes they compared. Links use X25519 plus a sealed channel, and the hub forwards sealed packets. The same write-up lists five medium findings. Two are design issues: a modified client can grant items through the trade path, and the hub holds the signing key, so it can sit in the middle of a session it vouches for. Direct connections can be encrypted without being authenticated.

The AI comment

One Reddit comment, from u/DaddySbeve, says the mod looks almost entirely coded and designed by AI. The project pages do not say that, and the audit judges behavior rather than authorship. Status: 1 source (that comment). The comment is a community opinion about authorship.

A checksum is a file-identity check, while a security analysis examines behavior and has a defined version scope. The 0.2.0 archives have published checksums; the independent audit linked here covers only the two October builds.