Get upto 60% Discount
A Blooket flooder was essentially a script that automated the joining process. Instead of a single student entering a game code, the script would send hundreds of requests
Blooket's early infrastructure was not built to handle massive traffic loads per game. Flooding a lobby frequently overloaded the session, causing the game to crash and rendering the quiz unplayable.
Short-form video platforms became flooded with tutorials showing students how to "crash their teacher's class." Seeing a lobby overflow with 500 bots named "Sub2Me" or spam emojis became a viral joke, driving massive traffic to GitHub repositories hosting the scripts.
: More advanced flooders, like BlooketFlooderX, focused on bypassing anti-bot measures like Cloudflare to ensure the bots could successfully join the lobby. Risks and Platform Policy Account Bans
The term "Blooket flooder" refers not to a single program but to a category of automated scripts or bots designed to spam a game session with dozens or even hundreds of fake players. By early 2021, these tools were being shared openly on platforms like GitHub, Discord, and websites like "School Cheats."
Sometimes the volume of bots would cause the entire Blooket game to lag or crash for legitimate players.
The Blooket flooder of 2021 left an indelible mark on edtech cybersecurity.
The user entered the active host's game PIN into the flooding script.
These bots would simulate real users by joining a game room, answering questions, and accumulating points without human input.
The script initiated a loop that opened hundreds of simultaneous network requests to the Blooket game session server.
By simply entering the 6-digit , a user could bypass the standard joining process. Instead of one student joining, the script would automate the "join" request hundreds of times per second. Why did people use them in 2021?
Developers introduced rate limiting to monitor how fast requests are sent from a single IP address. If a device attempts to send dozens of join requests within a fraction of a second, the server flags the activity as automated and temporarily blocks that IP address. 3. Integration of CAPTCHA Challenges