2021 - Blooket Flooder

Write-Up: Blooket Flooder (2021)

4. Ethical Hacking Awareness

Ironically, the flooder introduced many students to JavaScript, API calls, and web security. Some of those bored 2021 sixth-graders are now studying computer science, having learned that with great console access comes great responsibility.

2. The “Console Ban”

Schools and edtech platforms now routinely disable browser developer tools via group policy. Students can’t paste scripts if F12 does nothing. blooket flooder 2021

The Legacy: What Remains

The Blooket flooder of 2021 left an indelible mark on edtech cybersecurity. Write-Up: Blooket Flooder (2021) 4

4. Impact on Games

  • Server lag – A flood of 500+ bots could slow down Blooket’s backend.
  • Unfair gameplay – Real players couldn't join, or the host couldn't start the game.
  • Host frustration – Teachers had to manually kick bots one by one (no bulk kick in 2021).

The Birth of the "Flooder"

A "flooder" in online parlance refers to a script or tool designed to overwhelm a service with artificial traffic. The Blooket Flooder 2021 was a specific genre of JavaScript-based bot that automated the creation of fake player accounts and forced them to join a specific Blooket game lobby. These were not sophisticated hacks—they were simple, often open-source scripts shared on GitHub, Glitch.com, and Replit, requiring only a Game ID to launch. Server lag – A flood of 500+ bots

The flooder took two primary forms:

  1. The Join Flooder: This script would copy a single student's session token hundreds or thousands of times, making it appear that a massive crowd of bots (with names like "Bot1," "Flooder," or random strings) had joined the game.
  2. The Answer Flooder: A more advanced variant. After joining, the bots would automatically answer questions—usually incorrectly or on a timed loop—to skew game results or crash the game session.

Why 2021 Was the Perfect Storm

Several factors converged in 2021 to make the Blooket flooder a viral sensation.

2. Low Technical Barrier

The scripts required zero coding knowledge. A student could copy a JavaScript snippet, paste it into the browser’s developer console (F12), input the Game ID, and watch the bot count climb. Replit templates made it even easier—click a button, enter a code, and let the server do the work.