THE TSHE FIELD GUIDE

Find your way.

Everything you need to find your way around TSHE.

87 documents 10 sections
DOCUMENTATION / SECURITY

Nukes & Raids (Security)

How TSHE defines, detects, and defends against raids, nukes, and mass attacks.

Active protection

Lyxia actively block, contain, and clean up after attacks on TSHE. It has stopped over 500 raids and attacks. Security-sensitive detection details are deliberately not published.

TSHE maintains a dedicated security posture against coordinated attacks. This section explains the two main types of attack the server defends against, how they are mitigated, and the incident history.

What this section covers

  • Raids — spamming, mass mentions, and mass joins.
  • Nukes — mass destruction of channels, roles, and content.
  • Mitigation — how attacks are detected, contained, and cleaned up.
  • Incident History — the record of attacks on the server, including the last raid and last nuke.

The short version

  • Raids overwhelm a server with volume — spam and mass joins.
  • Nukes try to destroy the server — wiping channels, roles, and messages.
  • Lyxia monitor for both in real time and have stopped over 500 raids and attacks.
  • The last raid and last nuke happened at the same time in October 2025, when a leaked internal bot token was used to attack this server and many others.
  • Since then, every bot used on the server has been tested for security vulnerabilities.
Staff instructions during an active incident are binding. Report suspicious activity rather than confronting or amplifying it.

Practical guide

TSHE actively defends against coordinated raids and nukes. Lyxia detects, contains, and cleans up attacks automatically.

Key actions

  • Understand raids versus nukes
  • Report suspicious activity
  • Do not amplify an attack
  • Follow staff during an incident

How do raids and nukes differ?

A raid adds volume to overwhelm the server; a nuke destroys the server's structure. Both are stopped with automated detection and staff containment.

Keep in mind:

  • Do not test the security systems
  • Report once with evidence
  • Protect your account access