Dev reminder: Server-side validation is not optional
Alot of devs new to s&box need to hear this:
the s&box platform does not protect you, not hating just pointing out people can edit client side data on s&box games.
Anything that affects gameplay—money, XP, health, inventory, movement, etc.—must be server-authoritative and server-validated, encrypted, or some kind of shield, and use a third party server.
If you trust the client with uncencrpyed or unprotected values, they can often be modified locally and exploited.