Modify your server-side scripts to limit how often a client can trigger a RemoteEvent. For example, if a gun has a fire rate of 600 RPM, the server should reject any more than 10 "Fire" requests per second from that client. :
If you are a developer using ACS, you can defend your server by implementing several security measures: : UNIVERSAL ACS SERVER CRASHER [OPEN SOURCE] Down...
: Sending data in a format or size that the ACS scripts don't expect, causing the script threads to hang or crash. Protecting Your ACS Server Modify your server-side scripts to limit how often
Exploits targeting ACS usually abuse vulnerabilities in how the server handles specific events or physics calculations: Protecting Your ACS Server Exploits targeting ACS usually
Never trust the client. Always verify that the player actually has the weapon they are trying to fire and that they have enough ammunition. :