Why are you even trusting the front-end for anti-exploit? It’s their machine, they can disable the LocalScript if they want to. It’s like using JavaScript to check inputs, it can be easily disabled.
Also you should stop using wait as seen on some of your codes.
Most anti-exploits are back-end as front-end anti-exploit can be disabled easily.