Can exploiters change part sizes? I thought exploiters can only change values locally. I’m not totally sure how, but one exploiter insta-killed a boss in my game and said he just changed the rootpart’s size to touch a killbrick like 1000 studs away.
If they were only locally, I don’t think the boss should have actually changed sized and died?
No, they can’t do it server-sided unless you have a backdoor, make sure to make the proper server-side checks.
They can, but only they will see the change.
That person might have been exploiting some remote event vulnerability in order to do that.
Parts that are located on the server in locations such as Workspace are only replicated from the server to client and cannot be changed from the client. Parts that exist in local places (such as the CurrentCamera) can be changed on the client, but will only be viewed on the client.
What you want to double-check is that all code and objects dealing with your boss is contained server-side, and not in any client-side locations.
If either the boss or the killbrick is physics simulated and owned by the client, they can easily trigger the Touched event.
Exploiters are unable to change any parts to directly impact other clients effectively. However, they still can manipulate the physics a little to their own advantage only. Backdoors are something else, you can find it and remove it if you suspect a backdoor was installed.