I have a serverscript in workspace that gives the user coins when they stand on it, is it safe to have it there? Can an exploiter edit it or anything like that?
It is safe.
No matter where you put the server script, exploiters will not be able to edit it nor see it.
As long as you don’t have any backdoors in your game, you’re fine.
Exploiters cannot edit nor see server scripts.