one thing you can do with your kick script is this
game.ReplicatedStorage.Event.OnServerEvent:Connect(function(playerObject)
if playerObject.UserId == game.CreatorId then
--command to kick here
else
playerObject:Kick("you need admin to kick someone")
end
end)
Can we get the entire kick player script, ive looked at some kick player scripts for your game but they dont seem to have a āreasonā to kick the player with. It may be possible there is another remote that they are using. Also if you want to check if your patch works you can copy the script to the console of roblox studio and execute it there (make sure when you do this it thinks you arent the owner) and also look for other :Kick events
search all getfenv in your scripts and see if you can find anything or search require if its a backdoor, i would still like to see the KickPlayer script to see if that is the issue, its possible another remote can be abused, perhaps.so you should just search for all :Kick terms and make sure they are secured.
Look for Script and see if there are any suspicious results.
If there isnāt, scan your game with an anti-virus.
Make sure the donation boards and HD Admin are legit.