I have a tool, to be more specific a pickaxe, that includes a local script handling all the animations and mouse clicks, currently, I have a remote event that sends the object through to the server be deleted and then it gives the player 1 stone.
The problem is my friend, can use RemoteSpy to simulate the RemoteEvent and he created a script that sent stone blocks from the workspace, that were valid blocks, and earned about 1,000 stone in 1 minute, manipulating the remote event.
How can I make this remote more secure to stop RemoteSpy users from getting infinite resources?