Money dupe exploit (via popular 3rd party addons)

[Pantho]

This quick fix will stop the majority of money exploits done via 3rd party addons such as Moneypot/Wire and other such things.

spawned_money/init.lua
Top top of the touch function (sorry for no pull request, having issues atm).

function ENT:Touch(ent)
if ent:GetClass() ~= "spawned_money" or self.hasMerged or ent.hasMerged or self.USED or ent.USED then return end
ent.hasMerged = true
ent.USED = true

[FPtje]

Why two vars for the same purpose?

[Lexicality]

Because other addons that exist and are in use already don't use hasMerged, but do use USED.

[FPtje]

Well that sucks

[Pantho]

Aye, but it's only a small fix that fixes a few 3rd party addons from money duping so why not :)

[FPtje]

Might as well get rid of the hasMerged init

[Lexicality]

RIP anyone who used hasMerged

[FPtje]

It's something I use internally. Did other people really use that variable?

[Pantho]

Who knows, not hard to believe an addon dev has checked which var spawned_money uses and mimic it right?

[Lexicality]

Yeah who would do something like that?

[FPtje]

I didn't know that, I'll re - add it.

[FPtje]

a94e084

[Lexicality]

Thanks 😄