Deceptive Honeypot Traps

# What are Deceptive Honeypots?

Exploiters commonly run external introspection tools such as Dex Explorer or SimpleSpy to inspect all RemoteEvents in ReplicatedStorage. They scan for remotes with enticing names like "GiveGems", "FreeAdmin", or "SetLevel" and fire them with modified parameters.

RAC turns this behavior into an inescapable trap. During server startup, HoneypotManager creates realistic decoy remotes in ReplicatedStorage.RAC.Remotes:

• ClaimFreeRobux
• Admin_SetLevel
• GiveAllItems

Exploiter opens Dex Explorer
        │
        ▼
Sees "ClaimFreeRobux" in ReplicatedStorage.RAC.Remotes
        │
        ▼
Fires Remote: ClaimFreeRobux:FireServer(100000)
        │
        ▼
HoneypotManager interceptor triggers on server
        │
        ├─► Assigns Maximum Risk Score (150 / 150)
        ├─► Assigns AI Confidence = 1.00 (Definitive Malice)
        ├─► Issues Instant Permanent Ban & Cross-Server Sync
        └─► Dispatches Discord Security Alert Embed

---

# Zero False-Positive Guarantee

Because no legitimate UI script or game component ever references or fires these decoy remotes, any invocation is 100% conclusive proof of an unauthorized client script injection.

There is zero possibility of a regular player firing a honeypot through normal gameplay or latency spikes.

---

# Configuring Honeypot Responses

In ServerScriptService/RAC/config.luau:

Config.Detectors.Honeypot = {
    Enabled = true,
    AutoCreateDecoys = true,
    ImmediateKickOnTrigger = true, -- Set to true for immediate ejection
    RiskWeight = 75,               -- Immediately pushes player into critical risk
}

---

# Adding Custom Honeypot Decoys

You can easily register custom honeypot remotes to match the theme of your experience:

local RAC = require(game.ServerScriptService.RAC.Engine)

-- Register custom trap remotes
RAC:RegisterHoneypot("UnlockAllGamepasses")
RAC:RegisterHoneypot("Admin_NukeServer")

---

# Next Steps

• Explore the AI Heuristics Architecture.
• View the Exploit Fingerprint Catalog.