Anti-cheats often run a "Stealer" thread that loops through workspace every 100ms and deletes anything named "Cham" or anything with AlwaysOnTop that isn't a vanilla GUI. By using RunService.Heartbeat , our script re-applies the BillboardGui every frame (if deleted). This creates a tug-of-war that the exploit usually wins due to lower latency.
While Highlight is a native instance, game developers can use ChildAdded events (though not on CoreGui ) to detect when unauthorized highlights are added to player models. How to make an ESP/Chams effect (see through walls) roblox script dynamic chams wallhack universal fix