Isn't there some sort of guidelines to it? or at least for the basic of it?
You could run tests on the online market and just notify the players that at a certain point all of their data would reset, so it'll give you enough time to see what kind of 'cheats' are reported or bugs that people are taking advantage on..
I think developers are a lot of times scared of going to the online side, but you can't possibly imagine to do it 'right' on the first time around..