Why not make it so you can only set your stats to the levels you've gained normally? So if you start a new account you need to level up to 99 attack and then you can set your attack level to whatever stat you want with no penalty.