ofc items are server-sided.
Although, if someone would poke around with WPE, or try mail system with disconnects, then I'm sure that someone might find a "dupe" or whatsoever.
Although, I somewhere heard that in beta, there was a working gold hack. Probably bull shiet.