In the controller method that serves up the "success" view you could wrap the success actions (adding +1 credit, etc.) and the loading of the "success" view in a conditional to see that one of the variables set by the PayPal library, after a successful purchase, exists.
If it doesn't exist you can just call:
redirect('');
(be sure you're loading the URL Helper first)
Which will send the user to the site's base_url as-defined in your application/config/config.php file.
Here is an example (specific to your library, I believe):
function success()
{
if(!$this->input->post('payer_id'))
{
redirect('');
}
$data['pp_info'] = $this->input->post();
$this->view('paypal/success', $data);
}