Shield

Fair-play guarantees — and where each one stands.

Unpredictable winner

in progress

The winning tile comes from a secure RNG (VRF or bonded commit–reveal). The winner is never derived from block hash or timestamp alone.

Owner can't pick

by design

No admin function selects a tile or a winner. The contract has no owner key over round outcomes.

Entry fee can't skew odds

shipped

The 1% fee is skimmed at deploy, before funds enter the pool, so it never touches the win/loss math.

You can't win from yourself

shipped

A lone player who covers the winning tile just gets their net stake back — the loser pot is zero, so no cut and no buyback.

Fixed supply

shipped

DRIP is never minted. Every reward is bought from the market, so the game can't inflate the token.

Slippage-bounded buyback

shipped

The cut→DRIP swap is a permissionless keeper step with a caller-supplied minimum out, so it can't be sandwiched into a bad fill.

Honest note. This is a real-money game of chance and a pre-launch demo. Secure randomness and legal/geo review must be in place before any mainnet round. See the repo blockers for the full list.