# Evidence

## \[1] Oracle signer transactions list

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-11820384cee05a3484c2d57029f9db7953f7b72f%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-21370efce0df0779cec74ea60f8cd2de812cc9f6%2Funknown%20(1).png?alt=media" alt=""><figcaption></figcaption></figure>

## \[2] Same signer used across multiple users/games

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-0f2b94af4dfe34d9a27745255313091cf8c97a00%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-19f28ff55d732e2e72e9ef7f303beb901ab0a6a7%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-b3c0e493e1028756c4f9bfce5e58f4228b75e683%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-3d83839e6e9ab3e0f7774e98715b6b0e7d3050a9%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-9e1f2ade2ce3d7df04d9f2c180445d45420c3201%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[3] No public instructions to run an oracle node

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-ffe8fe14ab7a5ede9298a3c687c5c18f5b55599c%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-8f6aeb6a0fac1cf41aa5b1ce6f00be9af150d283%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-e86b1f68e45f59aca3e9141ff5f56e8c1ff52cfe%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[4] No on-chain commit to bet (no commit–reveal)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-8374d0857b957f3b2ac353e0a59fa8dd32cd9b76%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[5] VRF not bound to block/slot

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-315153b6fa6d467a090a6f32e547313a9b7a7bac%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-d93c969b1455b77710fbfa3d848410a28d0309c7%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-c2504e8ec03ce2e0ec0e10cfd34ad4d260ee7f10%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-33668803015123a1bc4b1a220cd242b350c660c5%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-c38615fe2400ad0c58569b1010523a96196be954%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[6] Off-chain oracle generates VRF, only final posted

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-4ea8ca6c12cfec5f05fb53b7dc81ce9eea21c911%2Fbase2.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[7] Demonstration of re-roll risk (concept or tool)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-a584dad478712bcc00c7c84df23eb49581db16be%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[8] Timing gap: bet → VRF post

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-8e65983211252220cf31ac566daa2d936f7b4f4a%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-d83ba3b177124683fa74d822695c5d04290ebb63%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[9] No on-chain function to rotate oracle signers

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-12678833c0b1758c0e41781a7b6b47398f09953e%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-ff8eed74f1c6d7a7ddab3fee93528732d0d3048d%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[10] Halborn: reliance on off-chain logic

[Halborn Audit PDF](https://proov.network/assets/halborn_audit-BD80swCh.pdf)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-5ca5d11eee6d31312725e1266dcc51b63818818b%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

***

Game Logic (off-chain black box, unverifiable fairness)

## \[11] Slot/Vault contract extracts show no outcome logic

No Game logic provided:

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-b6b07cf18e9b6b5c8adda4eef733270e7f9d1f95%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-3c293595d68f38b42217110d40f0fd6fc5e764b5%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[12] Data flow (RNG → off-chain → payout)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-5e0bf9fd8726fdde9be37a8559933e06ecd44e93%2Fbase2%402x.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[13] No published RTP/odds per game on-chain

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-c8f463362058627aaf0ef2353580584833db6167%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-c7187beff986776053698b75ffcb193bba4a89ab%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-f1f5ba11f35b6454765c435d35d15ad53930ac2d%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-eec2c7067c0464d9c814a37185c2dd92934acbfd%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-164beecf67a6f335dbc4d8546ae03f5910fae134%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[14] Backend distributions

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-b8e92746c93fc09aebb58f864b593bee245e9d4a%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[15] No user-verifiable reproduction path (no client seed binding)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-1b58dda81929a37c48ce526d9bdb591a488030b0%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-837b45313384f2eaca36f155a9ee949547399825%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-cab8fab501a92a82b92bffe56d5e9657e6c81bea%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[16] Winner wallet page (5or7BF…): full TX history

<https://solscan.io/tx/5s1N4ZfXETh3AgpJfUR57xMkGtetmKQ5UMMtVWxXdQa85XjrFi9m5A8rBZwnk6yQa98Hyd7Ar3xujV687zn8cjSo>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-8d8517de59d4aa76bc19a795e4fc4f26a54fec24%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-0a624ffb5329df77dab976a670bf6a49531cd494%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[17] Kraken-funded deposits (2× >600 SOL)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-62e6621fb70df055ec7d5644f4a14464da7204be%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-87e0183afd4cf41fb956695b1eb85b386be68077%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[18] Micro-tx burst to gambling dApps

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-45d7513bb22de4a322ff5b3c14a590a14c3f3e79%2Funknown%20(40).png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-b2076b232e79391a1db8fde66290065633258ece%2Funknown%20(39).png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-a27d323896939ac4fcbfdc564912297c31d30ec1%2Funknown%20(38).png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-4b491280df07046ff223485eb8739871ac711dac%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[19] No DeFi/NFT usage (ephemeral wallet)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-e7399456537814bfdfc5c383d2d23df06f8a2659%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-189eb787128241dcfa20ba6ed4ca317242d9b3a9%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-485254d6bbce17446c81901be15221c49c9bacb5%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-20821cf66c7f286d94e9aaa7d57111bf2287b8cd%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-4cecc409245a78913856926e5ef92a148d33d837%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[20] Timeline: Kraken → play burst → jackpot → withdraw

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-80ad4166a678784c676852fc83e8a5bdddfe1763%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-ad877b3208fd2934ef2601937260e9b70593932d%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[21] Jackpot payout TX (sender not vault)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-927d77004b2b9c6afb258255cd13159a7b77b2b5%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-48e659d96ca9005befd7489157836ddcfc7d0919%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[22] Probability graph (Poisson) for 2 in 5,000

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-f77bf06b43cc9aafe79dd3decf7b9046de13d20a%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[23] Statement: no jackpot transparency report

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-c8783b8d151975f65b3758c586fc504b9bf74b37%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-409cc4ebc11777b70fa1622ddab5555b07d1cc2c%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-8f35d9e0c85ab45c241b4ca926c5f92fd4ff8f1e%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

***

Payouts, Liquidity, Proof-of-Reserves

## \[24] Vault settlement log (typical small win auto-settled)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-4f75420ca1d2e331d880871ef40d6afc2ce67ce9%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-1a802c8bb240fd4d4fe2bb578af187cf26c1215b%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[25] Cold reserve described (marketing)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-87f837f78b2698d69389fc48688cc0aac605f24a%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[26] Cold reserve is a wallet, not a contract

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-fa2d5692eb5cf612d9422c00c19643c92b0c5156%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[27] Jackpot payout not routed via vault contract

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-5f717feafdb78ed74cf390c33b0d6752b48836d3%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[28] No timelock/multisig on reserve

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-b22602bc3d96fc9e84f1e96f186f601b191d1a98%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-04a7820ec41524bfe58702827f6dbf32423945e8%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[29] No on-chain proof-of-liabilities

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-64bab5fab7df75a72bb0b3284114d2b66481d347%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-925fff4ed7c098dfae9d9c74e22d79cb732bd9f1%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

***

Admin / Upgradeability / Governance

## \[30] Program marked upgradeable (BPF Loader)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-872e29344021fe34f3eeb140b6bf6e51498bdd88%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[31] Upgrade authority is team-controlled

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-62821b13ac0b23d1b830f0e45ad48e73691ff3ae%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-34ebecc13badfe1e8ec955666c0aa8065bc819fd%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[32] No public DAO governance (no SPL governance links)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-18d06ae410506329f5dbb02b1a576cfb19589d63%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[33] No pause/override functions publicly exposed

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-9dd0c0dc7eeec362d6ce636e416a29b7c152c623%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-542d78c6da92830aa15c773f167baf6988239306%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[34] Halborn “authority transfer not enforced” fixed

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-dea8c04d9ea28c4c8524849b1bee86b65a8cb297%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[35] Settlement batching acknowledged (delay possible)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-4590d628f6cdd6ed9f9cd4bab1409a2ae0d4441c%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-1d4cc259520611c9665c8178e0fc0bb7b699b91e%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

* IST to UST Time (At least 2 minutes settlement delay)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-a5cbd929ae93574d408f77bd74faac97c166ab8c%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

***

Halborn Scope / Audit Transparency

## \[36] Halborn scope omits RNG/oracles/game logic

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-5ca5d11eee6d31312725e1266dcc51b63818818b%2Funknown%20(23).png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-259b2501c3fbfe4b9a01af793449fa0663cb2dd3%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-177145a9b1c90ace61587db1bf9a3bcb89dcbd62%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-d76af2fcb79b683f27ca5c2dd57e3a0ae8826d25%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-5378c8422c130d6b70a43a862c9d952aa7ff3a83%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[37] No public GitHub/IPFS for audited code

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-177145a9b1c90ace61587db1bf9a3bcb89dcbd62%2Funknown%20(75).png?alt=media" alt=""><figcaption></figcaption></figure>

***

Trustless vs Reality (Marketing vs facts)

## \[38] Screenshot of “provably fair for every spin” claim

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-4673d285ec682e39ef9525f1e62aafadebe58b0d%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[39] Screenshot of “decentralized oracles” claim

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-0ed42b25002bb40eb77f619e92d7dad869516543%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-643b0586d86ad3487ff437ac4907e855f0830e10%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-bdc106f996a2560512d31f3dcac22c180434284e%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[40] Screenshot of “non-custodial, you control funds” claim

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-586ef49251f865bd7eb6b955e3a701c7773f8aa4%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[41] Claims vs Reality table (final)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-7ecfb03e1faeeb74dd9d99a106e20dee3d482389%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

***

## \[42] No Client seed input UI

Earlier, no Client Seed Input provided.

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-ca0cb1aea5092e9f74b9670940e8734eece1a831%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

Recently, **Client Seed UI added** but **no verification** that it is used for RNG with **Proov VRF hash (Server Seed)**.

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-4c026c59037a21887793d8bd02a7d202bee03fc1%2FScreenshot%202025-11-07%20at%204.41.26%E2%80%AFAM.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[43] No path to reproduce outcome from seed

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-0011efc24eeaa6155b2d5c876d755a7a1c787f55%2FScreenshot%202025-11-06%20at%2012.17.20%E2%80%AFPM.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-158a5c6efcace21e2d0516d1f7d430d0bdb01801%2FScreenshot%202025-11-06%20at%2012.17.45%E2%80%AFPM.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-99790176e4599417dd6c83ef29cb490675d93448%2FScreenshot%202025-11-06%20at%2012.18.39%E2%80%AFPM.png?alt=media" alt=""><figcaption></figcaption></figure>

***

## \[44] Explorer shows logs, not pre-commit proofs

Public Explorer (“we show everything now”) rebuttal

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-f7c780c45237bdc43f83d4c81c6208b0638d1706%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

***

## \[45] Example: bet log with no player-seed binding

**Custom Seed** (i.e. Player Seed) not used with **Proov VRF to generate RNG** for game outcome.

In simple terms, **Custom seed parameter** which is just taken in the **bet request** but **not combined with RNG** which is the least for any online crypto casino.

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-0011efc24eeaa6155b2d5c876d755a7a1c787f55%2FScreenshot%202025-11-06%20at%2012.17.20%E2%80%AFPM.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-158a5c6efcace21e2d0516d1f7d430d0bdb01801%2FScreenshot%202025-11-06%20at%2012.17.45%E2%80%AFPM.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-99790176e4599417dd6c83ef29cb490675d93448%2FScreenshot%202025-11-06%20at%2012.18.39%E2%80%AFPM.png?alt=media" alt=""><figcaption></figcaption></figure>

***

## \[46] 3 real bets with full fields (CSV)

* [bets\_sample.csv](https://docs.google.com/spreadsheets/d/1Tt-KgN4EJYt25z7WQNDVP9n6QgXrCNvLmESyZ8ZtGjw/edit?gid=1850635201#gid=1850635201)

## \[47] One bet timeline

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-bfe63decebbdaab17b9ab8533d278a980d47ef3d%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

***

## \[48] Admin/Reserve safety

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-3c51944e0b5a43b88647bec8d61a11862b129ede%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[49] No multisig on reserve (EOA ownership)

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-cb9ef392c31c09586f74ef55b07f6309591c64e8%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-7c4612b446157686b777b29395aa39ae85101602%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

## \[50] Comparision and Architecture upgrades

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-6e97908ca2816030ce050206802ca4ecc00054f0%2Funknown.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3736901984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LxlbHWXaRAYwhoAJcAI%2Fuploads%2Fgit-blob-b27698aaa08b6964666879d821a4d6286aaeb5cb%2Fbase8.png?alt=media" alt=""><figcaption></figcaption></figure>
