SECURITY / TRUST MODEL

SOURCE OF TRUTH

The browser cannot submit production scores, valuations, settlement totals, or reward numbers to the API. The indexer waits for confirmations and the public database can be rebuilt from chain history.

FUND PROTECTION

• No generic operator withdrawal from active battle custody.
• Immutable per-battle economic routing after activation.
• Approved assets, feeds, and purchase routers only.
• Fresh positive oracle rounds and actual received-token accounting.
• SafeERC20 transfers and reentrancy guards on custody paths.
• One-time asset processing and one claim per player.
• Permissionless emergency fallback after a fixed timeout.

ADMIN BOUNDARIES

The Protocol Safe is intended to own production roles and accounting buckets. Operators can schedule battles, configure approved routes, and pause unsafe activity. They cannot rewrite an active split, manually activate the WAR Machine, choose emergency recipients, or mint more WAR.

CURRENT SECURITY STATUS

CONTRACT REGISTRY

Production addresses appear here only after deployment and source verification.