Security checks
A short record of engineering reviews and tests since the first project commit on 21 October 2026. Updated 22 October 2026.
Recorded results
| Test suite | Latest confirmed result |
|---|---|
| Game engine | 104 / 104 passed |
| Economy simulation | 10 / 10 passed |
| Contracts | 184 / 184 passed |
| API | 214 / 214 passed |
| Web | 119 / 119 passed |
| Dependency patch regression | 7 / 7 passed |
| Production build / TypeScript | Passed / passed |
| HTTP headers / CSP nonce / wallet dialog | Passed / passed / passed |
| Production dependency scan | 0 alerts · previously 5 |
| Full dependency scan | 1 upstream alert · previously 26; local patch tested |
Each result refers to its own completed run. Repeat runs and overlapping review checks are not added together.
Review history · test names
| Date / stage | Tests and reviews |
|---|---|
| 21 Oct · project foundation | Game rules, combat determinism, mining power, drop tables, economy simulation |
| 21 Oct · first contracts review | Token, registry, cards, items, quotes, fees, rewards, boxes · 34 tests recorded |
| 21 Oct · deployment preparation | VRF, chest recovery, marketplace, staking, buyback, vesting, role separation, emission limits, Solidity–engine consistency |
| 22 Oct · application review | SIWE, wallet sessions, PvP, PvE, teams, tickets, indexing, settlement, reward recovery, arena playback, shop, staking, desktop and mobile review |
| 22 Oct · security regression | Nonce replay, session revocation, request limits, TLS, secret configuration, public API, key balances, first-box concurrency, VRF delivery, queue restart, callback gas, timelock, mint budgets, escrow exit, bounded payments, wallet changes, swap limits, CSP, NFT metadata, deployment configuration, dependency regression |
This guide describes the current code and its defaults. Some app previews also use defaults; deployed settings can differ. Review the network, amount and action before confirming.