Trust and safety
Security
Not audited yet. Here is what must hold before real money.
Not audited
No independent audit has been done. These docs describe how the code is designed. They are not a security guarantee.
Rules that must hold#
- Accepted lines can’t disappear or change.
- Proofs must match the right round and its rules.
- The same line can’t be claimed twice.
- Money placed outside Highroll stays on the books.
- A pause can’t erase prizes or withdrawal rights.
- Winning numbers only come through an approved path.
Where trust remains#
- Randomness
- The test network trusts an operator to supply numbers. The owner has a fallback if a request fails.
- Early reports
- A trusted operator can report results early. Claims still need proofs.
- Outside money
- The Earn Vault’s outside service can delay withdrawals or lose money.
- Other chains
- Routed purchases depend on the routing service. The cross-chain Gateway and the coin buyback path are not in the current audit scope yet.
- Apps
- Each app is responsible for legal access, clear information and user safety.
Before launch#
- An independent audit, including the launch economics changes.
- The cross-chain Gateway and the coin buyback path added to the audit, or audited before any launchpad goes live.
- A full end-to-end test of the exact deployment.
- Practice runs of operations and emergencies.
- Legal review.
Review line ownership, prizes, Backer accounting, proofs, randomness, outside money and admin rights together, not one at a time.