Audits
The security of user funds is paramount for any blockchain project. To ensure the safety of our players, the Russian Roulette smart contract underwent a rigorous security audit conducted by the independent firm SolidProof.io on June 25, 2024.
Audit Results
We are pleased to report that the audit identified no critical vulnerabilities in the smart contract which signifies a strong foundation for secure operation. The Russian Roulette team takes user security very seriously. We are continuously working to improve the security posture of the smart contract and will strive to implement the best practices identified in the audit. The full audit report is available here for those seeking a more detailed technical analysis. Below is a tabular summary of the issued audit report:
| TEST TYPE | AUDIT STATEMENT | STATUS | JUSTIFICATION |
|---|---|---|---|
OVERALL SECURITY | No critical issues found. Contract is safe to deploy. | ✅ | |
UPGRADEABILITY | Contract is upgradeable. Deployer can update with new functions | ⚠️ | Important to allow for future improvements and bug fixes as Russian Roulette is going to be continued for long term. |
OWNERSHIP | The ownership is not renounced. | ⚠️ | Important to allow for future improvements and bug fixes as Russian Roulette is going to be continued for long term. |
OWNERSHIP PRIVILEGES | Contract owner cannot mint new tokens. | ✅ | |
BURNING TOKENS | Contract owner cannot burn tokens. | ✅ | |
BLACKLIST ADDRESS | Contract owner cannot blacklist addresses. | ✅ | |
FEES AND TAX | The owner cannot set fees more than 25%. | ✅ | |
LOCK USER FUNDS | Contract owner cannot lock the contract | ✅ | |
CENTRALIZATION PRIVILEGES (1) | Upgrading contract | - |
The audit identified two key areas for transparency and ongoing development:
Upgradeability: The contract can be upgraded by the deployer, and this also introduces the potential for introducing changes. However, we are committed to responsible use if this feature and have prioritized user safety.
Ownership: Currently, ownership of the contract has not been renounced. This means we retain control over certain aspects of the game contract's operation. This is however important to allow for future improvements and bug fixes as Russian Roulette is going to be continued for long term.
Addressing User Concerns
The audit identified an issue related to the admin account that stores user funds during a game. This account is currently controlled not by a user but automatedly controlled by the bot managing the game flow. This setup is necessary for the game to facilitate bets, manage game logic, and remit funds to winners.
Last updated
