Security

What the escrow can and cannot do with your USDC

Stakes never sit with us. They sit in one contract on Base, and the rules below are written into that contract, not just promised here.

The escrow contract

This is the only address Gammon Gods ever asks you to approve. If a prompt names a different spender, reject it.

0x82a509297e04A894413c5519b311876fad9e2e11

Network: Base · View verified source ↗

The approval your wallet asks for

Before a staked match, your wallet may ask you to let the escrow use some of your USDC, then to confirm the lock itself. The approval moves nothing by itself and covers a few small matches; the lock is what moves your USDC into the escrow, and never more than the match's lock.

Some wallets show a warning such as "couldn't verify this request" or a drain warning on approvals to newer contracts. Check the spender is 0x82a5…9e2e11 and the site is gammongods.com. If either differs, stop.

The escrow cannot

  • Take USDC from your wallet unless you send a create-match or join-match transaction yourself.
  • Take more than that one match's lock, whatever the approval amount.
  • Let anyone else, including us, spend your approval. Only the contract itself can pull, and only from the wallet sending the transaction.
  • Pay out more than was locked. Both players' locks are the whole pot.
  • Stop you from cancelling a match nobody has joined, or from reclaiming a stuck match after 7 days. Those work even while the contract is paused.

Removing the approval

You can remove it whenever you like. Open revoke.cash ↗, connect the same wallet, choose Base, and revoke USDC for the escrow address above. It costs a small network fee. Your next staked match will simply ask again.

What you are trusting us with

Who decides the winner
The game server decides the result, and our settlement key submits it to the contract, which pays the winner. Moves are checked by the server, not by the chain. That key can only settle funded matches, only between the two players in them, and never for more than the pot.
The fee
The platform fee is 2.25% of what the loser owes, taken out of the lock, never added on top. The rate is stored in the contract; any change is a public on-chain event.
Pausing
In an incident we can pause new matches and settlements. A pause never blocks cancelling an unjoined match, reclaiming after 7 days, or withdrawing a credited payout.

Staying safe

  • We will never ask for your recovery phrase or private key, in the app, by email, or in a DM.
  • The only site is gammongods.com. Bookmark it rather than following links.
  • Payouts arrive automatically. Nobody needs you to sign anything to "release" winnings.

Found a problem?

Report security issues through the Feedback button on any page, starting your message with SECURITY. Please do not post them publicly until we have fixed them. Researchers can also find our contact details at /.well-known/security.txt.