Key risks#

Afterlife combines wallet recovery, real-value slot mechanics, onchain conversion, and automatic capped payouts. The MVP Mainnet Beta is active inside a deliberately small financial envelope.

Risk	Current exposure	Active mitigation	Expansion priority
Player treats recovered value as “free”	An abandoned-position origin may increase willingness to take risk.	1× wagering target, hard payout caps, explicit real-value language, ledger/history.	Add configurable loss/time limits, cooling-off, self-exclusion, and tested choice architecture.
Server-authoritative outcomes	Server generates and settles random results.	Published math, cryptographic runtime randomness, stored outcomes, replay controls, RTP regression tests.	Commitment/reveal verifier, mathematical review, and deployment attestation.
Payout-liquidity shortfall	Regular wins can reach 2,000× bet.	Fresh reserve snapshot, 120% reserve ratio, serialized maximum-exposure reservation, liability and daily caps.	Secondary RPC, stronger reserve monitoring, and treasury role separation.
Wrong or unsafe conversion	Burn is irreversible and swaps can execute at unfavorable terms.	Fresh scan, strict exclusions, independent prices, price-disagreement ceiling, live Jupiter route, bounded slippage/impact, simulation, exact wallet signature.	Independent transaction/conversion review and broader canary evidence.
Price or provider failure	Stale/missing/conflicting data could misclassify an asset.	Unsafe evidence returns UNSUPPORTED/NONE; SELLABLE never falls through to burn.	Provider-quality monitoring and additional independent sources.
Ambiguous settlement or duplicate value	Network delays and retries can leave uncertain state.	Durable states, request IDs, unique constraints, conditional transitions, revisions, stored signature, finalized reconciliation.	Automated recovery/alerting and fault-injection drills.
Custodial signer compromise	Automatic USDC payout uses a server-side treasury signer.	Encrypted server-only key, bound transaction verification, $10 lifetime wallet and $50 platform-day caps, emergency pause.	HSM/MPC or multisig and separate roles before materially larger limits.
Wallet privacy and correlation	Public wallet inventory reaches infrastructure and market-data providers.	Minimal application identity schema, server-side credentials, metadata isolation.	Complete privacy notice, retention/deletion/export policy, and provider review.
Responsible-play gaps	The beta does not claim configurable self-exclusion or loss/time controls.	18+ notice, hard financial caps, wagering rules, activity history, bounded launch exposure.	Implement wallet-linked controls before expanding audience or limits.
Regulatory variation	Gaming, token conversion, payout, and future investment routing can be treated differently by location.	Narrow financial envelope and no claim of universal eligibility.	Define supported locations and obtain model-specific professional advice.

Non-negotiable claim boundaries#

• RTP is a long-run target, never an individual guarantee.
• The current game is server-authoritative, not player-verifiably provably fair or audited.
• Recycled liquidity is real value; marketing must not call it consequence-free money.
• Lose to Earn is a concept, not compensation or an investment promise.
• Unsupported assets and unsafe evidence must fail closed.
• Larger limits require stronger custody, independent verification, responsible-play, and operating controls.

See Platform thesis, Mainnet safety, and Roadmap.