Trust & Policy — 15
Security & Anti-Cheat
What protects the economy, and what the backend owns.
The frontend only displays state — it never decides a balance. Every mining, claim, referral, and withdrawal calculation happens server-side.
Server-authoritative state
- Mining balance
- Mining Storage
- Available Balance
- Pickaxe Level
- Referral status
- Referral Booster
- Global emission accounting
- Halving progression
- Claim
- Withdrawal
Withdrawal security
- Minimum withdrawal threshold
- Withdrawal cooldown per account
- Per-user rate limiting
- Idempotency keys on every withdrawal request
- Atomic balance locking (no double-spend)
- Hot wallet balance monitoring
- BNB gas monitoring for the sponsoring wallet
- Failed-transaction reconciliation
- Daily treasury safety limit
- Emergency pause capability
- Full withdrawal audit log
Anti-cheat
- Multiple-account detection
- Self-referral detection
- Bot / automation detection
- Referral farm detection
- Duplicate claim prevention
- Duplicate withdrawal prevention
- Fake activity detection
- API replay protection
- Client-side balance manipulation rejection
- Direct endpoint abuse protection
- Race-condition–safe accounting
Wallet address (paste, not connect)
Dungeon of Miners does not connect wallets or use wallet signing. To withdraw, you paste a BEP-20 address — double-check it, because on-chain transfers can't be reversed.
No seed phrases, ever
Dungeon of Miners never asks for a seed phrase, private key, or recovery phrase.
Ledger & accounting
Every balance-affecting event is recorded as an immutable transaction, never a silent balance edit: MINING_ACCRUAL, CLAIM, WITHDRAWAL_PENDING, WITHDRAWAL_CONFIRMED, WITHDRAWAL_FAILED, REFERRAL_REWARD, EVENT_REWARD, ADMIN_ADJUSTMENT.