GGOODSMASH

Security

Three layers: the edge shield stops spam countries and bots at the door, the human gate stops scripted mints, and the contracts make it impossible to rug, sweep, or mint free supply. Plus the full walkthrough of what happens to your money after you buy.

1 · Edge geo-block shield

The current edge policy defines six blocked country codes: 6. This page reports the policy in source, not an inferred global list. Bot, scanner, bare-IP, and user-agent protections are separate edge checks and should be verified against the deployed response headers.

IR · IranKP · North KoreaSY · SyriaCU · CubaMM · MyanmarKH · Cambodia

2 · Human gate before mint

The current site does not mount a global human gate. The contract-level protections that exist are the controls to verify on the deployed contract: per-wallet limits, cooldown or block caps, and the exact mint path used by that collection. This page does not claim a disabled UI gate is active.

3 · What happens after you buy

Follow one purchase from your wallet to the real-asset basket. Every step is on-chain and verifiable.

1 · You mint

Your wallet signs the mint: X ETH, EOA-only, cooldown + per-block caps enforced by the contract. No bots can front-run you.

2 · Protocol fee splits

The mint fee is forwarded to TokenLaunchFeeLoop. Reentrancy-guarded. 0 amounts rejected. Fee routing enforced at deploy, visible onchain.

3 · 10% → treasury war chest

Banked for future mineral digs, voting windows, and the recap backstop. Owners can only withdraw it to a destination, never to themselves.

4 · 40% → holder rewards

Sits in the rewards leg of the fee router, which funds staking yield, machines, and the mineral lottery prizes.

5 · 50% → mineral missions

Half of every fee cycle funds real mineral specimen digs: smoky quartz, amethyst, beryl, tourmaline, apatite, UV-fluorescent specimens. Verifiable in the treasury store.

6 · The loop compounds

Fees keep flowing as machines run and trades settle. Every buy is oracle-floored: a stale or zero feed reverts, never a blind price.

7 · You can always verify

Every treasury position, fee split, and purchase is readable on Blockscout. Nothing is opaque. Check any number on this page against the chain yourself.

4 · Money that can NEVER move

No free mint path

Owner cannot mint NFTs into his own wallet for zero cost.

No treasury sweep

Fee-loop treasury is only withdrawable by owner to a destination address, audited on-chain and not a single-wallet drain.

No silent re-allocation

Any fee-allocation change emits AllocationChanged publicly; the constructor requires bps to sum to exactly 10,000.

No blind pricing

Any stale or zero oracle feed reverts the whole composite mark. Nothing trades on garbage.

No reentrancy

Every money-moving function is ReentrancyGuard-protected.

No spam ticks

Zero-amount fee submissions revert (require amount > 0).

5 · Headers & hardening

Strict Content-Security-Policy, X-Frame-Options DENY, nosniff, permission-less (no camera/mic/geo), powered-by header removed, single-edge region deployment.

Full contract audit log → /security/audit

Next actions

  • Review the staged changes in this working tree before committing.
  • Run the frontend build and browser checks before publishing.
  • Use the Claude handoff for repository, Vercel, API, and contract boundaries.

This page and the live checks are honest: the geo-block list and defenses are shipped in the deployed build. Nothing here is financial advice and nothing here is a securities offer.

GOODSMASH // HOUSE OF ALPHA

Goodsmash House of Alpha is independent and is not affiliated with, sponsored by, or endorsed by Robinhood.