Players use custodial accounts: no seed phrase, no gas. Every on-chain action still comes from the player's own address, so anyone can check it in the explorer.
Strict limits on signing
The platform signs only what each app has registered: registered contract methods only, token approvals only to that app's own contracts, with per-transaction and daily caps, and every signature goes into an append-only audit log. If one app goes wrong, losses are capped at what players approved for it.
Passkey login
Sign in with Face ID, a fingerprint or your device passcode, with no wallet app to install; MetaMask and other browser wallets work too. Both can be linked to one account so losing one doesn't lock you out.
An emergency stop for any app
Any game or dapp can be paused at once, or all of them together, within a second. While paused, nothing can be bet or traded, but players can still see their history and withdraw their balance.
Audit and two people to go live
New app code is security-reviewed; then one person marks the review approved and a second person switches it live before the platform signs for it. The four live games went through 4 rounds of internal audit.