9. Security & Risks

  • AccessControl: Admin-only setters; pausable.

  • ReentrancyGuard: Protects stateful external-entry functions like buyTickets and claim.

  • External dependencies: VRF, Automation, Uniswap v3, referral/user tree, distributor, all well guarded.

  • Token approvals: User must approve USDT/$PLAY to PowerPick.

  • Soulbound tickets: Transfers/approvals revert by design.

Last updated