Security

Last updated 30 October 2026

If you find a weakness in BuzzPot's smart contract, website or keeper, please tell us first, in private, and give us the chance to fix it before you share it.

How to report

• Email us: [email protected]. Or message us on Telegram: @buzzpot, and ask for a private chat before you send any details. Do not post details in a public group.
• Tell us what you found, which transaction, account or page it affects, and how to reproduce it. A short proof on a local copy of the program is the best report.

What we do

• We read every report and answer as soon as we can.
• If the problem is real, we fix it. Where it affects players, we say so in public once they are safe. We are glad to name you if you want to be named.
• There is no bug bounty programme at the moment, and we cannot promise a reward.

Please

• Test with your own accounts and your own funds, on a local copy of the program or a test network where you can. Do not touch other people's balances or rooms.
• Do not disrupt the game for other players (no flooding, no denial of service) and do not try social engineering against us or our providers.
• Keep the details private until we have fixed the problem or agreed a date with you.

We treat research done in good faith and within these points as help, not as an attack.

What is covered

• The program E3uX7kUxFnENTKFC58HF2DsbYDekcgDzpjFNwaRVvVDi.
• The website at buzzpot.win, the chat server, the proxy the site reads the blockchain through, and the keeper bot.
• Not covered: Solana itself, USDC, wallets, Cloudflare, Reown and RPC providers (tell them), problems that need a stolen device or a compromised wallet, spam, and reports of missing best practices with no real effect.

Where this page is linked from

The program carries a small record inside itself (a security.txt) that points here, and blockchain explorers can show it next to the program. How the program is governed, and who can change it, is described in the Whitepaper.