Security
How K100bet keeps your funds and data safe
K100bet is decentralized P2P trading — you bet against other users with on-chain covenant settlement. Security is built into the protocol, not bolted on. From wallet connection to market resolution, every layer is designed to protect users and to minimise, rather than assume, the trust you place in us.
Your Keys, Your Crypto
K100bet never holds your private keys. You sign every bet and withdrawal in your own wallet (Kastle or Kasware), or with the browser vault signer for K100bet Wallet withdrawals. We only store your linked Kaspa address and session — never seed phrases or signing keys. Always connect through the official wallet extensions.
On-Chain Verification
Every bet and payout has a public transaction ID on the Kaspa blockchain. You can verify any transaction on the Kaspa block explorer. Market outcomes are settled through on-chain smart contracts, not by a central server deciding who wins.
Smart Contract Settlement
Bets are enforced by SilverScript smart contracts on Kaspa. These contracts hold funds in escrow and release payouts only when a resolution is co-signed by two keys — the platform operator key and an independent oracle key — both verified on-chain. A planned upgrade to FROST threshold signatures (a 7-of-12 committee) will further reduce the need to trust any single party. See the K-Index Oracle section for the current and roadmap trust model.
Roadmap: Decentralised Oracle Committee
Today, market resolutions are co-signed by the platform and an oracle key (see K-Index Oracle below). The roadmap is to replace this with a committee of 12 independent, publicly identified operators, where at least 7 of the 12 must agree on every resolution — enforced on-chain via FROST threshold signatures. Committee members will be vetted and publicly named, and will operate independently from the platform. This upgrade is scheduled for Q1 2027, after the Kaspa Toccata hardfork enables the required on-chain opcodes.
Multi-Source Price Feeds
Crypto market prices come from multiple independent sources (Binance, CoinGecko, CoinMarketCap) with automatic fallback. No single price feed controls outcomes. If all sources fail, stale cached data is used rather than guessing.
Transparent Resolution & Disputes
Every bet and payout is a public Kaspa transaction you can verify on a block explorer, and the covenant code that enforces payouts is public and auditable. Resolution today is a 2-of-2 co-signature (platform operator + independent oracle), both verified on-chain. If you believe a market was resolved incorrectly, contact [email protected] — the platform can void a bet and refund stakes via the covenant's refund path. A roadmap on-chain dispute/challenge window is planned alongside the 7-of-12 FROST committee upgrade.
K-Index Oracle
K-Index is K100bet's decentralised oracle system for market resolution. The current implementation uses a 2-of-2 multi-signature scheme between the platform operator and an independent oracle co-signer, enforced on-chain via SilverScript covenant contracts. Every resolution requires both parties to attest to the outcome — neither can unilaterally move funds. A planned upgrade to FROST (Flexible Round-Optimized Schnorr Threshold signatures) will expand this to a full 7-of-12 committee threshold, enabling truly trustless multi-party resolution without increasing transaction size. The FROST upgrade is scheduled for Q1 2027, after the Kaspa Toccata hardfork enables the required on-chain opcodes.
Platform Security
All traffic is encrypted with TLS. Sign-in uses Google OAuth — we never see or store passwords. API routes are rate-limited. Financial operations use idempotency checks to prevent double-processing. Inter-service communication uses scoped API keys.
Responsible Trading Tools
Set daily and weekly deposit limits in Settings to manage your spending. A session time limit helps you take regular breaks. Self-exclusion is available for 24 hours, 7 days, 30 days, or indefinitely — deposits and bets are blocked while active, but withdrawals remain available. Your wellbeing matters more than any trade.
Open-Source Smart Contracts
Every bet, payout, vault, and stake is enforced by an open-source SilverScript covenant on Kaspa. Read the full source, the on-chain signature requirements each entrypoint enforces, and learn how to independently compile and verify the deployed bytecode matches the source you read.
View the SilverScript covenantsReport a Vulnerability
Found a security issue? We appreciate responsible disclosure.
[email protected]