Security
How K100bet keeps your funds and data safe
Security is built into the protocol — not bolted on. From wallet connection to market resolution, every layer is designed to protect users without requiring you to trust us.
Your Keys, Your Crypto
K100bet never holds your private keys. You sign every bet and withdrawal in your own wallet (Kastle or Kasware). We only store your linked Kaspa address and session — never seed phrases or signing keys. Always connect through the official wallet extensions.
On-Chain Verification
Every bet and payout has a public transaction ID on the Kaspa blockchain. You can verify any transaction on the Kaspa block explorer. Market outcomes are settled through on-chain smart contracts, not by a central server deciding who wins.
Smart Contract Settlement
Bets are enforced by SilverScript smart contracts on Kaspa. These contracts hold funds in escrow and only release payouts when an outcome is verified by an independent oracle committee. No single party — including K100bet — can unilaterally move funds or alter outcomes.
Independent Oracle Committee
Market outcomes are determined by a committee of 12 independent, publicly identified operators — not by K100bet staff. At least 7 of the 12 must agree on every resolution. Committee members are vetted, publicly named, and operate independently from the platform.
Multi-Source Price Feeds
Crypto market prices come from multiple independent sources (Binance, CoinGecko, CoinMarketCap) with automatic fallback. No single price feed controls outcomes. If all sources fail, stale cached data is used rather than guessing.
Transparent Dispute Process
If you believe a market was resolved incorrectly, you can challenge the outcome during a 24-hour window after resolution. The challenge process is open to all users — you don't need to be a committee member or hold any special tokens. This creates a strong economic incentive against incorrect resolutions.
K-Index Oracle
K-Index is K100bet's decentralised oracle system for market resolution. The current implementation uses a 2-of-2 multi-signature scheme between the platform operator and an independent oracle co-signer, enforced on-chain via SilverScript covenant contracts. Every resolution requires both parties to attest to the outcome — neither can unilaterally move funds. A planned upgrade to FROST (Flexible Round-Optimized Schnorr Threshold signatures) will expand this to a full 7-of-12 committee threshold, enabling truly trustless multi-party resolution without increasing transaction size. The FROST upgrade is scheduled for Q1 2027, after the Kaspa Toccata hardfork enables the required on-chain opcodes.
Platform Security
All traffic is encrypted with TLS. Sign-in uses Google OAuth — we never see or store passwords. API routes are rate-limited. Financial operations use idempotency checks to prevent double-processing. Inter-service communication uses scoped API keys.
Responsible Trading Tools
Set daily and weekly deposit limits in Settings to manage your spending. A session time limit helps you take regular breaks. Self-exclusion is available for 24 hours, 7 days, 30 days, or indefinitely — deposits and bets are blocked while active, but withdrawals remain available. Your wellbeing matters more than any trade.
Report a Vulnerability
Found a security issue? We appreciate responsible disclosure.
[email protected]