mimi | swoobz

Fail fast, learn quickly, adopt with precision. In July, we brought @Hashlock_ in to audit @Swoobz_official on-chain infrastructure while we were still actively building it. We expected findings. That was part of the reason for doing it then. The audit ended up spanning roughly 150 pages and included 42 findings across areas including the game router and house pool. That sounds like a lot. In context, it was exactly the kind of scrutiny we wanted. We were still developing the system, and instead of waiting until everything looked finished, we chose to use Hashlock's security and quality expertise as part of the development process itself. Their team went deep into the architecture, challenged assumptions, found weaknesses and gave us concrete recommendations while those decisions were still cheap to change. That helped us move faster, but more importantly, with more precision. A major focus was the game router and how randomness is handled. An operator should not be able to steer seeds or influence outcomes in its favour. Our final design uses ORAO VRF for randomness, combines it with the client seed through the settlement flow, and gives the player the ability to replay and verify the outcome themselves. Provably fair should be something a player can actually prove. The house pool went through the same level of scrutiny. The findings there, alongside the game-router review, helped us harden the broader on-chain infrastructure rather than treating security as a final checkbox before launch. That is what we wanted from the partnership. Not validation of a finished product, but experienced auditors working alongside an active development process and helping us get to a better result faster. A huge thank you to the @Hashlock_ team for the depth of the work and the speed at which they delivered it, especially given the scope of the system we handed over. 42 findings. Roughly 150 pages of review. A lot of work on both sides. And a much stronger product because of it.