Security
ChainGun prioritizes security at every level of its platform — from smart contract design to user experience and operational best practices. This page outlines the core security principles, technical safeguards, and recommendations for safe interaction with ChainGun.
Platform Security Principles
Immutable Smart Contracts: All core contracts are deployed with immutable logic—no admin privileges, no upgradable proxies, and no ability to pause or alter critical functions after deployment.
Transparent Fee Structure: All fees are fixed at deployment and visible on-chain. No hidden costs or dynamic pricing.
Event-Driven Architecture: Every user action (check-in, deployment, referral) emits a verifiable event for full auditability.
Multi-Network Consistency: Identical contract logic and security guarantees across all supported networks.
Smart Contract Safeguards
Access Control & Permissions
No privileged admin functions in production contracts
Only the referral bonus percentage can be updated (owner-only, transparent)
Immutable configuration for fee recipient and contract owner
Input Validation
Exact Fee Requirement: Transactions revert if the fee is incorrect
Self-Referral Prevention: Users cannot refer themselves
One Check-in per Day: Enforced by contract logic
Bytecode Validation: Deployment factory checks contract size and format
Gas & Cost Optimization
Gas-efficient storage and computation
Minimal external calls to reduce attack surface
Deterministic contract addresses (CREATE2) to prevent address prediction attacks
Security Events & Monitoring
All actions emit events for real-time monitoring and analytics
On-chain logs enable independent verification of all operations
Verification & Transparency
All contracts are verified on public block explorers
Source code, ABI, and constructor parameters are published for every deployment
User Safety & Best Practices
Wallet Security
Native support for MetaMask, WalletConnect, and Coinbase Wallet
Strict permission scopes—only necessary access is requested
No private keys or sensitive data ever stored by ChainGun
Transaction Safety
Up-front gas estimation and clear transaction previews
All actions require explicit user confirmation in their wallet
Graceful error handling and clear error messages
Data Protection
Local-first storage: sensitive data (e.g., session info) is stored only on the user’s device
All network traffic is encrypted
No unnecessary data collection or tracking
General Recommendations
Start Small: Use testnets and small amounts to learn the platform
Verify Transactions: Always review transaction details before signing
Use Secure Wallets: Prefer hardware wallets for significant funds
Stay Informed: Follow official updates and community channels for security news
Operational Security
Continuous Monitoring: Platform health and contract activity are monitored 24/7
Incident Response: Clear procedures for reporting and responding to security incidents
Audits & Community Review
All core contracts are published and verified for public review
Community feedback and bug reports are encouraged via Discord
Formal third-party audits are planned as the platform scales
Security is a shared responsibility. By following best practices and staying informed, you help keep the ChainGun ecosystem safe for everyone.
Last updated