← Back to home

Risks

Last updated: 2026-08-04

Read this in full before considering any future interaction with the Onepot smart contract. Any interaction may result in the total loss of your funds. The contract is experimental software. There is no entity, fund, or insurance that will compensate you for losses.

1. Smart contract risk

The Onepot smart contract is experimental code that has not been audited by a professional security audit firm. Two informal reviews have been performed (automated security tooling and an AI-assisted scenario-focused review). These are not a substitute for a professional audit. The contract may contain undiscovered bugs, vulnerabilities, or design flaws that result in partial or total loss of deposited funds.

2. Dependency risk

The contract relies on two external protocols. A failure, exploit, governance attack, or unilateral change in either protocol may cause partial or total loss of funds in the Onepot contract.

3. Asset risk

USDC is a centrally-issued stablecoin. Its issuer (Circle) may freeze, blacklist, or seize addresses, including the contract's address or your address. USDC may also depeg from the US dollar. These events are outside the contributors' control.

4. Admin risk during the operational phase

Before the contract's admin keys are renounced, an admin (initially a multisig) holds a narrow set of powers: pause new deposits and entry purchases, change the Megapot referrer address, update the terms document, and clear a stuck Megapot ticket order. These powers cannot move user funds or block withdrawals, but a compromise, mistake, or bad-faith action could pause the daily cycle or misdirect Megapot's referral commission. After admin renouncement, no party can intervene in the contract's operation, including in cases where intervention might benefit users.

5. Liquidity and exit risk

Withdrawals depend on Aave honoring the withdrawal call. If Aave is paused, undergoing depeg, or otherwise unable to return the full amount, the withdrawal reverts - the contract deliberately refuses partial withdrawals rather than settling you short. In that case funds remain supplied to Aave and are not retrievable on-chain until Aave recovers. Withdrawal may be delayed, partial in value terms (if aUSDC impairs), or impossible.

6. Prize draw outcome risk

Prize draw outcomes depend on the Megapot drawing mechanism, which is outside the contributors' control. Past outcomes do not predict future outcomes. Jackpot distribution also depends on the winning entry being claimed from Megapot within the contract's claim window by a permissionless call; if nobody claims in time, the proceeds are recycled into further entries rather than distributed. No one is obliged to run a keeper or claim on your behalf.

7. Tax and regulatory risk

The legal and tax treatment of any future interaction with the contract is your sole responsibility. Interaction may be illegal in your jurisdiction. Regulatory authorities in your jurisdiction may classify the activity as gambling, securities, payment services, or other regulated activity, exposing you to penalties, taxes, or criminal liability. The contributors do not provide tax or legal advice.

8. Frontend risk

The reference frontend at this domain is provided as informational software. It is not the contract; it is one possible interface to the contract. Frontends may be unavailable, compromised, or display inaccurate information. Anyone may fork the source and host their own frontend. The contributors are not responsible for any third-party frontend, fork, or modification.

9. Phishing and impersonation risk

Be cautious of any party impersonating Onepot or its contributors. The one canonical reference is the contract itself on Base: 0xd0c398e2e4049a3c155aca980335b3adb3aeca97. Always check that the address you are interacting with is exactly this one. The contributors will never ask for your seed phrase, private key, or to send funds to a personal address.

10. No insurance, no recourse

There is no fund, insurance, treasury, or contributor obligation to compensate any user for any loss. The contract is provided as-is. By interacting with the contract, you accept that you have no recourse against the contributors for any loss.

11. The acknowledgment you sign before depositing

Depositing requires a one-time off-chain wallet signature (free, no gas) over the canonical risk-acknowledgment document. Your wallet signs a typed message containing the document's hash - the wallet prompt shows that hash, not the full text; it is this interface that displays the document and verifies it hashes to the value stored on-chain before letting you sign. The signature is then attached to the same on-chain transaction as your deposit, as a permanent verifiable proof that you read and accepted the terms. There is no path through the contract to deposit without signing this acknowledgment.

How the signature works:

You sign a short acknowledgment once, before your first deposit. It is free - no gas,
no transaction of its own.

The exact wording is served at /terms.txt. Its hash is stored inside the contract, and
this interface refuses to let you sign unless the document you are reading hashes to
that exact value - so you can never be asked to agree to something other than what is
on your screen. Your wallet's signing prompt shows the hash, not the text.

Your signature travels inside the deposit transaction itself, which makes it a permanent,
publicly verifiable record on Base of what you agreed to and when.

The exact wording you sign is served at /terms.txt, and its hash is stored inside the contract. The interface checks that the two match before it will let you sign, so you can never be asked to agree to something other than what you are reading.

If after reading this page you believe you do not understand or cannot accept these risks, do not interact with the Onepot smart contract. See also the Terms, About, and Privacy pages.