Risks

Beta software with no audit

Fauria is in beta. Its contracts have had no external security audit. They are tested hard (unit, fuzz and invariant tests, two static analyzers), but tests cannot prove there is no bug.

A bug can lock or lose the ETH you staked and everything you made in the game. Deposit only what you can afford to lose.

Who controls the contracts

Every Fauria contract that has an owner is owned by a timelock. At launch only one account can schedule or cancel changes in it: a Safe multisig that needs 2 of its 3 signers. The Safe can change its own signers and the number of signatures it needs at once, with no delay. Giving the timelock another proposer is itself a change that waits the delay.

At launch the three Safe signers use software keys, which are easier to steal than hardware wallets. The move to hardware wallets comes after launch. Whoever controls two of the three keys controls what the timelock will do.

Changes wait at least 2 days

A change is scheduled first and can run only after a delay. The minimum delay is 2 days at launch and grows over time: 2 days until day 90 after launch, then 3, 5, 8, 13 and 21 days (30 days each), and 30 days from day 240 on. Nobody can shorten it.

A scheduled change that is not run within 14 days of its ready time expires. Once a change is ready, anyone can run it. The Status page lists every pending change, decoded, with the time it becomes ready.

Not everything waits. The Safe can, at once and with no delay, cancel a pending change, pause, unpause, remove a guardian, and change its own signers and threshold. Everything else an owner can do goes through the timelock.

The core and the Vault can be upgraded

The game core (Fauria) and the Vault, which holds the staked ETH, are upgradeable. An upgrade replaces their code, and new code can do anything, including moving the ETH in the Vault and changing any rule of the game: the emission, every cost and limit, and the royalty rates and their decay. Upgrades go through the timelock and wait its delay.

The land deed, IP and tool NFTs, FauriaClaim and the pause hub cannot be upgraded, but an upgraded core can switch to new versions of them.

Watch for changes you do not trust

Two compromised Safe signers can schedule a malicious upgrade. If you are offline for the whole timelock delay, you can lose your stake to it.

While a change you do not trust is pending, you can unstake: unstaking is never paused, and only a Vault upgrade, which waits the delay, could change it. The Exit page (/exit) unstakes a deed straight from the chain, even when the game's lists are down; without the site, the Vault's unstake works on the explorer.

Fauria never asks for an approval

No Fauria action ever needs a token or NFT approval. Any approve or setApprovalForAll request on a Fauria site means the site is compromised: reject it, and tell us.

Pause stops everything except unstake

Any guardian (an automated monitor and each of the three Safe signers) can pause the game at once, all of it or one contract. While it is paused, nobody can stake, claim, craft or create. Unstaking land and transferring tokens and NFTs are never paused.

Only the Safe can unpause, and it can also remove a guardian at once, without the timelock. The game starts paused and is unpaused at launch.

No yield on your ETH

The ETH you stake sits in the Vault and earns nothing: no interest, no staking reward, no share of any revenue. Fauria has no protocol revenue.

Land produces TIME and EFFORT, which are game tokens. Nobody promises that they, the resources or the NFTs will be worth anything, or that anyone will buy them.

Your land deed is your claim on the ETH

Staking mints a land deed NFT. Whoever holds the deed can unstake it and gets the ETH, not the original staker. If you sell or transfer the deed, or someone takes it from your wallet, the ETH goes with it.

Names are permanent

The names and symbols players choose for resources, processes and tool types are stored on-chain for good. Nobody can edit or delete them, us included; only a timelocked upgrade of the core could change the ones the core itself stores, as it could any rule of the core.

This site can hide items from its own pages (see the Terms, Moderation), but they stay on the blockchain and other sites can still show them.

IP and royalties

Every recipe, process and tool type mints an IP NFT to its creator. Whoever holds that NFT owns the IP, including its generated on-chain art, and receives its royalties. This holds even when the royalty is zero.

The royalty rate is fixed at creation: no function changes it, so neither the holder nor we can; only a timelocked upgrade of the core could change it, as it could any rule of the core. It decays only with age: the share still paid halves every 125 days and reaches zero after 14 halvings (about 4.8 years).

The art can still change

The NFT images are drawn on-chain by placeholder renderers. Until the final art is installed and frozen (one timelocked change), the renderers can be replaced, so the image and metadata of every land deed, IP and tool can change. A frozen renderer can never change again. The Status page shows whether each one is frozen.

The 1 ETH recommendation

The site recommends that one wallet stakes at most 1 ETH in total (what it already has staked plus the new deposit). The contracts do not enforce any limit: above it, the site asks you to confirm that you accept the risk before it sends the deposit.

Other risks

Base itself (its sequencer, bridge or software) can fail or stop. Your wallet, your browser or this website can be attacked. Numbers on this site come from an indexer and can lag or be wrong; the contracts are the source of truth. Transactions cannot be reversed, and gas is not refunded when one fails.

No legal opinion

Nobody has reviewed Fauria's legal or regulatory status in any country. We do not know whether TIME, EFFORT, the resources or the NFTs count as financial instruments, crypto-assets or anything else where you live. You are responsible for following your own laws and paying your own taxes.