GeoSnag

Escrow & payments.

How SOL moves between creator, hunters and winners — and why no one (including us) can rug a bounty.

Every bounty has a deterministic escrow public key. The listing transfer and every entry transfer are signed by the participant's Phantom wallet on Solana mainnet, so the on-chain history of any bounty is fully auditable. No custodial step, no off-chain ledger.

What's signed
Listingcreator → escrow · 0.1 SOL · memo geosnag:list
Entryhunter → escrow · 0.015 SOL · memo geosnag:guess:{id}
Win payoutescrow → winner · full pool
Refundescrow → creator (expired & unsolved)
Failure modes that are not exploits
  • Tx rejected in Phantom — nothing happens; no entry is recorded.
  • Insufficient SOL — submission is blocked before any state change.
  • Network reorg — pending entries replay on next confirmation; the board reconciles.
Phantom only · Solana mainnet · no service ever touches user keys.