The Two Vaults & Custody
Dark Matter has exactly two places where player money rests. They are deliberately
built differently, because their jobs are different.
1. Reactor custody — UltimateSingularityProtocol
Reactor deposits (ETH sent to injectMass) become part of the shared protocol
balance. Yield works like a bonding curve: deposits raise the pool, withdrawals sell
radiation back into it. There is no per-user escrow — a depositor’s security is the
2× withdrawal cap:
Nobody — including the owner — can withdraw more than 2× their own lifetime deposit.
The owner’s only fee income is the fixed 10% deposit fee stream (see
Reactor Waterfall).
2. Casino custody — CrashVault
Casino chips (ETH + USDG balances used by Crash and the Entropy dice games) are held by
CrashVault. The design goal: the server can run the game but can never touch funds
it didn’t earn.
Deposits — always player-initiated
Both record the balance against msg.sender and update the aggregate liabilities
(ethLiabilities / tokenLiabilities). The server mirrors custody in the off-chain
ledger (darkmatter.crash_chips) by sweeping Deposited events — bets are then pure
ledger operations: instant, gas-free, mobile-friendly.
Withdrawals — gasless but signature-gated
The player signs an EIP-191 message over (player, token, amount, nonce). The
relayer submits and pays gas, but the chain enforces the signature:
Three on-chain guards:
ecrecover must equal player — the server has no way to produce a valid
signature for a user’s funds.- Strict nonce increment (
nonce == nonceOf[player] + 1) — no replay, no gaps,
deterministic sequencing even across relayer instances.
- Balance check — the payout reverts if the ledger and the vault disagree.
Admin powers — deliberately weak
The timelock means players always have a 48-hour window to withdraw before any relayer
change lands — even a malicious owner cannot strand funds without giving everyone an
exit.
Edge routing — the vault’s only “operator” flow
Realized house edge (round stakes minus payouts, see Crash Money Model)
is forwarded on-chain by the relayer:
- The 50/50 split is fixed in code, not admin-tunable.
- A zero address sink keeps its share in the vault as protocol revenue.
- If the rewards pool sink is unwired, the entire value routes to the LP treasury
(the half-share is only computed once —
rewards = share when wired).
USDG
USDG (Paxos) is the second casino currency — 6 decimals, used via
depositToken(usdg, amount). Bet bounds, chip math and the fee split all apply
identically to both currencies; see Crash Money Model.
Deposit fee note (casino side)
At ledger-credit time, the server charges a 1% deposit fee on casino deposits —
the player’s chip credit is deposited − 1%, split half to the dev address and half
to the VIP pool. Importantly the vault itself still custodies 100% of the assets —
the fee rows are claims against the same custody, settled through the same ledger:
Full mechanics: Reactor Waterfall §The casino’s own 1%.Last modified on October 6, 2026
