LLM Game Core – Security Review Snapshot

Trimmed mirror of the LLM Game codebase for reviewers. Includes on-chain programs, IDLs, a minimal Node toolchain, and security-focused tests (local and devnet).

Contents

• programs/: Anchor programs under review.
• idl/: Program IDLs for inspection.
• tests/: Security tests (local: access control, input/bet guards, PDA determinism, event integrity, play status; devnet: PDA existence/ownership for live deployment).
• reports/ and metadata (Cargo.toml, Anchor.toml, package.json, lockfiles).
• test-devnet.json: sample devnet wallet (no funds), pubkey 3hXAUkggYBL7BPYRQDTge6ViqxbxVZCh745Xbtj39oDJ.

Requirements

• Node 20 recommended (macOS/Homebrew: export PATH="/opt/homebrew/opt/node@20/bin:$PATH").
• Yarn 1.x, Solana CLI 1.18.26, Anchor CLI 0.32.1.
• Devnet keypair with SOL for devnet tests (ANCHOR_WALLET).

Local security tests

export PATH="/opt/homebrew/opt/node@20/bin:$PATH"
npx ts-mocha -p ./tsconfig.json -t 200000 tests/security/*.test.ts

Devnet tests (live deployment)

export PATH="/opt/homebrew/opt/node@20/bin:$PATH"
export ANCHOR_PROVIDER_URL=https://api.devnet.solana.com
export ANCHOR_WALLET=~/.config/solana/id.json    # or another funded devnet key
export GAME_SEED=main2
export GAME_STATE_PDA=vH9vMyBanqBXbSXkgtxwthMLkjfxBGerGxE4Y7DYSpj
export TREASURY_PDA=5bAw6c71me1SjvBFEaoR4arktWirFHs59hyKuMR5MhUh
npx ts-mocha -p ./tsconfig.json -t 300000 tests/devnet/*.test.ts

Program ID (devnet)

• game_core: AoQqLbaDRBsV9ULq1xwScgadUmsNfncNtjLk3PvfGts7