Introduction
Why operators are trusted today, why on-chain action games haven't worked, and the separation we propose.
Whitepaper
A technical paper describing the network model, replay attestation protocol, settlement, token mechanics, and failure modes. Styled after Nakamoto (2008).
A purely server-authoritative game would still require players to trust a central operator with custody of their cosmetic identity, earned achievements, and tradable items. We propose a design in which the gameplay loop remains entirely off-chain — low-latency, free-to-play, and indistinguishable from a conventional Web2 action title — while a separate, optional settlement layer on Base records ownership of cosmetic assets, soldier identities, and verifiable competitive results.
Players need not interact with the chain to play, progress, or compete. Players who do interact with the chain receive custody of their items as ERC-721 and ERC-1155 tokens, and competitive rewards are distributed through Merkle-attested snapshots signed by the game server, verified on-chain at claim time.
The system separates gameplay state, which must be fast and authoritative, from ownership state, which must be permissionless and persistent.
Contents
Why operators are trusted today, why on-chain action games haven't worked, and the separation we propose.
Four components: client, simulation server, attestation service, settlement contracts on Base.
Soldiers as cosmetic identity. ERC-721 mint is opt-in and revocable; gameplay is unaffected.
Server-authoritative simulation, fixed tick, local prediction, and ephemeral state retention.
(seed, inputs, result) tuples signed by the operator and independently re-simulable by any auditor.
Per-season Merkle distribution: only the root goes on-chain, claims are constant-cost per player.
ERC-1155 cosmetic gear on a permissionless exchange. Strictly cosmetic, no gameplay tokenization.
$WARF: ERC-20 utility token, 10^9 fixed supply, allocation across rewards, ecosystem, team, treasury, liquidity, and public sale.
Four sinks (mint fees, callsigns, marketplace fees, cosmetic upgrades) calibrated to bound emissions.
Input validation, statistical detection, re-simulation of high-stakes matches, and bug bounties.
Minimum identifying data. Wallet linking opt-in. Replays not public by default.
Operator key compromise, operator shutdown, smart contract bugs — and what survives each.
Off-chain gameplay, on-chain ownership, signed attestations as the only bridge between them.