Dedprz

Dedprz Web Game Pentest

Zealynx ran a one-week blackbox penetration test of Dedprz, a Next.js Web2 coin-flip game that accepts $SUSA token bets against an on-chain backend. Seven issues were identified: one High (decimals not handled by the application frontend, producing $0 win/loss display while the session balance still updated by the decimal amount), three Medium (content spoofing through `url`/`w`/`q` parameters; denial of service via business logic flaw in authenticated state; improper error handling in the same parameters), two Low (no minimum session balance enforced; 'Recent flips' table can be used to deface the application), and one Informational (Strict-Transport-Security not enforced). All seven findings were acknowledged at the time of report publication.