No minimum session balance enforced (business logic flaw)
The application did not enforce a minimum session balance, allowing sessions with effectively zero balance to be started and surfacing UI and accounting edge cases that the game flow does not handle cleanly.
Description
The game session did not enforce a minimum balance. Users could start sessions with effectively zero balance (or drift to near-zero through the decimal-rounding finding), surfacing UI states the game was not designed to handle and creating opportunities for edge-case failures in win/loss accounting.
Impact
Low. Primarily a robustness/UX gap rather than a direct fund-loss vector. Compounds with the decimal-rounding High finding.
Recommendation
Enforce a minimum session balance equal to the smallest legal bet at session start, and re-check before each game round. Reject sessions or transitions that would leave the player unable to settle a minimum bet.
Dedprz: Acknowledged. Zealynx: Acknowledged.