Trust & safety
Security & community rules
How we keep voting honest, your wallet safe, and the contest fair. Read this before you connect, submit, or vote.
Your wallet, your keys
- We will never ask for your seed phrase or private key. No legitimate part of this site or team ever will.
- Every action that moves funds is an explicit transaction you approve in your own wallet. Read what you sign — current community votes do not move funds while token voting is being configured.
- Verify the treasury address on the Treasury page against the contract before sending anything.
- Beware impersonators. We never DM first, never run “support” inboxes, and never do surprise airdrops that need a “connect to claim”.
How votes stay honest
- Current pre-launch votes are off-chain community votes: one per visitor identity per contest, rate-limited and marked unverified in the database.
- Each community vote id is counted once — a database uniqueness constraint prevents repeat votes from the same visitor identity in the same contest.
- When token voting is configured, verified on-chain transfer voting takes over.
Anti-abuse
- Submissions are protected by Google reCAPTCHA and a bot honeypot.
- Submissions, uploads, and votes are rate-limited per IP.
- Each entry must include a fresh signature from the listed payout wallet, proving the artist controls the address before it can receive a grant.
- Inputs are validated and length-capped; wallet addresses are checked; media links are restricted to known hosts or files you upload.
How your data is stored
- Data lives in Supabase (Postgres) with row-level security enabled and no public policies — only our server, holding a secret key, can read or write. The browser never holds a privileged key.
- The app sets strict HTTP security headers (Content-Security-Policy, HSTS, nosniff, frame protections) on every response.
Contest rules
- One entry = one track (audio or video) per contest week.
- Submit only work you created or have the rights to. No copyrighted material you don't own, no hate, harassment, or illegal content.
- No vote manipulation via stolen funds or fraudulent transactions. Entries that break the rules can be removed.
- The winning entry's payout wallet receives the grant when voting closes (Sunday → Monday 00:00 UTC).
Report a vulnerability
- Found a security issue? Please disclose it responsibly and privately before making it public, and give us a reasonable window to fix it. Don't exploit it, exfiltrate data, or disrupt other users.
Disclaimer. This is an unofficial, community meme and tribute. It is not affiliated with, endorsed by, or representing Oliver Tree, his estate, or his foundation. Nothing here is financial advice. Grants are community-funded from creator fees and distributed by community vote.