scamm !!! scamm !!! scamm !!!
I audited every file in this repository and the backend. Here are the hard facts:
1. There is no blockchain. It's two JSON files on a $5 VPS.
The entire "ledger" is `dag_ledger_state.json` and `dag_tx_history.json` sitting on a cheap server at IP 103.194.228.76 (India). Any balance in this "network" can be edited in Notepad by whoever controls that machine — which is one person, the project owner.
2. The `/transfer` endpoint has NO signature verification.
In `dag_api.py`, the transfer function skips cryptographic validation entirely. Anyone who knows your SOV wallet address can drain it to zero with a single curl command. This is not a bug — it's negligence that exposes every user.
3. The bridge accepts fake BSC transaction hashes.
The `/bridge_deposit` endpoint takes whatever `bsc_tx_hash` you give it without ever checking the BSC blockchain. This means the "bridge" is designed to take your real USDT and give you made-up numbers in return. There is zero on-chain verification.
4. One address controls 100,000,000 SOV and can crash the price at will.
The genesis address `SOVb1dab6f1a43527d5cc9296f4391e33a009` holds the entire supply and has a backdoor `/admin_inject` endpoint to dump tokens into the DEX pool whenever the owner chooses.
5. The "Virtual Machine" doesn't exist.
The code imports `from sovereign_vm import execute_smart_contract` — but the file `sovereign_vm.py` does not exist in the repository. It's pure decoration to make the project sound technical.
6. "Mining" is literally just sleeping and hashing timestamps.
`main.py` does `time.sleep()` and runs SHA-256 on your wallet address + the current time. That's it. No proof-of-work. No consensus. No network contribution whatsoever. Your CPU is doing nothing useful.
The playbook here is textbook:
Get users to "mine" worthless SOV tokens → build a fake sense of accumulated value → introduce the bridge → users send real USDT to "convert" their SOV → money disappears → server goes offline.
The "V8.3 engine" and "Layer-0 architecture" are marketing fiction. The backend is a Flask app on a Indian VPS with no security, no decentralization, and no actual blockchain technology.