Crucial security exploits discovered during our latest smart contract audit for an onchain wagering engine

Just wrapped up an audit for an onchain betting engine, and it’s wild how easily a tiny logic flaw can drain an entire liquidity pool. Beyond basic reentrancy, the biggest red flags were predictable block based randomness and MEV bots frontrunning payout resolution in the mempool. In GameFi and wagering, mathematical fairness means nothing if your state transitions can be manipulated by builders. Never cut corners on verifiable randomness (VRF) and strict commit reveal patterns before deploying to mainnet. What’s the nastiest exploit you’ve seen slip through in gaming protocols?