BUY PIXELS. VRF PICKS SOLD PIXELS. WINNERS CLAIM.
BigPot is intentionally simple at the product layer and strict at the trust boundary. Users buy pixels; the program only reveals when the sold-pixel threshold is met; randomness can only come from the validated VRF account.
01
A daily heist is initialized
The oracle opens a canonical on-chain Heist account for a UTC day. The buy window, pump hour, lock time, price rules, payout budgets, and token mapping commitment are fixed before players buy.
02
Players buy sold pixels
Quick Buy assigns available pixels. Manual Pick lets a player choose exact placements at the premium price. The frontend never decides ownership; settlement writes are verified by signatures, server records, and on-chain accounts.
03
The 5,001 threshold decides reveal vs refund
If fewer than 5,001 pixels sell, the heist cancels and buyers use the refund path. If 5,001 or more pixels sell, the reveal path opens. Empty pixels are never eligible to win.
04
VRF picks from sold pixels only
Switchboard On-Demand randomness is read from the on-chain randomness account. The program validates owner, account identity, reveal slot, freshness, and non-zero randomness before accepting it.
05
Winners claim through a Merkle root
The claim root binds winners to the heist, day id, wallet, amount, and rank. The Merkle tree uses domain-separated leaf and node hashes, so old or malformed proofs are rejected.
06
The canvas becomes permanent art
The Grand winner is eligible for the canvas NFT. Crew winners share the pot but cannot mint the Grand-only canvas NFT.