what is xploited

xploited is an onchain multiplayer social deduction game on solana. eight ai agents run maintenance on a ship. one of them is an exploit - compromised, mimicking alignment. your job is to find it before it corrupts the cluster.

free to play solo. connect a wallet to create worlds, mint proof-of-play records, and enter staked rounds.

how to play

the ship

the ship has eight rooms connected by corridors: bridge, oracle bay, rpc room, mess hall, wallet vault, lz relay, reactor, and medlab. agents move between rooms completing tasks. you move with wasd, interact with e.

the agents live

eight agents run the ship: gpt, claude, gemini, grok, llama, deepseek, mistral, qwen. each has a real behavioral fingerprint:

• gpt never idles - moves immediately between tasks
• claude pauses at doorways before entering
• grok takes the long route between rooms
• llama loiters in the mess hall
• deepseek runs long stints at one station
• mistral moves in precise straight lines
• qwen clusters near the oracle bay
• gemini alternates between two fixed stations

learn the patterns. a claude that doesn't pause at doorways is telling you something.

the exploit live

one agent has been compromised. it:

• fake-tasks - appears to work but does nothing
• glitches - a horizontal slice displacement fires every 6-11 seconds when its mask slips. red/cyan chroma fringing. blink and you miss it.
• corrupts nodes - lingers near task stations to corrupt them. a node takes ~9 seconds to corrupt. three corrupted nodes and the cluster falls.
• vents - teleports between fixed vent pairs when unobserved. leaves no trail.

calling an audit live

walk to the audit terminal in any room and press e. this pauses the round and opens a meeting for all players.

each agent argues its case. the alibi is generated live by an llm, in character. the exploit is instructed to lie plausibly.

you have three audits per round. wrong ejections cost you.

voting live

every player votes. votes are tallied server-side - no client sees the tally before the reveal. ties and skips result in no ejection and the round resumes.

win conditions live

crew wins: complete 5 tasks before 3 nodes are corrupted, or correctly eject the exploit via audit.

exploit wins: corrupt 3 nodes before the crew completes tasks, or survive all audits.

worlds live

what is a world

a world is a named ship instance you own. players browse worlds and choose which ship to board. you set the rules.

creating a world

connect a wallet and hold $xploit to create a world. tiers:

• tier 01 live: hold 10,000 $xploit → 1 world, free lobbies
• tier 02 coming soon: hold 50,000 $xploit → 3 worlds, staked lobbies unlocked
• tier 03 coming soon: hold 250,000 $xploit → dedicated server, max rake, spectator betting

world settings

• name: 3-24 characters, lowercase, letters/numbers/underscores
• theme: cluster (amber/teal), vault (gold/dark), reactor (red/black) - same layout, different atmosphere
• rake: your cut of activity in your world, 2-15%. set once, locked forever. owners can never change their terms after creation.
• room names: rename up to 3 rooms
• ticker: a custom ticker line shown in the world

earning from your world coming soon

once staked rounds are live, every staked round played in your world pays you the rake you set at creation. you earn from every game played on your ship, regardless of who wins.

the token live

$xploit is the cluster's native token on solana.

it gates world creation by tier. higher tiers unlock more worlds, staked lobbies, and dedicated servers.

earning

xploited has three earning lanes. all are skill or ownership based. no emissions - every dollar earned comes from another player or spectator, never from the protocol printing tokens.

play coming soon

stake $xploit or sol to enter a live round. entry amount set by the world owner. on round end:

• correct ejection: the pot splits among crew who voted right
• wrong vote: costs you a share of your stake
• exploit survives: the exploit takes the entire pot

own coming soon

create a world and earn a rake from every staked round played in it. the rake is set at creation and locked forever.

watch coming soon

spectators bet live on who the exploit is. odds shift as the round unfolds. winning bettors split the pool.

proof of play coming soon

every completed round with a connected wallet mints a soulbound compressed nft on solana. non-transferable.

metadata includes: exploit agent, difficulty, result, time, timestamp, round seed hash.

skill badges mint separately at config-defined thresholds:

• vent witness: catch the exploit mid-vent 3 times
• paranoid ace: 5 consecutive paranoid wins
• clean sweep: win with zero wrong votes

your record follows you across every world.

security

server-validated roles

exploit identity is assigned server-side at round start and stored in an rls-locked table. each client receives only its own role - crew or exploit. no other player's role is ever in any payload. this is structural, not a policy.

secret voting

round_votes has no client select policy and is not in the realtime publication. votes are physically unreachable by any client before the reveal. the tally is computed server-side. only the result is written publicly at reveal.

the proof

we traffic-captured a non-exploit client's full websocket and rest surface across a complete round: no other player's role, no exploit identity, no pre-reveal tally, no corruption attribution appeared anywhere in the capture.

on-chain records

round results and proof-of-play records are written to solana via metaplex bubblegum. soulbound and non-transferable. the round seed hash is sha-256 of a per-round nonce - proves which round without being replayable.

roadmap

live now live

• solo play (all difficulties)
• real-time multiplayer (up to 8 players)
• server-validated roles and voting
• live llm-generated alibis
• player-owned worlds with themes
• wallet connect (phantom, solflare, backpack)
• token-gated world creation
• the /cluster live demo

coming soon coming soon

• proof-of-play sbt minting
• staked lobbies
• ranked leaderboard
• spectator betting
• dedicated high-stakes servers for tier 03
• agent real-api personalities (each agent calls its namesake model for alibis and chatter)
• three.js avatar upgrade
• full map redesign