Dragon Cash
High Risk
Dragon Cash is a blockchain strategy game where players build and upgrade their kingdom while earning daily crypto rewards on BSC, Polygon, and opBNB
1 Issues Detected
1
Ponzi Scam, Unverified Smart Contracts
Dragon Cash is highly likely a multi-chain Ponzi scam project deployed on both BSC (main contract: 0x76b2E734A4a81cDbc45E592416c4Ba89A5CeDF9E) and opBNB (main contract: 0xafc1047e1295c80fd4aca8f6a527b5bac27ea948) with identical code, controlled by the same EOA address (0x37d048351010554a5707E3c3E7B168a36F552E03). The project's most critical flaw is that users' deposited principal can never be withdrawn—no principal withdrawal function exists in the contract (no unstake, no withdrawPrincipal), users can only claim staking rewards via claim() while principal remains permanently locked in the contract, which is a 100% confirmed fact at the code level. The project employs a 5-tier referral reward system (code explicitly loops 5 times to distribute referral rewards), forming a pyramid-style MLM structure. All critical parameters (yield rates, referral percentages, staking periods, privileged addresses) are entirely controlled by external Config contracts, and both chains' Config contracts (BSC: 0xaFC1047e1295c80fD4aCA8f6A527b5BAc27Ea948, opBNB: 0xf2DA4bE1FC1B08F86E7aF5a6601ddA69fA6e772e) are unverified, making it completely impossible for users to confirm actual rates and rules—the project team can modify any parameters at will. The contract contains a hidden fund extraction mechanism: the check_balance() function allows a privileged address (specified by the unverified Config contract) to automatically withdraw 20% of the contract balance when calling claim, enabling the team to gradually drain contract funds through repeated calls. More seriously, the contract includes explicitly deceptive design: the withdraw() function is named "withdraw" but is actually a payable function that receives funds with no outgoing transfer logic, purely designed to deceive users into depositing, with similar misleading functions like register(), upgrade(), and invest() that only collect money without providing any corresponding services. The project's economic model has no external revenue source—returns can only come from new user deposits, fitting all characteristics of a Ponzi scheme.
Summary
High Risk
Audit
DappBay Red Alarm
List Time
Jan, 28, 2026
Chain
BNB Smart Chain,opBNB