# Security and Administration

* Ownership: Deployer is owner, with transfer possible via `transferOwnership`.
* Fees: Non-custodial; fees taken only on resolution from losing pots.
* Oracles: Relies on Chainlink for prices; ensure trusted oracles in production.
* Swaps: Uses Uniswap V2; slippage protected by `minAmount=0` (accept any output).
* Audits: Recommended before mainnet; code uses SafeERC20 for transfers.
* Risks: Oracle failures, timing attacks (resolve too early prevented), zero-stake sides (winners get back stakes only).

Update oracle addresses and token addresses for production via a new deployment or owner functions (not implemented for oracles).
