Geek Protocol
Litepaper · Alpha

Knowledge, made liquid.

Geek Protocol pays people for what they actually know. Answer correctly, under time pressure, and the protocol settles $GEEK to your Kaspa wallet. This document explains how that works, and is honest about what is still unfinished.

01

Summary

Most quiz apps reward luck, persistence, or attention — you tap, you earn, and the payout has nothing to do with whether you knew anything. Geek Protocol makes the reward a direct function of demonstrated knowledge: correct answers, answered quickly, verified on a server the player does not control, settled on Kaspa.

Three properties carry the design. Answers never reach the browser in any mode — a choice is committed to the server before the correct one is revealed, and the commitment is write-once, so learning the answer costs you your guess. Scoring happens server-side against a signed attempt token, so a player cannot report their own result. And payouts are queued and idempotent, so the same attempt cannot be paid twice.

02

Live alpha

The numbers below are read live from the alpha database every 60 seconds. They are real aggregates, including when they are small — a project asking you to connect a wallet should not be inventing its own traction.

03

Proof of learning

When a player starts a round, the server selects the questions, shuffles the options for that attempt specifically, and issues an attempt token — an HMAC-signed payload holding the question set, the post-shuffle correct indices, and the server's own issue timestamp.

The client receives the questions and options. It never receives the answers. On submission the server verifies the token signature in constant time, scores the answers against the copy inside the token, and validates the timing against its own clock rather than the client's claim.

Four conditions for a payout

  1. The wallet is authenticated against a server-issued challenge.
  2. The attempt is scored server-side from a valid, unexpired token.
  3. The payout job is enqueued and processed by the reward worker.
  4. The transaction is confirmed and the status is shown to the player.
04

Reward pipeline

Settlement runs through a sharded queue. Payouts are distributed across independent lanes, each with its own worker and concurrency, so throughput scales with lanes multiplied by per-lane concurrency rather than being pinned to one transaction at a time.

Lane assignment is deterministic on the payout key. The same attempt always lands on the same lane, so a retry can never race the original on a different worker, and payouts for one player stay ordered relative to each other.

Double-spend protection

Three independent layers, because paying twice is worse than paying late: a deterministic job id so a duplicate enqueue is dropped by the queue itself, a Redis lock held for 24 hours after success, and unique database constraints on the attempt id. Any one of them alone would stop a double payout.

Per-lane queue depth is exposed at /health/payouts for monitoring.

05

Creator economy

From Level 10, players can write questions and review other people's. Approved questions enter the live rotation and earn their author a share each time they are served; reviewers earn a smaller amount per review.

This is the part of the protocol with the most obvious attack surface, since it pays people to produce and approve content. The safeguards are described below rather than glossed over.

06

Integrity & anti-abuse

Against automation

  • Correct answers are never sent to the client, in any mode.
  • Answers are committed before they are revealed, and the commitment is write-once — so harvesting the key and playing are the same act.
  • Options are reshuffled per attempt, so answer positions can't be memorised.
  • Question text is rendered to canvas, not selectable DOM text.
  • Speed bonuses are bounded by the server's clock, so under-reporting your own answer times earns nothing.
  • Submissions faster than a human could read are rejected outright.
  • Interaction telemetry flags suspicious attempts for review.

Against review collusion

  • Reviewers can't choose what they review — questions are served at random.
  • Authorship is hidden from reviewers.
  • You must win real games before you may vote at all.
  • A hard daily review cap bounds what any one account can earn.
  • A weekly per-author cap stops a ring waving through its own submissions.
  • Agreement with final consensus is tracked, and persistent rubber-stamping suspends the account from reviewing.

One honest caveat: canvas rendering and behavioural signals raise the cost of a naive bot, but neither is a wall. Canvas is still glyphs and OCR reads it; telemetry is client-reported and therefore forgeable. They are treated as signals that flag an attempt for review, never as gates that withhold a payout, because a false positive there means refusing to pay a real player. The load-bearing defences are the server-side ones.

07

What's built, and what isn't

Working today

  • Server-side scored quiz, gauntlet and daily modes
  • Wallet login via single-use signed challenge
  • Sharded, idempotent payout pipeline with health metrics
  • Creator submission, randomised peer review, leaderboards
  • Stickers, streaks, XP and levelling

Not done yet

  • Third-party security audit — not yet started
  • On-chain KRC-20 transfers — the transfer function is still a stub, so $GEEK balances are database figures, not settled tokens
  • Mainnet $GEEK deployment (alpha runs on testnet)
  • Tournament infrastructure at scale
  • Mobile applications
08

Risks

Read this part

  • Pre-audit software. No third-party security audit has been completed. Treat the alpha accordingly.
  • Testnet phase. The alpha runs against Kaspa testnet. Testnet tokens have no monetary value.
  • Custodial wallets. Accounts created with email receive a protocol-generated wallet whose key is held encrypted by the protocol. Connecting your own KasWare wallet avoids this.
  • Economic parameters are not final. Reward rates, caps and thresholds are tuned during alpha and will change.
  • Not financial advice. Nothing here is an offer, a solicitation, or a promise of future value.

Read the source

Everything described here is open source and MIT licensed.

Alpha litepaper · subject to change as the protocol develops.