Fake World Assets’ FWAir: A New Gacha Pool for NFTs, But Where’s the Audit?

CryptoKai
Security

Most NFT launches begin with a promise—a roadmap, a community, a mint price. But when the mint is replaced by a random pool and backers supply the capital upfront, the promise shifts from creativity to custody. That is the core of Fake World Assets’ new FWAir mechanism, announced by co-founder Adam (Rhynotic) via The Defiant. The idea is simple: artists can launch new NFT collections through a gacha-style pool, earning revenue from secondary trading fees rather than initial mint sales. Supporters deposit ETH into the pool, hoping to receive a random NFT. The protocol expands from trading existing NFTs to issuing new ones. On the surface, it’s a clever product tweak designed to attract creators in a bearish NFT market. But as someone who has audited smart contracts for over 40,000 lines of Solidity, I see a gaping hole in the narrative: the technical details that separate a fair game from a rigged lottery.

Let me unpack the mechanism. FWAir is not a new blockchain or a radical protocol upgrade. It is a product logic change. Previously, Fake World Assets was a marketplace where users could trade NFTs. Now, it becomes a launchpad where creators can issue new collections through a “gacha pool,” a term borrowed from Asian mobile games. Supporters provide ETH upfront, and the pool allocates NFTs randomly. The creators’ income comes from future trading fees, not from the initial mint. This flips the traditional model: instead of the artist requiring upfront capital to mint an NFT collection, the backers fund the pool, and the artist is paid out over time through trading volume. In theory, this reduces barrier for artists and aligns incentives with long-term liquidity. But theory is not code.

The core of my concern is the missing technical infrastructure. From the information available, FWAir involves a smart contract that holds supporter ETH, performs random allocation, and distributes fees. Yet, no contract address, testnet, or audit report has been disclosed. The randomness source is entirely unknown. In my experience auditing DeFi protocols during the 2020 summer, I learned that chain randomness is notoriously tricky. Without a verifiable random function (VRF) or a commit-reveal scheme, the project can control the outcome. A two-person team—Adam and presumably another developer—handling a pool of user funds? That raises a red flag. In my 2017 Istanbul audit work, I refused to sign off on code that lacked proper reentrancy guards. Here, we don’t even have the code to review.

Tokenomics? There is none. The article does not mention a native token. The only revenue stream is trading fees, with rates and distribution undisclosed. The “supporter deposits ETH” model creates a trust bottleneck: how long are funds locked? What happens if the collection fails to generate trading volume? The creator’s income depends entirely on secondary market liquidity, which is notoriously fickle. During the 2022 bear market, I saw projects with similar “fee-based” models collapse when volume dried up. The supporters’ ETH becomes trapped in a pool with no guaranteed return. This is not a Ponzi, but it is a high-risk gamble dressed as innovation.

Now, the contrarian angle: This could work if the protocol is transparent and audited. Gacha pools are a proven monetization model in gaming; they create excitement and FOMO. If Fake World Assets implements a proper on-chain randomness oracle, a multi-sig for treasury, and a clear refund mechanism, it might attract creators tired of high mint fees. But the market is currently euphoric—bullish sentiment often blinds users to structural flaws. In my recent work on AI-crypto privacy frameworks, I stressed that trust is built through verifiable code, not promises. The absence of any technical disclosure suggests either the team is rushing to capture market share or they are hiding something.

A signature I often use: “Trust is not a feature; it is an archived receipt.” Here, there is no receipt. The announcement on The Defiant is a public relations piece, not a technical specification. The project should be treated as a high-risk experiment until smart contracts are open-sourced, audited by at least one reputable firm, and the randomness mechanism is publicly documented. The “gacha” appeal is strong, but it can easily turn into a rug pull if the team has admin keys to manipulate the pool.

My takeaway is simple: In a bull market, every new mechanism looks like a goldmine. But the ones that survive the shake are those that are audited, transparent, and rule-bound. FWAir might be a genuine innovation for NFT distribution, but currently, it is a black box. History is the only consensus that never forks—and history will judge this project by its code, not its press release.