Then I've misunderstood the model.
I thought one of the points of MoneyPot was that it allows random untrusted strangers to run a casino by proxying the trust of the MoneyPot owner.
I thought it went like this:
I deposit to MoneyPot, the untrusted site places my bet on MoneyPot for me, and my winnings stay in my MoneyPot account, leaving no way for the untrusted site operator to steal any of my winnings.
Where did I get it wrong? I thought the site operator could place bets on my behalf that I hadn't agreed to, or could change the details of my bet before placing them, but I didn't realize they could outright take a portion of my winnings without me knowing it.
Hmm, almost. You deposit money into moneypot, and there only you can touch it. You can instantly transfer money to an app, and there an app can do what ever it wants with your money, such as betting or even stealing it. If you deposit X from MP to an app, you need to explicitly trust the app with X. Until the money is back in your main moneypot balance, it's completely at the mercy of the app itself.
MP also offers a set of APIs for apps, most prominently betting against a bankroll that they do not control. (That way investors don't need to trust apps).
I originally did something more akin to what you were talking about, but it became *way* too complex for end users (configuring the type of bets, how many bets, how much EV etc.) that apps could have permission with. I even had a "refill permission" and audit feature. But users find it much simpler to just transfer balances between apps, and each app has their own per-user balance.
But the app owner can't really control the userfunds like he controls his own funds in his dashboard right ?
The only way he could "control" it is by tipping it to himself or whereever with some malicious code or stealing the token/cookie and gain access to his account, or am I missing something there ?
I was wondering if it would make sense if mp would review the code of a website before its allowed to be published. But even then the code could be changed after + there are thousands of apps, so mp would need people to do this.