After the hols in Italy it was straight back into suring up the Sportsblock server. The goal is to make it a Fintech grade A platform and I have finally achieved this in the backend. So last week i was back to changing other features such as performance, new features and a whole lot more guardrails and Sentry configuration so if something leaks or fails then I get an alert.

Sportsblock — Week of 8–12 June 2026

54 commits merged to main, all via PRs.

The headline: the World Cup contest stack went live end-to-end, the entire money pipeline got a deep security hardening pass, and the broadcast layout migration was completed — the legacy chrome is gone for good.

🏆 World Cup contest stack (#483, #484, #491, #492, #493, #494)

• Added FIFA World Cup to the ESPN football leagues, so match threads cover the tournament.
• Built an admin match-results entry page for the World Cup contest, then layered an ESPN sync cron on top so fixtures and group results flow in automatically.
• Unified all contest systems (LMS, IPL BB, Matchday Matrix, FTC, generic contests) under a single Contest Hub in admin.
• Polished the results surface: chronological matchday ordering with kickoff times, drawn-final winner handling, round validation, and proper CTAs on locked contests.

🔒 Money-flow security hardening (#475–#482, #459)

A full audit sweep across every MEDALS-moving path, shipped as eight tightly-scoped PRs in one day:

• Escrow-drain and double-credit windows closed on predictions v2 stakes.
• Entry-data validation at /enter/confirm — prize-pool theft vector eliminated.
• Claim-before-broadcast on FTC and IPL BB prize payouts — double-pay impossible.
• Anti-whale caps now enforced at credit time, and responsible-gambling stake caps enforced on the live v2 path.
• Real on-chain txId recovery for HiveSigner entries, PENDING payout ledger at Matchday Matrix settlement, stranded-refund dedup.
• Plus rate limiting on phase-1 money routes with a coverage ratchet in CI.

📊 Financial observability (#468, #472, #487)

• Nightly money-invariant sweep — conservation checks across the whole escrow system, so any ledger drift surfaces within 24 hours.
• Sentry cron check-ins on all money-moving crons, with an alerting runbook.
• Invariant tuning so genuine states (fully-paid zero-burn markets) pass clean.

🏗 Architecture milestones (#465, #466, #467, #462, #446)

• Broadcast migration complete — the legacy MainLayout / TopNavigation / Sidebar chrome was deleted entirely. Every primary surface now ships on BroadcastLayout.
• The WASM server boundary is now mechanically enforced via server-only imports — a client-bundle leak fails the build instead of failing silently.
• Split the 934-line ComposeSportsbite god-component.
• Predictions V1 fully wound down: mutations closed, page archived, dead crons and settlement machinery deleted.

⚡ Performance (#486, #489, #495)

• LCP work: cookie banner now paints with the page, fade dropped from the LCP headline, hero entrance moved to CSS.
• /blog RSC payload slimmed by trimming initial posts before embedding.
• Avatar resizing everywhere + calmer poll intervals.

🧪 Testing & CI (#471, #460, #473, #469, #455)

• Authenticated Playwright re-enabled — login without Keychain by minting the session cookie directly. A long-standing testing gap, closed.
• Test coverage on the four money-moving cron routes; badge evaluator/calculator coverage went 0% → 85%.
• Visual-tour E2E spec for full-platform screenshot reviews.
• Gitleaks secrets scanning in pre-commit and CI; CSRF coverage now mechanically checked in CI; 43× Jest slowdown resolved.

🛠 Ops & DB discipline (#470, #449, #461, #452)

• Migration baseline, nightly DB drift check, and a quarterly restore-drill runbook.
• Guards on both protected branches: a daily production-drift GitHub Action plus pre-push hard blocks on main and production.
• RLS enabled on the eight Fantasy Test Cricket tables.

🧹 Housekeeping

• Google AdSense removed entirely (#488) as we were getting nowhere with Google and the Adsense software was having considerable performance drag on the entire platform. Will revisit ads in time. Buffer pipeline removed (#455), Sentry quota burn stopped (#474), dead rate-limiter code trimmed, Zod validation on the hive-engine transfer route, and Dependabot kept dependencies current.

---

Bottom line: the platform is World Cup-ready, the money paths are audited and watched by automated invariant checks, and a major chunk of legacy architecture was retired — a genuinely big week.

Now the the system is now bullet proof. We can start bringing in new features. We are all ears. If someone wants a new feature or contest then let us know.
Some suggestions are :

• Sportsbite of the day/week
• Buying Medals straight from FIAT
• New Fantasy Football Contest that will run the entire season. Hive FPL are on board next season so it will be interesting what @talesfrmthecrypt has in store for me to keep me up all night in July.
• A better onboarding experience which is always the difficulty with Hive. How do we get the non-crypto people engaging? @starkerz has working on an onboarding method so we will be following this closely
• Wrapping MEDALS token to increase our userbase.

We will also be looking at funding @talesfrmthecrypt's trip to Hivefest this September to Barcelona to teach everyone what cricket is. We will send @niallon11 with his hurl and I will do my party piece which is called "Around the World" which is two kickups left foot and right foot, onto the both knees , then shoulders and finally a header and back down. All after 10 cerveza's. It might take me a few goes but I still have the skills. All in all the presentation will be 15 minutes.