Full-Stack Code & Database Audit — Live Streaming Platform (Next.js + Supabase)

I run a live, mobile-first livestreaming battle platform (famefight.app) (Next.js/TypeScript on Vercel, Supabase Postgres, LiveKit for video, Stripe for payments) with real users and a real-money in-app coin economy. It's in production now and I need an experienced engineer to fully audit the codebase and database before issues cost me money or user trust. **Tech stack:** Next.js (App Router) + TypeScript, Supabase (Postgres, Auth, Realtime, RLS, Postgres functions), LiveKit, Stripe, GitHub. **Core loop:** users buy coins → gift them to streamers during live video → streamers earn a cut → withdraw via PayPal or convert to spendable balance. Also includes a live 1v1 battle/tapping system, co-hosting, and a leaderboard. ## What I need checked - **Coin economy integrity** — every code path that moves coins (gifts, Stripe purchases, withdrawals, conversions, refunds). I've already found and fixed several spots where a failed database write was silently ignored while coins had already moved — I need someone to find any others and confirm the whole system is airtight. - **Database security** — RLS policies on every table, and confirming all coin-mutating Postgres functions are locked to `service_role` only, never callable from a user's browser. - **Race conditions** — simultaneous taps/gifts in live battles, same account on multiple devices. - **Realtime & LiveKit** — subscription scoping/cleanup, and the co-host/battle dual-room connection setup. - **General pass** — flag anything else fragile or likely to cause silent data corruption. ## Deliverables 1. Written report of issues found, ranked by severity, in plain language I can act on as a non-technical founder 2. Actual fixes for anything critical/high severity, submitted for my review (no direct pushes to production) ## Ideal candidate Strong Next.js + Supabase/Postgres experience (RLS, Postgres functions, Realtime specifically), ideally with fintech/payments background. Please include a past audit example in your proposal.