Scores are checked server-side for time/score plausibility before being saved. Wallet addresses are self-reported and not cryptographically verified.