How a malicious smart contract gambling site can drain funds, fake game logic or block withdrawals, plus practical checks before you connect a wallet.