Prixville uses non-custodial staking. Your Prix stays in your own wallet the entire time. The contract only records that you staked it and when. No one can move or take your NFT.
Why does it ask for "Approve All"?
The wallet warning about approving all NFTs is standard for staking dApps. The approval gives the staking contract permission to record your stake. It does not transfer, sell, or move your NFTs. You can revoke this approval at any time on Etherscan or in your wallet settings.
Points are not a token, no funds at risk
Staking earns you loyalty points, not a cryptocurrency. Points are non-transferable credentials used to unlock capsules and future rewards. The contract holds no ETH, no tokens, and no user funds of any kind.
Source code verified, exact match on Etherscan
The staking contract bytecode was submitted to Etherscan and confirmed as an exact match to the published source code. Anyone can read every line of it. The contract was also reviewed by Blockaid and cleared of false malicious flags.