Ok well where to start, first of all this PoW algo has been available over GPU (nvidia & amd) for at least a year, so this wont be a CPU coin for long. Amd here:
https://github.com/Belgarion/clballoon and nvidia here:
https://github.com/Belgarion/cuballoon.
Also i've download the wallet and mined a little and investigate into how it worked. So first of all this aint a local wallet, its a web wallet. All it does is polling every 5 seconds the web server to see if it has something new to mine (
https://node1.balloonum.io/server.php?q=getminingtemplate. Using json as the communication format like this response:
{"id":"test","jsonrpc":"1.0","result":{"height":222,"prevhash":"2ySnAjx6DgbfR8Xn8XQFW9FnoiuG1A33FDmgRYNq4zMG4k5NMxtWkrPv4p34urk2ajbFPVB7GnRUvX6
SeVZ7wth9","difficulty":42812734}}
If you type "getbalance" it request balance on server (passing your public address).
Up to there its meh but its ok, nothing we haven't seen before.
Now where it gets more fun is when you find a block, its submitting the nonce, public key and......... the private key!
Here a capture of it (You can steal my key if you want for a free 15 BALL reward!)
I personnaly wont mine anything where i send my private key to a web server, even if its in HTTPS. This mean they have all private keys at their end.... And since theres no P2P at all, it might not even be a blockchain and/or a network. It could only be a web server database, if so then how is that immutable, what are we even mining with pow?
Im sorry, im staying as far as i can from this, do your homework! This balloon has busted!