Fairness

Every opening can be recomputed by you. Nothing is decided after you click.

How provably fair works

  1. 1Server seed, committed up front. Before you open anything we generate a secret 32-byte server seed and show you its SHA-256 hash. The seed cannot change without breaking the hash.
  2. 2Client seed, controlled by you. Set it to anything you like. Since we never know it in advance, we cannot pick a server seed that favors the house.
  3. 3Nonce, one per open. It starts at 0 and increments with every opening, so each result comes from a unique message clientSeed:nonce.
  4. 4HMAC-SHA256 to a ticket. HMAC-SHA256(serverSeed, clientSeed:nonce) is reduced without bias to a ticket from 0 to 999,999 and mapped onto the pack's odds table (items sorted by value, then slug). Rotate your seed to reveal the server seed and verify every past opening below.

Battles use their own committed seed per battle; each pull uses the message clientSeed:r{round}:s{slot} so every player's roll is independent and verifiable.

Your active seed

Previous seeds

Revealed server seeds. Use any of them to verify the openings made while it was active.

Verify an opening

Recompute any opening from a revealed server seed. This runs against the pack's public odds table and needs no account.

Pack