🔒 Provably fair

Verify any round yourself

Every game outcome is computed from cryptographic seeds — not decided by us after you bet. You can recompute any result below and confirm it matches what you were paid.

Commit

Before the round, the server hashes its secret seed (SHA-256). The hash is stored with your bet — the seed can't change without breaking it.

Roll

The outcome comes from HMAC-SHA256 of the server seed keyed over your client seed and a nonce — fully deterministic.

Reveal

After the round, the server seed is shown. You re-hash it (matches the commit) and recompute the outcome.

# the exact formula

floats = HMAC_SHA256(serverSeed, `${clientSeed}:${nonce}:${cursor}`)
float = uint32(first 4 bytes) / 2³² → [0, 1)

Verifier

Server seed (revealed)Client seedNonceGameExpected hash (optional)

Find a round's seeds under Profile → Game history → 🔒. Runs entirely in your browser.