‹ Back to the shop

Provably Fair

You do not have to trust us — you can check every result yourself, with your own tools if you like.

How it works

  1. Commit. Before you play, we pick a secret server seed and show you only its fingerprint (SHA-256 hash). We cannot change the seed afterwards without the fingerprint no longer matching.
  2. Mix. Each play uses your client seed and a counter (nonce: 0, 1, 2 …). The result number is the first 6 bytes of HMAC-SHA256(serverSeed, clientSeed + ":" + nonce) divided by 248, a number between 0 and 1.
  3. Pick. The number is multiplied by the sum of the chances and walked through the prize list in order; the prize whose range it lands in is the result.
  4. Reveal. When you press “Reveal & rotate seed”, the old server seed is shown, a new one is committed, and you can recompute every past result below.

The prize table used here is the current one shown in the shop. If the shop has changed a box’s chances since you played, older results are checked against the old table and may differ — ask support for the table that applied.

Verify a result