Provable fairness

Before you open a single pack we fix the randomness and publish its fingerprint. We cannot change it afterwards without the fingerprint no longer matching, so the one thing a dishonest operator would want to do (look at what you are about to get and roll again) is off the table. Rotating a seed does not change your odds — it publishes the old server seed so you can verify past pulls, then starts a new commitment with a fresh hash.

How to check a pull yourself

Once a commitment is revealed, take its server seed and client seed, and for the pull you care about its nonce:

draw = HMAC_SHA256(serverSeed, clientSeed + ":" + nonce + ":band")
     -> take the first 6 bytes, big-endian
     -> divide by 2^48

sha256(serverSeed) must equal the published hash

Then walk the band list stored on the pull, subtracting each band's weight from draw × total. The band where the running total goes negative is the one you were given. Every pull stores the exact odds that were in force when it happened, so a pool selling out later cannot change the answer.

Sign in to see your current commitment, rotate a seed, and recompute pulls from your own history. Sign in or create an account.