How to verify a result
A verifiable round has a receipt: the rule version, round ID, commitment and revealed seed. These values let you repeat the calculation independently of the animation.
Commitment first
Save the round commitment before betting. It commits to a specific seed: a different seed should not pass the same check.
Seed after the round
Once the round ends, open its verification panel. Copy the ID, rule version, seed and commitment from the same receipt.
Repeat the calculation
Compare the calculated outcome with your receipt. The checker below runs in your browser and sends no entered data to the server.
Verify a receipt
This checker supports the current Coin Flip and Ladder versions. Other games provide verification in their own screens. Historical rounds require their original rule versions.
The algorithm
Text is UTF-8 encoded; the seed is raw bytes decoded from hex. The || symbol denotes byte concatenation.
domain = UTF8(ruleVersion + ":") commitment = SHA256(domain || UTF8(roundId) || seed) Coin Flip: ticket = HMAC-SHA256(key=seed, data=domain || UTF8(roundId))[0] outcome = ticket < 128 ? Heads : Tails Ladder (step s, cell c; both numbered from 1): score[c] = SHA256(domain || seed || UTF8(roundId) || byte(s) || byte(c)) Stones = the k cells with the lowest scores.
What this check confirms
It checks the revealed seed against the saved commitment and repeats the outcome calculation. To verify prior commitment, you need the hash you saved before the outcome. A match alone does not establish an independent audit, an unbiased choice of seed, or a credited payout.
The animation displays the outcome. Stakes, payouts and balance history are stored on the server. If values disagree, save the round ID and contact support.
All game rules →