Provably fair
You should not have to trust us about the odds. Before you open anything, we publish a SHA-256 hash of the server seed. The outcome is HMAC-SHA256 over that seed, your client seed and a nonce that only moves forward — so the result is fixed the moment the hash is published, and no losing roll can be quietly re-rolled behind the animation.
Your seed pair
Rotating retires the active seed and reveals it, so you can re-check every roll it produced. A fresh secret seed takes over and the nonce resets.
- Server seed — secret
- •••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••
Withheld until you rotate. Without it the next roll cannot be computed — that is what stops you predicting a pull, and stops us re-rolling one.
- Its SHA-256 commitmenthash, not the seed
- —
- Client seed
- —
- Next nonce
- —
Verify a roll
Paste a revealed server seed with the client seed and nonce from any pull. This recomputes the outcome independently — if it disagrees with what you were shown, we cheated.
Public pull ledger
Every open by every player. Nothing is filtered — the losses are in it too. Seeds and nonces appear only on your own pulls: they stay the same from one open to the next, so publishing everyone’s would let anyone reconstruct a stranger’s entire history and spend. Odds are held to account in aggregate instead, on each box page.
No pulls yet. Open a box and it lands here.