← Back to the water
Provably fair
Before you cast, we commit to a secret server seed by publishing its SHA-256 hash. Every roll comes from HMAC_SHA256(server seed, client seed:nonce:cursor), so once you rotate the seed and we reveal it, you can recompute any round and prove the outcome was fixed before your bet.
Verify a round
Take the server seed, client seed and nonce from a revealed seed pair and your receipt, then compare the numbers below with the rolls field in that receipt.