Provably fair

The result is determined before you press the button. Anyone can verify it.

1. The seed is fixed in advance

The server generates a server seed and shows only its SHA-256. Changing the seed after an opening without changing the hash is impossible.

2. You add your own seed

You set the client seed. Together with the opening nonce it makes every result unique and dependent on you.

3. You verify it yourself

HMAC-SHA256 of both seeds and the nonce gives the number that picks the item. The same calculation is below.

Your seeds

Server seed hash
94e4ae980f3ea60ad737837bd4bca5dc7f6a4ad00744fd88b39fd07b8f430ddd
Next opening nonce
1
Client seed

While a seed is active only its hash is known. After it is replaced the old seed becomes visible, and every opening made with it can be recalculated.

Opening verification

Enter the seeds and the nonce — you will get the same number and the same item as the server.

Your openings

No openings yet

Open a case — the record will appear here with its nonce and the number to verify.

To the cases

How to verify an opening

Before an opening the server commits its seed and publishes the hash — the seed cannot be changed afterwards. The client seed is yours. At the moment of opening both seeds and the nonce are taken: together they produce the number that picks the item.

After a rotation the server seed is revealed and any past opening can be recomputed with the same function the site runs — the result matches to the character. That means neither we nor you can bend a drop after the fact.