Provably fair

Verify an opening

Every opening can be reproduced from three public values: the revealed server seed, your client seed, and the nonce. Paste them below — we re-derive the hash, the roll, and the resulting card, with zero trust required.

How this works

✦

Enter the seeds from any opening and we'll re-derive the exact same result — proving it was fixed in advance and never rigged.

The exact math

Nothing up our sleeve

The roll is a deterministic function of the three inputs. There's no server-side discretion, no second roll, no re-draws. Here is the actual derivation, byte for byte:

roll =
  SHA256(serverSeed + ":" + clientSeed + ":" + nonce)
    .hex()
    .slice(0, 13)          // 52 bits — exact as a JS double
    / 16^13                // → a float in [0, 1)

card = pickCard(pool, roll) // walk the weighted pool until the
                            // cumulative weight passes the roll

Because the percentages on each pack page come from the same weights this pickCard walks, the published odds and the real odds are guaranteed identical.