Don't trust us. Verify every spin.
Every box you open is sealed with cryptography before the reel moves. You can recompute any outcome yourself — right here in your browser. This is the same commit-reveal scheme used across the industry, made fully self-serve.
Before you open, we generate a secret server seed and show you its SHA-256 hash. It is locked in — we can never swap it afterwards.
Your outcome = HMAC-SHA256(server seed, your client seed + nonce). You control the client seed; the nonce counts up every spin.
Rotate your seed any time to unseal the old server seed. Re-hash it to confirm it matches the commitment — and recompute every result yourself.
Verify any spin
Paste a revealed server seed, the client seed and nonce. Everything is computed locally in your browser — no data leaves this page.
roll = parseInt( HMAC_SHA256(serverSeed, clientSeed + ":" + nonce)[0:8], 16 ) / 2^32
item = weightedPick(boxOdds, roll)
proof = SHA256(serverSeed) === commitment &&
SHA256(serverSeed + ":" + clientSeed + ":" + nonce) === resultHash