trust nobody, verify everything

Provably fair

Every ticket draw is committed before it happens and can be recomputed by anyone, in this browser, with the code shown below.

1 · Commit

When a period ends we freeze the ticket list and generate a secret server seed. We publish SHA-256(serverSeed) and SHA-256(ticketList) right away. Nothing can be changed after this.

2 · Roll

On stream we pick a public client seed nobody controls (for example the next Bitcoin block hash). Each winner is HMAC-SHA256(serverSeed, clientSeed:nonce) → first 13 hex chars → mod total tickets.

3 · Reveal

After the roll the server seed is revealed. Hash it yourself, hash the ticket list, recompute the rolls. If anything was touched the hashes won't match.

Draws

drawn4,080 tickets · 59 players · 3 prizes

Committed atSat, 03 Oct 2026 00:00:40 GMT

Server seed hashe2877d996604a88814412e7bbc53233583380280983c614c4af14dd2d634b68d

Ticket list hash82cf33834573026b69d7251cbe04ed5b49b70388750feeb7b5b4b3e69c1181be

Server seede4bd5a195c2bf741c4df59ce0c73cedd270d4e3343701990aea43b9211c44e2e

Client seedhello

Drawn atTue, 06 Oct 2026 20:58:53 GMT

Winners

li***

nonce 1 · roll 907 → ticket #908 · $500

Cl***

nonce 4 · roll 2,042 → ticket #2,043 · $300

Ja***

nonce 5 · roll 4,060 → ticket #4,061 · $200

Frozen ticket list (59 players)

#1–1,961li***1961

#1,962–2,357Cl***396

#2,358–2,740Di***383

#2,741–2,945Be***205

#2,946–3,096Ya***151

#3,097–3,202Mi***106

#3,203–3,306ma***104

#3,307–3,399Zu***93

#3,400–3,491fe***92

#3,492–3,548Di***57

#3,549–3,600br***52

#3,601–3,648Li***48

#3,649–3,689pr***41

#3,690–3,729CA***40

#3,730–3,769ai***40

#3,770–3,795Je***26

#3,796–3,820bl***25

#3,821–3,843Bl***23

#3,844–3,864ZZ***21

#3,865–3,880iP***16

#3,881–3,896Co***16

#3,897–3,911ni***15

#3,912–3,925Sl***14

#3,926–3,938Do***13

#3,939–3,949xD***11

#3,950–3,959tr***10

#3,960–3,968Fa***9

#3,969–3,976ka***8

#3,977–3,983Ne***7

#3,984–3,990Ef***7

#3,991–3,997Sw***7

#3,998–4,004fa***7

#4,005–4,010pr***6

#4,011–4,015sN***5

#4,016–4,020mr***5

#4,021–4,025de***5

#4,026–4,030xj***5

#4,031–4,035Be***5

#4,036–4,039Sl***4

#4,040–4,043ju***4

#4,044–4,047re***4

#4,048–4,050ma***3

#4,051–4,053Fa***3

#4,054–4,056iu***3

#4,057–4,059cs***3

#4,060–4,062Ja***3

#4,063–4,065Be***3

#4,066–4,067du***2

#4,068–4,069gg***2

#4,070–4,071ab***2

#4,072–4,072mu***1

#4,073–4,073me***1

#4,074–4,074ho***1

#4,075–4,075hu***1

#4,076–4,076pe***1

#4,077–4,077ID***1

#4,078–4,078cr***1

#4,079–4,079De***1

#4,080–4,080bu***1

Names are masked the same way as on the leaderboard. The ticket list hash is SHA-256 of this exact list in this order, so it is verifiable without exposing accounts. Winners are contacted directly.

Manual calculator

Paste any seeds and recompute a single roll. Runs entirely in your browser with the Web Crypto API.

Server seedClient seedNonceTotal tickets

The exact algorithm

serverSeedHash = SHA256(serverSeed)                 // published before the draw
ticketsHash    = SHA256(JSON.stringify(tickets.map(t => [t.username, t.count])))

for nonce = 1, 2, 3, ...:
  digest = HMAC_SHA256(key = serverSeed, message = clientSeed + ":" + nonce)
  roll   = parseInt(digest.slice(0, 13), 16) mod totalTickets   // 0-based
  winner = holder of ticket (roll + 1), ranges follow list order
  skip the nonce if that holder (list position) already won; stop after all prizes are assigned

Same code runs on the server and on this page: src/lib/fair.ts.

serverSeedHash = SHA256(serverSeed) // published before the draw ticketsHash = SHA256(JSON.stringify(tickets.map(t => [t.username, t.count]))) for nonce = 1, 2, 3, ...: digest = HMAC_SHA256(key = serverSeed, message = clientSeed + ":" + nonce) roll = parseInt(digest.slice(0, 13), 16) mod totalTickets // 0-based winner = holder of ticket (roll + 1), ranges follow list order skip the nonce if that holder (list position) already won; stop after all prizes are assigned