Channel
verifying on-chain…
Channel
verifying on-chain…
v14 · Channel #16
−$0.12
1 round · 2 steps · $0.12 wagered · lost
✓ Provably fair — the seed was committed on-chain before play, the exact step stream was signed by the player's key, and every roll, decision, and payout below is re-derived from public inputs and matches the on-chain settlement.
Parameters
Proof of randomness
✓1.The seed was committed before you played
Before this channel opened, the house bound keccak256(serverSeed) on-chain. The seed revealed at close must hash back to that commitment — the house had exactly one seed it could ever reveal, fixed before your first step.
Commitment (bound at open)
0x2c405e23391c1417ab1ad2d2c0858499a3668facd230197b337f5831941840f2
Server seed (revealed at close)
0x22280c3e7c462951d0ccbc29928bdfc502f2023ef1d32cdc887000afa9b5e16d
keccak256(serverSeed)
✓ matches the commitment
✓2.You signed the exact stream that settled
Each step, your session key signed DrawCommit(channelId, steps, root) — a running hash-chain over every round you entered, every decision you took, and every reveal you requested, signed before the outcome was shown. The close can only settle a stream and count carrying your signature: the house can't add, drop, or reorder a single step.
Signed message
DrawCommit(channelId=16, steps=2, root=0x9eb4c149…f0a61b4e)
Recovered signer
0x1C7B3f0D3B585386cE6EbBE1157625068Cdde1d4 ✓ = your session key
✓3.The stream hash-chain checks out
Re-folding the submitted stream — root_t = keccak256(root_(t−1), t, …) over each round's (stake, game), each decision's choice, and each reveal — must reproduce the root you signed, pinning the exact sequence to your signature.
Signed root
0x9eb4c149c5bb8928a4637e32a00c1dfa9febc025f9993b454e1b96f3f0a61b4e
Recomputed from the submitted stream
✓ identical
✓4.Every roll re-derived from public inputs
Each roll is keccak256(serverSeed, clientSeed, channelId, t) mod 10000, walked through the on-chain game tree it was played against. Recomputed below — not read from anywhere.
Played against Coinflip — sealed tree #0game stats →
fold t1 · roll = keccak(seed, clientSeed, id, 1) mod 10000
✓ The recomputed net, wagered total, and step count match the on-chain settlement exactly.
Game (on-chain catalog)
Each game is a value tree stored on-chain and validated by the contract when it was sealed — the edge under optimal play is enforced inside a fixed band, so no game referenced here can be unfair in either direction. The payouts above were walked from these exact trees, reconstructed from the chain's packed words.