Channel
verifying on-chain…
Channel
verifying on-chain…
v14 · Channel #19
−$0.16
1 round · 2 steps · $0.16 wagered · lost
✓ Provably fair — the seed was committed on-chain before play, the exact step stream was signed by the player's key, and every roll, decision, and payout below is re-derived from public inputs and matches the on-chain settlement.
Parameters
Proof of randomness
✓1.The seed was committed before you played
Before this channel opened, the house bound keccak256(serverSeed) on-chain. The seed revealed at close must hash back to that commitment — the house had exactly one seed it could ever reveal, fixed before your first step.
Commitment (bound at open)
0x99cea6010c8c4508b81aa7858ab657ed88c17662a29cfc2d3152945884d4759a
Server seed (revealed at close)
0x9ec773cadf50eb6a3e4618cf25530bbb060a3a10cdc3e6de246525832be5c313
keccak256(serverSeed)
✓ matches the commitment
✓2.You signed the exact stream that settled
Each step, your session key signed DrawCommit(channelId, steps, root) — a running hash-chain over every round you entered, every decision you took, and every reveal you requested, signed before the outcome was shown. The close can only settle a stream and count carrying your signature: the house can't add, drop, or reorder a single step.
Signed message
DrawCommit(channelId=19, steps=2, root=0xbf98a359…f3afbe7e)
Recovered signer
0x8a716EB62EF4Cd8F71ad5d0fa374deb2574F395f ✓ = your session key
✓3.The stream hash-chain checks out
Re-folding the submitted stream — root_t = keccak256(root_(t−1), t, …) over each round's (stake, game), each decision's choice, and each reveal — must reproduce the root you signed, pinning the exact sequence to your signature.
Signed root
0xbf98a3594c9b4a4dedf447b841049961a6fbabd0c99db74442e8ec35f3afbe7e
Recomputed from the submitted stream
✓ identical
✓4.Every roll re-derived from public inputs
Each roll is keccak256(serverSeed, clientSeed, channelId, t) mod 10000, walked through the on-chain game tree it was played against. Recomputed below — not read from anywhere.
Played against Coinflip — sealed tree #0game stats →
fold t1 · roll = keccak(seed, clientSeed, id, 1) mod 10000
✓ The recomputed net, wagered total, and step count match the on-chain settlement exactly.
Game (on-chain catalog)
Each game is a value tree stored on-chain and validated by the contract when it was sealed — the edge under optimal play is enforced inside a fixed band, so no game referenced here can be unfair in either direction. The payouts above were walked from these exact trees, reconstructed from the chain's packed words.