Channel
verifying on-chain…
Channel
verifying on-chain…
v14 · Channel #350
−$25.56
whole session · 2 epochs · 3 rounds · 11 steps · $33.56 wagered
final epoch −$31.56 · earlier epochs +$6.00
✓ Provably fair — the seed was committed on-chain before play, the exact step stream was signed by the player's key, and every roll, decision, and payout below is re-derived from public inputs and matches the on-chain settlement.
Parameters
Session epochs
This channel re-armed itself mid-session 1 time: each checkpoint settled the epoch's net, revealed its seed, and committed a fresh one — one continuous session, several sealed proofs. Every epoch below is replayed from its checkpoint transaction's signed stream — rolls re-derived, nets recomputed, signatures recovered ✓ and the chain of commitments anchors to the on-chain channel state.
Played against Streak 2× — sealed tree #76
Proof of randomness · final epoch
✓1.The seed was committed before you played
Before this channel opened, the house bound keccak256(serverSeed) on-chain. The seed revealed at close must hash back to that commitment — the house had exactly one seed it could ever reveal, fixed before your first step.
Commitment (bound at open)
0x682be7f4ea1006d203a0ea7dbb5bf0e1ed33c6988ec4454938f749f50fbd9ba3
Server seed (revealed at close)
0x63eec26e29cf86a5d65f56a51abd02d6961b6552132859b852fd483ef21fc8b0
keccak256(serverSeed)
✓ matches the commitment
✓2.You signed the exact stream that settled
Each step, your session key signed DrawCommit(channelId, steps, root) — a running hash-chain over every round you entered, every decision you took, and every reveal you requested, signed before the outcome was shown. The close can only settle a stream and count carrying your signature: the house can't add, drop, or reorder a single step.
Signed message
DrawCommit(channelId=350, steps=2, root=0xeabbe2f0…5c7bcda6)
Recovered signer
0xa420838E61900B404a4ED43AEd4f0C374d6A0F2B ✓ = your session key
✓3.The stream hash-chain checks out
Re-folding the submitted stream — root_t = keccak256(root_(t−1), t, …) over each round's (stake, game), each decision's choice, and each reveal — must reproduce the root you signed, pinning the exact sequence to your signature.
fold t1 · roll = keccak(seed, clientSeed, id, 1) mod 10000
Played against Streak 32× — sealed tree #72game stats →
fold t3 · roll = keccak(seed, clientSeed, id, 3) mod 10000
t4 · player chose option 2 of 2 — no roll, the choice was yours
fold t5 · roll = keccak(seed, clientSeed, id, 5) mod 10000
t6 · player chose option 2 of 2 — no roll, the choice was yours
fold t7 · roll = keccak(seed, clientSeed, id, 7) mod 10000
t8 · player chose option 1 of 2 — no roll, the choice was yours
Signed root
0xeabbe2f062625a2843a103967e62354d547e341bc848280b61b825395c7bcda6
Recomputed from the submitted stream
✓ identical
✓4.Every roll re-derived from public inputs
Each roll is keccak256(serverSeed, clientSeed, channelId, t) mod 10000, walked through the on-chain game tree it was played against. Recomputed below — not read from anywhere.
Played against Streak 2× — sealed tree #76game stats →
fold t1 · roll = keccak(seed, clientSeed, id, 1) mod 10000
✓ The recomputed net, wagered total, and step count match the on-chain settlement exactly.
Game (on-chain catalog)
Each game is a value tree stored on-chain and validated by the contract when it was sealed — the edge under optimal play is enforced inside a fixed band, so no game referenced here can be unfair in either direction. The payouts above were walked from these exact trees, reconstructed from the chain's packed words.