Channel
verifying on-chain…
Channel
verifying on-chain…
v14 · Channel #3
−$0.01
2 rounds · 18 steps · $0.01 wagered · lost
✓ Provably fair — the seed was committed on-chain before play, the exact step stream was signed by the player's key, and every roll, decision, and payout below is re-derived from public inputs and matches the on-chain settlement.
Parameters
Proof of randomness
✓1.The seed was committed before you played
Before this channel opened, the house bound keccak256(serverSeed) on-chain. The seed revealed at close must hash back to that commitment — the house had exactly one seed it could ever reveal, fixed before your first step.
Commitment (bound at open)
0x5a072dc1dd9e4446c10298fd06cf725b19653aafc8564c63361b5287a539fe92
Server seed (revealed at close)
0x6ea91e2fc19be24e70a466fe85ec55b9ba95ece5fe74b70bb88054245662f074
keccak256(serverSeed)
✓ matches the commitment
✓2.You signed the exact stream that settled
Each step, your session key signed DrawCommit(channelId, steps, root) — a running hash-chain over every round you entered, every decision you took, and every reveal you requested, signed before the outcome was shown. The close can only settle a stream and count carrying your signature: the house can't add, drop, or reorder a single step.
Signed message
DrawCommit(channelId=3, steps=18, root=0x71852504…d02587db)
Recovered signer
0xc6124DCB44863E020B6FAE969eD2d30C9143E880 ✓ = your session key
✓3.The stream hash-chain checks out
Re-folding the submitted stream — root_t = keccak256(root_(t−1), t, …) over each round's (stake, game), each decision's choice, and each reveal — must reproduce the root you signed, pinning the exact sequence to your signature.
Signed root
0x71852504bc62c52b87c4528c9b5531dfc4e2ae8c8250f0abdeaf8630d02587db
Recomputed from the submitted stream
✓ identical
✓4.Every roll re-derived from public inputs
Each roll is keccak256(serverSeed, clientSeed, channelId, t) mod 10000, walked through the on-chain game tree it was played against. Recomputed below — not read from anywhere.
Played against Crash (v1) — sealed tree #60game stats →
fold t1 · roll = keccak(seed, clientSeed, id, 1) mod 10000
t2 · player chose option 2 of 2 — no roll, the choice was yours
fold t3 · roll = keccak(seed, clientSeed, id, 3) mod 10000
t4 · player chose option 2 of 2 — no roll, the choice was yours
fold t5 · roll = keccak(seed, clientSeed, id, 5) mod 10000
Played against Crash (v1) — sealed tree #60game stats →
fold t7 · roll = keccak(seed, clientSeed, id, 7) mod 10000
t8 · player chose option 2 of 2 — no roll, the choice was yours
fold t9 · roll = keccak(seed, clientSeed, id, 9) mod 10000
t10 · player chose option 2 of 2 — no roll, the choice was yours
fold t11 · roll = keccak(seed, clientSeed, id, 11) mod 10000
t12 · player chose option 2 of 2 — no roll, the choice was yours
fold t13 · roll = keccak(seed, clientSeed, id, 13) mod 10000
t14 · player chose option 2 of 2 — no roll, the choice was yours
fold t15 · roll = keccak(seed, clientSeed, id, 15) mod 10000
t16 · player chose option 2 of 2 — no roll, the choice was yours
fold t17 · roll = keccak(seed, clientSeed, id, 17) mod 10000
✓ The recomputed net, wagered total, and step count match the on-chain settlement exactly.
Game (on-chain catalog)
Each game is a value tree stored on-chain and validated by the contract when it was sealed — the edge under optimal play is enforced inside a fixed band, so no game referenced here can be unfair in either direction. The payouts above were walked from these exact trees, reconstructed from the chain's packed words.