Before betting opens each round shows SHA-256(server_seed). After the crash the seed is revealed. The crash point is computed only from that seed, the public client seed and the round number:
h = first 13 hex chars of HMAC-SHA256(key=server_seed, message=client_seed + ":" + round_id) (52 bits)
cents = floor((100 - edge) * 2^52 / (2^52 - h)), crash = clamp(cents, 100, cap*100) / 100
Newer rounds also commit, before betting opens, a drand quicknet beacon round number R published after betting closes. For them the message is client_seed + ":" + round_id + ":" + R + ":" + beacon_signature, and this page verifies the beacon's BLS12-381 signature in your browser (audited @noble/curves, self-hosted, pinned chain public key). The server itself only fetches the signature over HTTPS and does not verify it; if the beacon does not arrive in time the round is cancelled and all stakes are refunded.
edge and cap are stored per round. Limits: the client seed is a fixed public value (players cannot choose it), and the hash is only held by this server, so it proves the seed was not changed after betting if you saved the hash before the round ended.
Current round commitment:
| Round | Hash shown before round | Seed (revealed) | Edge% | Cap | Crash | Recomputed | Check |
|---|