Provably fair

Every flip is decided before you bet, and you can check the math yourself afterwards. The site can’t change the result once you’ve seen the commitment.

Commit → reveal

1. 1
   CommitBefore you bet, the server rolls a secret 32-byte server seed and shows you only its SHA-256 hash. That hash is a locked box, it can’t change the seed afterwards.
2. 2
   Your seedYou get a random client seed you can keep or edit, plus a nonce that counts up every round.
3. 3
   RevealAfter the flip resolves, the server reveals the seed. You confirm its hash matches the box you were shown, then reproduce the outcome exactly.

The formula

outcome = HMAC_SHA256(key = serverSeed, msg = clientSeed + ":" + nonce)
value   = first 4 bytes of outcome, as a big-endian uint32
win     = value < floor(2^32 * winChance)

Current win chance: 45%. On a double-or-nothing payout that’s a house edge of 10%. Every round you play shows a “verify” panel with the seed, hash, client seed, nonce, and a copy-paste snippet to check it yourself.