Every crash point is fixed before takeoff from a seed whose hash you see first. Each seed chain is published before its client seed exists, and that client seed is a Bitcoin block nobody controls. Check any finished round yourself.
- Seed chain commitment
- Client seed
- This round's seed hash (shown before takeoff)
- Last round
- Next chain (already committed)
Every published commitment (JSON)
How it works
hash = HMAC_SHA256(serverSeed, clientSeed)
X = int(hash[0:13], 16) / 2^52
crash = max(1.00, floor(100·(1−edge)/(1−X)) / 100)
sha256(serverSeed) must equal the hash shown
before takeoff, and must equal the seed revealed
for the previous round of the same chain.
The first round of a chain hashes to the chain's
commitment, which was published before the
Bitcoin block that became its client seed was
mined, so the house could not pick a chain that
favours it.