Provably fair

At the start of each round the server generates a random server_seed (32 bytes) and publishes its SHA-256 hash as the server_seed_hash. The hash is locked in before any bet is placed — the server cannot change the seed without breaking the hash.

When the round ends, the server reveals server_seed, client_seed and nonce. Anyone can re-hash the seed and confirm it matches the pre-published commitment.

hmac     = HMAC_SHA256(key = server_seed,
                     msg = client_seed + ":" + nonce)
slice    = first 13 hex chars of hmac          // 52 bits
r        = int(slice) / 2^52                   // r ∈ [0, 1)
if r < 0.01:    crash = 1.00                   // 1% instant-crash band
else:           crash = floor((0.99 / (1 - r)) * 100) / 100

The 1% instant-crash band is the entire house edge. Above 1.00× the distribution is the classic Stake/Bustabit curve — long tails reach 100×, 1,000×, occasionally higher. Expected return on a bet held to multiplier m is exactly 0.99, regardless of m.

Open the Verify page, paste a finished round's seed + nonce, and the page recomputes the crash point in your browser. The result must match what the round actually crashed at.

Every past round is also linkable directly from your history and from the global recent-rounds rail on the game page.

• Min bet: 0.01 SOL
• Max bet: 10 SOL
• Max single payout: 1,000 SOL
• Per-round aggregate exposure cap: 5,000 SOL
• Multiplier ceiling: 100,000×

Personal limits and self-exclusion live in your limits page.