Don't trust us. Verify.

Every crash point here was fixed before anyone bet, by a seed nobody could choose, and signed with the operator's post-quantum key. This page checks it all in your browser with the open-source Vantax verifier (WebAssembly). Nothing on this page asks the server whether a round was fair: it recomputes everything itself.

How it works

1. Commit. The operator generates a chain of a million round seeds, each the SHA-256 of the next, and publishes only the hash of the first (the terminal commitment), signed with ML-DSA-87.
2. Seed from Solana. Only after that, a future Solana slot is fixed. The hash of the first block at or after it becomes the client seed for every round. Nobody, the operator included, could know it when the seeds were committed.
3. Play. Each round draws 52 bits h from a ChaCha20 stream keyed by SHA-256(seed, client seed, round number). The crash point is (1 − edge) / (1 − h/2⁵²), floored to hundredths, with a 3% house edge. The server signs a receipt before the round runs.
4. Reveal. When a round crashes, its seed is published. SHA-256 of it is the previous round's seed, all the way back to the terminal commitment. So no seed could have been swapped.

This chain

Verify a round

Recent rounds

Verify offline

The verifier is open source: github.com/Vanta-Cybersecurity/Vantax. With the vantax CLI, save a round's receipt from /api/rounds/<round> and the operator_key from /api/fairness, then run vantax fairness verify --receipt receipt.json --operator-key operator.pub.json --seed <server_seed>. You can also paste a receipt into vantax-cybersecurity.com/verify.html.