Pepeball draw #2: provably fair

Loading…

Your browser's check (WebCrypto, not the site's own verifier): …

How it works: when a draw's sales open, the site publishes sha256(server_seed). When sales close it publishes every ticket (number list, no owners) and tickets_digest = sha256 of the lines id:w1,w2,w3,w4:pb - so the result depends on every ticket bought, and nobody (the site included) knows it while tickets can still be bought. The numbers come from HMAC-SHA256(server_seed, "tickets_digest:draw:counter") read as big-endian 32-bit words (rejection sampling): a partial Fisher-Yates over 1-30 picks the four numbers, then the Pepe Ball is 1 + the next draw below 10. After the draw the seed is revealed, so anyone can check all three steps.