Skip to content
Provably fair

Fair by design.

Every result on DrCoconut is a pure function of a server seed, your client seed and a nonce. The server commits to its seed before you play and reveals it afterwards, so you can recompute any round yourself.

01

The server commits

A 32-byte server seed is generated at random and kept secret. Only its SHA-256 hash is published, and you can see that hash before you place a single bet.

02

You contribute

Your client seed is mixed into the same calculation. Because you choose it and can change it whenever you like, the server cannot have picked its seed to suit yours.

03

The nonce advances

Each round increments a counter, so the same seed pair produces a different, fixed result every round rather than repeating one.

04

The seed is revealed

Rotating your seed pair publishes the old server seed. Hash it yourself: if it matches what was published beforehand, the seed cannot have been swapped after the fact.

Your seeds

Loading your seeds…

Verifier
Recompute a round
Game
Server seed
Server seed hashOptional - proves the commitment
Client seed
Nonce
Edge (bps)
Game options (JSON)e.g. {"side":"HEADS"}
Moves (JSON array)Multi-step games only
Result

Nothing verified yet

Paste the seeds from any settled round in your history.

Doing it yourself

The verifier above is a convenience, not the authority. The algorithm is short enough to reimplement in any language: takeHMAC-SHA256(serverSeed, `clientSeed:nonce:cursor`)and read the digest four bytes at a time, each group giving a uniform float in [0, 1) asb0/256 + b1/256² + b2/256³ + b3/256⁴. Games consume that stream in a documented order.

Provably fair | DrCoconut