Provably-fair proof

This page reproduces the winner computation from public inputs. You can recompute every step in your browser's DevTools — don't trust our math, verify it.

1. Pre-commit (server_seed_hash)

Published when the draw went live (2026-06-07T20:11:47.040Z).

32177b94e6e2eb54ed8fb814ecbcb7c7f8098a76db11f6c813b53043a6367e11

2. Reveal (server_seed)

Revealed after draw (2026-06-07T20:55:06.180Z).

2b013a987e25ce123fe495298883394077cbf0e64bb71116c8039f560fb2c2cc

Hash check: ✓ sha256(server_seed) === published hash

3. Client seed inputs (all sold eggs)

#	Wallet	Winner?
1	616Bvi...2NfJ
2	jY9fhY...Qqfr
3	33c5jK...gk7d
4	3GpPG9...HUfU
5	EBzNRZ...89ME
6	6E7prF...pbeF
7	61eXm2...i91V
8	C8SZFq...xYHU
9	3sYC2t...bJfX
10	Dtmfv1...xXuD	🎉
11	DEi9xf...ABUM
12	DDJUL2...Zihm
13	B1QTWc...dfQN
14	2Tr8qV...2EjT
15	DmqkGf...RcmT
16	382pDt...NnjZ
17	5ARbkq...rAtV
18	HFxrYs...KZyq
19	6KS8Fi...RpY2
20	LCthZL...KxCk
21	9pLzZf...k6z5
22	Hrtv5Q...1iHP
23	5if4DQ...o8Py
24	FUxpAy...QjgY
25	8k9miz...gU7k
26	4bHzE7...qxxk

4. Derived client_seed

client_seed = sha256(sorted by entry_number, joined as "N:wallet" with '|')

ff6a0ad10cbf5e40bebd0e70b555bad608c4a0f9087d911c36a9f984cc903953

5. External entropy (Bitcoin block)

Mixed into the HMAC input so the draw depends on a value the operator could not have known when the server seed was committed ( 2026-06-07T20:11:47.040Z). Any Bitcoin block mined after the commit works — we take the tip at draw time.

sourcemempool.spaceheight952,761hash00000000000000000001e53778877c043ec9b251834cc4f19f905615b3feec35block time2026-06-07T20:40:12.000Z

Cross-check on mempool.space or blockstream.info.

6. Winner computation

HMAC-SHA256(server_seed, "client_seed:lotto_id:source:height:hash"), first 16 hex chars, mod sold_count (26).

hmac = 73c4c87f3e435eb1bf42b5160f5251edffdf40efb1acfb210cc366249039f61f

Computed index: 9 → winning egg: #10

7. Independent verification

Show JS snippet (paste into DevTools)

const seed = "2b013a987e25ce123fe495298883394077cbf0e64bb71116c8039f560fb2c2cc";
const hashStr = "32177b94e6e2eb54ed8fb814ecbcb7c7f8098a76db11f6c813b53043a6367e11";
const clientSeed = "ff6a0ad10cbf5e40bebd0e70b555bad608c4a0f9087d911c36a9f984cc903953";
const lottoId = "902eb3ac-581c-4ebe-ae71-a1a47c6ca272";
const sold = 26;
const entropy = "mempool.space:952761:00000000000000000001e53778877c043ec9b251834cc4f19f905615b3feec35";

async function run() {
  const enc = new TextEncoder();
  const seedBytes = enc.encode(seed);
  const hashed = await crypto.subtle.digest("SHA-256", seedBytes);
  const recomputed = [...new Uint8Array(hashed)]
    .map((b) => b.toString(16).padStart(2, "0")).join("");
  console.log("hashOk:", recomputed === hashStr);

  const key = await crypto.subtle.importKey(
    "raw", seedBytes, { name: "HMAC", hash: "SHA-256" }, false, ["sign"]
  );
  const message = entropy
    ? clientSeed + ":" + lottoId + ":" + entropy
    : clientSeed + ":" + lottoId;
  const sig = await crypto.subtle.sign("HMAC", key, enc.encode(message));
  const hex = [...new Uint8Array(sig)]
    .map((b) => b.toString(16).padStart(2, "0")).join("");
  const idx = Number(BigInt("0x" + hex.slice(0, 16)) % BigInt(sold));
  console.log("hmac:", hex);
  console.log("winnerIndex:", idx);
}
run();