Provably fair
Every round is decided before you play it, by numbers you can recompute yourself. This page does the recomputing in your browser.
How it works
Before you bet, the house picks a server seed and publishes only its SHA-256 hash. It cannot change the seed afterwards without the hash failing to match.
You pick a client seed, which the house cannot see in advance, and a nonce counts your rounds. The three together produce the result:
HMAC-SHA256(serverSeed, clientSeed:nonce:cursor)Rotate your seeds and the old server seed is handed to you. From that moment every round it produced can be recomputed — below, or with any HMAC tool you trust more than ours.
Check a Crash round
Crash is one round for everybody, so it cannot use your own seeds. Each round has a seed of its own, derived from a secret committed at the start of the season:
roundSeed = HMAC-SHA256(seasonSecret, "crash:" + round)
crashPoint from HMAC-SHA256(roundSeed, "vexa-crash:" + round + ":0")SHA-256(roundSeed) is shown while bets are open; the seed itself is revealed at the crash. The season secret is published when the season ends.
Open a game once and your seeds appear here.
Check a round
A nonce with no round behind it means a bet was refused after its number was reserved — most often an insufficient balance. The gap is left visible on purpose.