Browse docs
Fair play
The verifier replays a completed draw from its published record.
- CommitBefore entries open
Publish the secret seed’s commitment hash.
- RevealAfter the draw
Publish the seed and the frozen eligible entry list.
- VerifyCheck a completed round
Recompute the seed commitment, manifest hash, and selected position.
The eligible entry list is frozen before the draw. The animation displays the result.
A round publishes a commitment before revealing its secret. Once the eligible entries are fixed, the server computes the winner and publishes the inputs needed to reproduce that result. The game animation displays that result.
What you can verify
On Check a result, load a completed round or paste its verification JSON. The record’s algorithm field identifies which of two methods to replay. Both produce three checks.
Commit reveal with block entropy
For fomo-commit-reveal-v1, the verifier checks:
- Commit reveal. Hashing the revealed secret with SHA-256 reproduces the commitment.
- Draw seed. Hashing the secret and recorded block hash reproduces the derived seed. Records without a block hash use the published
noblockfallback. - Winner draw. Hashing the derived seed, round number and ordered player list reproduces the draw hash, selected position and winning player.
Seed and entry-list manifest
For fomospin-draw-v1, the verifier checks:
- Seed commitment. The revealed seed reproduces its commitment.
- Entry-list hash. The frozen entry list reproduces the published manifest hash.
- Selected position. Replaying HMAC-SHA-256 with the seed and manifest selects the recorded entry.
What a passing result means
A pass means the result can be reproduced from the supplied record. It does not independently establish that a commitment was published before entries opened, or that a supplied block hash belongs to the canonical chain. Those claims require separate publication and chain evidence.
The verifier also does not prove that eligibility decisions were correct or that a payout completed. Check the round’s entry and payout records, including its explorer transaction link, for those details.