Scadium

Provably fair

Every round on Scadium is cryptographically verifiable. Here's how it works — and how you can reproduce any result yourself.

How it works

1. Commit. Before each round, the server generates a random serverSeed and publishes sha256(serverSeed) publicly. You can see the commitment before placing your bet.
2. Mix. You (optionally) provide a clientSeed. The round uses a nonce that increments per bet.
3. Reveal. After the round ends, we reveal the serverSeed. You can verify that sha256(serverSeed) matches the earlier commitment and that the result was computed from these inputs and nothing else.
4. Verify. Paste the seeds into the verifier below — or hit “Verify this round” on any game — and reproduce the exact result locally in your browser. Nothing is sent back to the server.

My seeds

Connect your wallet to view and control your provably-fair seeds.

Crash formula

hash = HMAC-SHA256(serverSeed, `${clientSeed}:${nonce}`)
h = parseInt(hash.slice(0, 13), 16)

if (h % 20 === 0) return 1.00  // instant bust

e = 2^52
return floor((100 * e - h) / (e - h)) / 100

RTP 95%, platform edge 5%. Identical formula used by the backend round engine and the in-browser verifier — both import from @scadium/fair.

Verifier

Game
Server seed (revealed after round)
Client seed
Nonce
Server seed hash (optional — verifies the commitment)