Provably fair algorithms by platform
No two of these platforms compute an outcome the same way. The hash function, the order the seeds are joined in, the separator, how much of the digest is read and the final outcome range all differ, which is why a verifier built for one site usually returns a wrong answer on another. Every row below is taken from the operator's own published material and drives the verifier on this site.
Verified: our implementation reproduces a real result
9platforms. "Verified" means we ran the operator's own published algorithm and reproduced an actual outcome, not that we trust the documentation.
| Platform | Hash | Seed format | Commitment | Source |
|---|---|---|---|---|
| Ripster.gg | HMAC-SHA256 | clientSeed:nonce | SHA-256 | operator page |
| PackDraw | SHA-512 | clientSeed:serverSeed:nonce | SHA-512 | operator page |
| HypeDrop | HMAC-SHA256 (combined seed as key, empty message) | key = GAME-serverSeed-clientSeed-nonce | SHA-256 | operator page |
| CSGORoll | HMAC-SHA256 (combined seed as key, empty message) | key = GAME-serverSeed-clientSeed-nonce | SHA-256 | operator page |
| JemLit | HMAC-SHA512/256 | clientSeed-nonce | SHA-512 | operator page |
| Skin.club | HMAC-SHA512 (inverted key/message) | key = clientSeed-nonce, message = serverSeed | SHA-256 (salt-keyed HMAC) | operator page |
| CSGOEmpire | HMAC-SHA256 | key = serverSeed, message = publicSeed-round | SHA-256 | operator page |
| Clash.gg | seedrandom v3.0.5 PRNG | serverSeed:clientSeed:round | SHA-256 | operator page |
| RustClash | seedrandom v3.0.5 PRNG | serverSeed:clientSeed:round | SHA-256 | operator page |
Not verifiable today, and why
8 platforms we cover but cannot confirm. This half of the table is the part most sites leave out, and it is the more useful half if you are deciding where to play.
| Platform | Status | What is missing |
|---|---|---|
| Cases.gg | Implemented, unconfirmed | The operator does not publish enough for an outsider to reproduce a result. |
| LuxDrop | Implemented, unconfirmed | The operator does not publish enough for an outsider to reproduce a result. |
| DatDrop | Implemented, unconfirmed | Battles and Battle Royale draw from random.org beacons and are not covered by this tool. The seed-promise check needs both the revealed server seed and the secret salt. |
| Pullbox.gg | Not fully published | Re-read 2026-10-04: /provably-fair now lands on /how-it-works#provably-fair. It states HMAC-SHA512 keyed with the server seed over client seed, salt and nonce, a SHA-256 commitment shown on every box page, and 'rejection sampling' to turn the signature into a slot on the box's weighted item table. It still publishes no code, byte order, separators or rejection threshold, so the adapter stays blocked. |
| Boxed.gg | Not fully published | Re-checked 2026-10-04: the help article (updated 2026-09-18) now says provably fair covers box opens, Box Battles, vending machines, Forge boxes and Hop or Drop, verified from the account's game history; the sandbox code is unchanged and still fails to run for a first-time visitor. Re-extracted 2026-09-20: the published sandbox carries the whole pipeline, not just the hash. HMAC-SHA512 over client seed, salt and nonce with no separators, then 5-hex-character windows scanned until the value falls under 1,000,000. Its commitment check reproduces against Boxed.gg's own published sample. What is still unpublished is the per-item ticket ranges, so a result is roll-reproducible but not item-verifiable from public material. Adapter is unblocked and buildable; it needs one real result to confirm. |
| Supabox | Not published | No published algorithm; accessible descriptions were partly self-contradictory (seed commit vs crypto.randomBytes). As of 2026-10-04 supabox.com redirects to cravin.com, whose homepage announces 'Winnly Is Joining Cravin' and 'No luck. All skill.'; what the redirect means for Supabox is not stated. |
| RillaBox | Cannot be verified | Box openings: a five-step narrative (SHA-256 commitment, 0-100 result at 4 decimals) but no formula, no combination string, no nonce, and no public seed access, so they cannot be independently verified as implemented. Re-read 2026-10-04: fairness is now split per game, the old /provable-fairness URL lands on the Crash page, and Crash alone publishes runnable Python (BLAKE2b hash chain with a Bitcoin-block global seed). Crash is not a box opening and is not covered here. |
| ArenaClub | Cannot be verified | Not provably fair: no seeds, no hashes, no verification tool. The only randomness claim is a Fisher-Yates shuffle statement in a marketing blog post, which cannot be independently verified. |
Common questions
Do all provably fair sites use the same algorithm?
No, and the differences are large enough that a verifier built for one platform usually returns a wrong answer on another. Across the platforms on this page the hash function, the order the seeds are joined in, the separator, how much of the digest is used and the final outcome range all differ.
Why do some platforms show as not verified?
Because they have not published enough to reproduce a result, or because we have implemented what they publish but have not yet confirmed it against a real outcome. We only mark a game verified once our implementation reproduces an actual published or operator-produced result.
What does the seed format column mean?
It is the exact string a platform hashes, including the order of the values and the separator between them. Hashing is order-sensitive, so clientSeed:serverSeed:nonce and serverSeed:clientSeed:nonce produce completely unrelated results. Seed-format mismatches are the most common cause of a failed check.
Does a verified algorithm mean a site is safe?
No. Verified means a specific outcome can be recomputed from values committed before play, and that ours reproduces it. It says nothing about whether withdrawals are honoured, whether the odds are generous, or whether the business is sound.
The honest fine print
A verified algorithm proves a specific outcome came from values fixed before play. It does not prove an operator will honour a withdrawal, that its odds are generous, or anything else about the business: how we verify and what it means.