The label provably fair mystery box sites carry now appears on almost every one of them, but the phrase only means something if you can actually check it. This page ranks them by one thing: whether you can take a real result and independently confirm it from published inputs. Not by bonuses or star ratings. Of the 17 platforms we track, 9 pass that test and 8 do not.
We are not an operator and do not rank boxes by their prizes. We score each site on whether its fairness claim survives a real check, using our own verifier.
How we ranked these
What a place on this list requires
A site earns its tier from what it publishes and whether our own implementation reproduces a real outcome from it. Nothing else moves a site up or down: not the size of its catalogue, not its review score, not whether it pays an affiliate commission.
There are three tiers, and the boundary between them is precise:
- Reproduced. The published algorithm is complete enough that our implementation returns the same number the operator's own system did, on a real set of seeds. This is the only tier where the fairness claim has actually been tested rather than read.
- Published, not yet confirmed. The site documents a formula we can implement, but we do not yet have a real result to check it against, or one step of the conversion is missing.
- Not checkable. The site uses the phrase but does not publish the formula, the seeds, or both. Nothing about the claim can be tested from outside the company.
What this ranking deliberately ignores
Prize value, deposit bonuses, shipping speed and star ratings are all real considerations and none of them move a site between tiers. A site can be generous and unverifiable, or verifiable and disappointing, and mixing those judgements is exactly how "provably fair" got reduced to a badge. Once the tier is set, though, what a site actually sells decides which verifiable option fits you, so each entry below says what the site is as well as what it publishes.
The comparison at a glance
The registry behind this page covers 11 box and card platforms, listed here with the algorithm each one publishes. The 6 CS2 case platforms we also cover sit on the algorithms by platform page.
| # | Site | Hash it publishes | Outcome | Reproduced by us |
|---|---|---|---|---|
| 1 | Ripster.gg | HMAC-SHA256 | Roll, 0 to 100 | Yes, 52.5587 |
| 2 | JemLit | HMAC-SHA512/256 | Roll, 0 to 100 at 4 decimals | Yes, 22.0231 |
| 3 | PackDraw | SHA-512 | Ticket, 1 to 1,000,000 | Yes, 268,760 and 122,022 |
| 4 | HypeDrop | HMAC-SHA256, combined seed as key | Roll, scaled to 99,999,999 | Yes, 19,569,993 |
| 5 | LuxDrop | SHA-512 | Ticket range per item | Implemented, unconfirmed |
| 6 | Cases.gg | seedrandom v3.0.5 PRNG | Per-item selection | Implemented, unconfirmed |
| 7 | Boxed.gg | HMAC-SHA512 | Ticket, 0 to 999,999 | No, conversion step unpublished |
| 8 | Pullbox.gg | HMAC-SHA512, stated only | Not published | No, code is behind a login |
| 9 | RillaBox | SHA-256 commitment only | Stated as 0 to 100 at 4 decimals | No, no formula published |
| 10 | ArenaClub | None published | Not published | No, no seeds or hashes exist |
| 11 | Supabox | None published | Not published | No, no algorithm published |
Read the last column first. Four of eleven, and the four are not the four with the largest marketing budgets.
Reproduced against a real result
What earns a place here
Every site in this group has been checked against a real outcome, not just read. Across the full registry that group also includes the CS2 platforms: HypeDrop at 19,569,993, CSGORoll at 90,455,280, CSGOEmpire at 56,288, JemLit at 22.0231, Skin.club at 66,748, Clash.gg at 18,875.
The sites
The four sites in this tier publish their method clearly enough that a real result can be recomputed end to end. They also sell four quite different things, which is worth knowing before verifiability narrows your choice.
Ripster.gg is the trading card option: Pokemon, One Piece, sports cards and Disney Lorcana, with boxes observed from $2.02 up to $623.69 and shelves arranged by what you are chasing rather than by brand, from Holy Grails down to character-farm boxes. Its fairness page publishes the full algorithm with copy-paste verifier code and its own in-browser check, and it cross-checks against that verifier at roll 52.5587. Its public track record is still building the way it does for any newer site, but on verifiability it qualifies outright.
JemLit sells consumer goods rather than cards, with boxes named for their contents, from Budget PS5 at $4.99 up to 10% Rolex at $823.75, and it ships to Europe, the US and parts of Asia, Africa and South America. On fairness it is the cleanest example on this page: sample verification code, per-item win ranges, and one thing no other site here offers, a numbered worked example. A published set of seeds and the exact roll they produce, 22.0231, lets you confirm your understanding before trusting it on a real result. Your seeds are reachable through its Fairness popup. If you want one site to learn verification on, this is it.
PackDraw runs Pokemon singles with a luxury tier above them, packs at $1.00 to $15.00 and a top rail reaching watches and supercars, paying out as a shipped item or an instant crypto withdrawal. It publishes something rarer than a description of its method: the working code its site runs. One practical detail: its commitment fingerprint is 128 characters rather than the more common 64, so save the whole thing. Running its published code independently reproduces tickets 268,760 and 122,022, and your seeds sit in your pack purchase history. Jackpot battles use a different scheme that is implemented but not yet confirmed against a real result.
HypeDrop has the deepest card catalogue in this tier, nine categories including sealed booster boxes that nothing else here stocks, with boxes from $1.45 to $773.73. It publishes a specific method for each of its game modes and exposes all three inputs you need. One warning matters more than the rest: its unboxing and battle modes compute results on scales that differ by exactly one unit, so a check run in the wrong mode returns a plausible number that is simply wrong. All three of its published values reproduce: 19,569,993 unboxing, 35,864,249 battle, 88.02 upgrade. The HypeDrop verifier handles the mode selection for you, and what its reviewers report about account restrictions and payouts sits in is HypeDrop legit.
Published, but not yet confirmed
LuxDrop, Boxed.gg and Cases.gg give you most of what you need, but one step takes extra effort or is not yet nailed down against a real outcome.
LuxDrop publishes runnable code directly on its fairness page, using a straightforward SHA-512 over serverSeed:clientSeed:nonce, then mapping the result to a ticket range per item. Note the seed order: it is the reverse of PackDraw's, which uses the same hash function and the same separator. Two sites, one hash, one separator, opposite orders, completely unrelated results. Seeds are visible and there is an on-page verify button. It has a smaller audience than the big names, but on pure checkability it is one of the easiest to confirm once a real result is available.
Boxed.gg is the strongest TCG-focused option on documentation, covering Pokemon, Magic and Yu-Gi-Oh, with boxes running roughly $1.97 to $30.51 on its Gems currency and a marketplace where a pull can be traded for a specific graded card rather than only shipped or sold back. On fairness it documents its inputs, reveals the server seed every 24 hours, and shows a drop table plus a per-item provably fair range for every box, with tickets running 0 to 999,999. The one gap is the final step that turns the computed value into a ticket, which is not published, and it is the single piece an outsider needs to close the loop.
Cases.gg sells streetwear, luxury goods and tech, naming Nike, Louis Vuitton and Supreme in its own copy, with boxes observed from $10.21 to $52.05. It builds verification controls into its own fairness page, exposes seeds, and auto-rotates the server seed every 1,000 opens. Rather than hashing your inputs it feeds them to a seeded random number generator, seedrandom v3.0.5, which means the exact library version is part of the specification: a different version produces a number that is no less random and completely wrong. You can check a result on-site and its inputs are reachable, though the conversion is less cleanly documented than the sites above.
Claims fairness, but you cannot check it today
RillaBox has a fairness page and describes a hashed-result scheme with a SHA-256 commitment and a result between 0 and 100 to 4 decimal places, but it publishes no formula, no combination string and no nonce, and it does not expose the seeds needed to reproduce a result. That means the claim cannot currently be independently verified, whatever else is true about the site. This is not an accusation, it is a plain statement of what the check can and cannot reach: without visible seeds, there is nothing to recompute. If it exposes seeds later, that changes.
Pullbox.gg states that it uses HMAC-SHA512 over a server seed, client seed, salt and nonce, which is more than several sites offer. The exact order, the separators and the conversion, the three details that decide the answer, live in a code sandbox behind its login-gated Verify button. A formula an outsider cannot read is not a published formula.
ArenaClub is the clearest case on the list, because it does not claim otherwise. There are no seeds, no hashes and no verification tool. The only randomness statement we could find is a reference to a Fisher-Yates shuffle in a marketing blog post, which is a description of a shuffling algorithm rather than a commitment scheme, and nothing about it can be independently checked.
Supabox publishes no algorithm at all, and the descriptions that are accessible are partly self-contradictory, referring both to a seed commitment and to server-side random bytes. Those are two different models and only one of them is checkable.
The same logic rules out any site that publishes only pull rates with no seed-commit scheme. A published odds table is useful, but it is not the same as being able to prove a specific result.
Where to find your seeds on each site
Knowing a site is verifiable is only useful if you can find the three values. The panel has a different name on every platform, and the revealed server seed almost never appears until you do something to trigger it.
| Site | Where the commitment sits | How the real seed is revealed |
|---|---|---|
| Ripster.gg | Provably Fair modal, before you roll | Same modal after the roll. Changing your client seed in Account Settings reveals it for all past rolls |
| PackDraw | Your account profile, before purchase | Exposed once the purchase completes. Per-open seeds are in your pack purchase history |
| HypeDrop | Shown before the unbox, with the client seed editable | Shown after. Battle seeds are in the Provably Fair modal on the Battle Duel page |
| JemLit | The Fairness popup | The same popup, after rotation |
| Boxed.gg | Shown hashed before you open | Revealed every 24 hours. Per-item ranges are under More Info on the drop table |
| Cases.gg | Its own fairness page | The server seed rotates automatically every 1,000 opens |
The step almost everyone misses
Rotation. On most of these sites the real server seed stays hidden until you retire it, which means saving the hashed value before you play and rotating afterward are both part of the same check. Skip the first and you have nothing to compare against. Skip the second and there is nothing to compare.
Boxed.gg and Cases.gg are the exceptions, rotating on a schedule rather than on demand: every 24 hours and every 1,000 opens. On those two you wait rather than act, but the sequence is otherwise identical.
How to check any of these yourself
Wherever a site exposes seeds, the check is the same, and you can do it right here. The verifier below runs entirely on your own device.
- Before you open, save the hashed server seed. This is the commitment.
- Note your client seed and the play count for the pull you care about.
- Rotate your seed so the site reveals the real server seed.
- Paste the values into the verifier. It recomputes the outcome and confirms the revealed seed matches the hash you saved.
Step 1Where did you play?
Using Ripster box / upgrade: HMAC-SHA256 over clientSeed:noncedetails
HMAC-SHA256 keyed with the server seed over clientSeed:nonce. The first 8 hex characters become a 32-bit integer, divided by 2^32 and multiplied by 100 for a roll in [0, 100). Items are sorted by item ID and selected by cumulative probability: the first item whose cumulative probability is at least the roll wins.
Where to find your numbers on Ripster.gg:
- Before rolling, copy the Server Seed Hash from the Provably Fair modal (also recorded per roll in Account History).
- After the roll, open the Provably Fair modal to copy the Server Seed, Client Seed and Nonce.
- Change your Client Seed anytime in Account Settings; doing so reveals the current Server Seed so all past rolls become verifiable.
Source: Ripster.gg's own fairness page
Step 2Paste your numbers
Runs entirely on your device via your browser's built-in cryptography. Don't take our word for it: open DevTools → Network, click the button, and watch: zero requests.
Runs entirely in your browser. Nothing you paste is sent anywhere.
Pick the right platform before you paste. The outcome ranges above are not interchangeable, and a verifier set to the wrong site returns a plausible number that is simply wrong. If you are new to what these inputs are, the what is provably fair guide walks through the whole flow, and what is a server seed covers the single most important input in detail.
What this list does not tell you
The bottom line
If your priority is being able to check what you get, 4 of the 11 box and card platforms we cover clear the bar today: JemLit, PackDraw, HypeDrop and Ripster.gg all publish enough that our implementation reproduces a real outcome from their own inputs. LuxDrop, Boxed.gg and Cases.gg publish a formula we can implement but are not yet confirmed end to end. RillaBox, Pullbox.gg, ArenaClub and Supabox cannot be checked from outside at all, whatever their fairness pages say.
Whichever you use, do not take the label on trust. Rotate your seeds, paste a real result into the verifier, and watch it check out for yourself. If any part of this has stopped being fun, take a break and get support.