OriginalWalk
Verify Results
Enter the seeds and nonce shown under "Provably Fair" in the app's Settings to calculate a game's result. Everything is calculated on this page (on your device), and nothing you enter is sent anywhere.
Input
Result
—
Enter a Server Seed and a Client Seed.
How It's Calculated
- HMAC-SHA256 is used to make 32 bytes, with the Server Seed as the key and "Client Seed:nonce:round" as the message (the round starts at 0). Only Limbo, Dice, and Roulette use a single random number, and their message is "Client Seed:nonce".
- The bytes are split into groups of 4, and byte 1 ÷ 256 + byte 2 ÷ 256² + byte 3 ÷ 256³ + byte 4 ÷ 256⁴ gives a number that is at least 0 and less than 1 (8 numbers per round; when more are needed, the round goes up by 1).
- Each game then uses these numbers to decide the result as follows.
- Limbo: 0.99 ÷ number (rounded down to 2 decimal places; 1.00–1,000,000)
- Dice: number × 10,001, rounded down, then divided by 100 (0.00–100.00)
- Roulette: number × 37, rounded down (0–36)
- Mines and Keno: From the list of tile numbers, tiles are taken out one at a time at position number × tiles remaining (rounded down, counting from 0)
- Tower: In each row, the tile at position number × tiles remaining becomes a skull
- Plinko: In each row, the ball goes right if the number is 0.5 or more, and left if it is less
- Chicken: In each lane, the chicken is lost there if the number is less than that lane's chance of losing
- Coinflip: Gold if less than 0.5, Silver otherwise
- Baccarat, Blackjack, and Hilo: The card at number × 52, rounded down (in the order ♠A–♠K, ♥, ♦, ♣)
- Four Hands: Numbers 1–20 take cards one at a time from the 52-card deck (in the order ♠A–♠K, ♥, ♦, ♣) at position number × cards remaining, and lay them out in 4 rows × 5 columns. If number 21 is less than 0.00025, it's a Super Joker round. If number 22 is less than 0.0299, there is 1 Joker; if it is also less than 0.0299 × 0.25, there are 2, and so on (up to 16 in total and 4 per row; only 1 in a Super Joker round). Numbers 23–38 choose where the Jokers go, and number 39 chooses where the Super Joker goes. In a Super Joker round, the 20 cards are rearranged so that the sum of the 4 row multipliers is as high as possible
- Wheel: It stops on the segment at number 1 × number of segments, rounded down (counted clockwise from the pointer, starting at 0). The multiplier is that segment's multiplier for each risk
- Lollipop: The symbols on the 6 × 5 board are drawn one at a time, from the left column and from the top of each column, using number × total weight (the weights are the same as in the app; with Scatter Boost the Scatter weight changes, and each column can have at most 1 Scatter). For a Heart, the next number × 100 picks its multiplier. Clusters of 5 or more of the same candy connected up, down, left, or right are removed, the remaining symbols drop down in each column, and new symbols are drawn in the same order to fill the empty spaces (tumbles). When the tumbles end, if there is a win, it is multiplied by the sum of the Heart multipliers on the board. 3 Scatters give 10 Free Spins and 4 or more give 10 Super Free Spins, which are drawn next in the same order. The numbers are read one at a time in the order they are used
- Crash: Everyone watches the same round in this game. With the round hash as the Server Seed, "crash" as the Client Seed, and 0 as the nonce, the crash multiplier is calculated the same way as Limbo. The SHA-256 of each round hash is the previous round's hash (a hash chain), so you can trace it back to the last hash of the chain, which we published in advance
- Slide: Like Crash, everyone watches the same round, and it uses the same hash chain as Crash. With the round hash as the Server Seed, "slide" as the Client Seed, and 0 as the nonce, the multiplier of the card it stops on is calculated the same way as Limbo
The Server Seed is revealed when you use "Change Seed" in the app. While it's in use, only its hash (SHA-256) is shown.
Crash Hash Chain
3f948442dce3e14a997017677c76916dff37a05f54be3724c44fe1a0d1a227da
Repeatedly applying SHA-256 to any Crash round hash from October 2, 2026 to September 30, 2029 leads to this value. Slide round hashes come from the same chain.