Provably fair n=0

Every round's outcome is determined by HMAC-SHA256(serverSeed, clientSeed:nonce). The server seed is committed (hashed and shown) before each round and revealed when you rotate.

How verification works
  1. Before each round, the server seed is hashed (SHA-256) and shown — that's a binding commitment.
  2. The outcome of every round is HMAC-SHA256(serverSeed, clientSeed:nonce) interpreted per game rules.
  3. When you rotate, the previous server seed is revealed. Hash it yourself — it must match the prior commitment. Then replay any past nonce to verify the outcome.

Free practice · no real money

Crash

Balance1,000
Round0
Recent multipliers
1.00× Set your bet and launch
Potential win 100.00

Want to play crash for real where it is legal? Reviewed casinos →

Practice only. No deposits or real cash.

How crash works

A multiplier starts at 1.00× and grows exponentially. At a random point it crashes. Cash out before to win bet × multiplier; crash first and you lose the bet.

This sim uses ~1% house edge. P(crash ≤ X) = 1 − 0.99/X. No system beats this distribution — patterns are an illusion.

Crash point is pre-determined per round by a seeded PRNG with crypto entropy.