Provably Fair

“Provably fair” means you can check two things about every pull yourself: that the result was fixed before you opened, and that it came from your own input as well as ours.

How a pull works

1. Before you open. Your account has a chain of server seeds made in advance. Before every pull you are shown the hash of the seed that will be used — a fingerprint that locks the seed in.
2. When you open. Your browser makes a fresh client seed at the moment you click. The server seed and your client seed together give a number between 0 and 1 (the roll). The roll decides the price range, at the odds shown on the pack page, and the card you get.
3. After you open. We reveal the server seed. Anyone can now check it against the hash you saw before.

Check a pull yourself

1. The seed was not changed. Put the revealed server seed into any SHA-256 tool. The result must be exactly the hash you were shown before the pull.
2. The roll came from both seeds. HMAC-SHA256 with the server seed as the key and clientSeed:seed number as the message; take the first 13 hex digits and divide by 2⁵². The result must be the roll on your pull.

Tap Verify ✅ on any pull (after opening, on a card in your Vault, or on the Fairness page) and your phone does both checks for you.

Check it with CyberChef (no RIPVault code at all)

CyberChef is a free, independent tool that runs in your browser. In Verify → Advanced you'll find two ready-made CyberChef links for that pull:

1. SHA-256 of the revealed seed — the result must be exactly the hash you were shown before the pull.
2. HMAC-SHA256(seed, "clientSeed:seed number") → first 13 hex digits → ÷ 4,503,599,627,370,496 — the result must be the roll on your pull.

To do it by hand: open CyberChef, choose the SHA2 recipe (256) with your seed as hex input for step 1, and the HMAC recipe (SHA256, key = your seed) with clientSeed:seed number as input for step 2. Any other SHA-256 / HMAC-SHA256 tool gives the same results.

Your pulls

Log in and open Fairness from your account menu. You see your last 100 pulls with the seed hash shown before the pull, the revealed seed, your client seed, the seed number, the roll, the time, the algorithm version and the pool version.

Disputes

Which card a roll gives depends on the pack's pool for that pool version. We keep the full pool file of every pool version. If you ever question a pull, contact us and we will send you the pool file for that pull so you can check it.

Pack Battle and Pack Party pulls work the same way: every seat uses its own player's seeds, so each room pull appears on that player's Fairness page.