Our 5-Point Audit Methodology.
What is a ProvablyFair.org certification?
Provably fair has no industry-wide standard. Casinos define it themselves, typically limited to verifiable randomness — but randomness alone doesn't prove a game is fair. A provably fair system must be transparent end-to-end: the commitment scheme, the RNG algorithm, the game logic, the payout structure, and the advertised RTP must all be independently verifiable.
ProvablyFair.org defines and enforces that standard.
ProvablyFair.org defines and enforces that standard. We place thousands of real bets, independently recompute every outcome using the casino's published algorithm, and verify that the results match exactly. We then run tens of millions of simulated rounds to confirm the odds are what the casino says they are.
Every audit answers five questions
Can the casino change your outcome after you bet?
We verify the cryptographic commitment that locks the result before you play.
Is the randomness real?
We independently implement the algorithm and prove your seed genuinely affects every outcome.
Does the game follow its own rules?
We recompute every bet in our dataset. 100% must match. Zero tolerance.
Is the house edge honest?
We mathematically prove the RTP from first principles, never trusting the casino's own numbers.
Does the system hold up under pressure?
We test the game's API for integrity issues that could compromise fairness.
We also provide an independent verification tool — so you can verify any bet yourself, built from the same code we used to audit the game, not controlled by the casino.
Every finding, every dataset, and every line of verification code is published in an open-source repository.
You don't have to trust us. You can check our work.
Each audit section maps to the casino's outcome pipeline
Outcome Generation - casino
Seed Inputs
Server + client + nonce
RNG algorithm
Deterministic computation
Deterministic Outcome
Computed from seeds
Payout Applied
Multiplier × bet amount
Live Result Recorded
Player sees outcome
Independent Validation - Provablyfair.org
Live Bets Captured
Real-money data collected
Seed & Determinism Check
Section 1
RNG & Entropy Validation
Section 2
Verifier Parity
Section 3
RTP
Section 4
Integrity
Section 5
Framework structure
Audit Overview
ProvablyFair.org evaluates the fairness of provably fair casino games through a structured, evidence-based audit framework. Every audit follows the same methodology regardless of game type, casino, or seed architecture.
The framework is designed around a single principle: claims require proof, and proof requires evidence that anyone can independently verify.
The framework consists of five scored audit sections (S1-S5) and two transparency sections (S6-S7). Sections 1-3 are cryptographic foundations: a single failure means the game cannot be provably fair by definition. Sections 4-5 test the game logic and implementation integrity. Sections 6-7 ensure the audit itself is player-accessible and fully reproducible. They are not scored but are required for certification.
S1
Seed & Determinism
Cryptographic
S2
RNG & Entropy
Cryptographic
S3
Verifier Parity
Cryptographic
S4
RTP & Payout
Analytical
S5
Fairness Integrity
Integrity
S6
Player Verification
Transparency
S7
Reproducibility
Transparency
A typical per-game audit involves thousands of real-money bets placed and individually verified, tens of millions of simulated rounds for statistical validation, and a purpose-built verification codebase written independently from the casino's own code.
Every audit produces a public, open-source repository. Anyone can clone it, run the test suite, and independently verify every finding. The repo is the credential.
Scope
Current Scope & Audit Boundaries
This framework is optimized for provably fair games that use commit-reveal seed architectures - including single-player games (eg. Dice, Plinko, Keno, Mines, Limbo, Wheel) and shared-outcome games (eg. Crash, Roulette). These represent the vast majority of provably fair games in the crypto casino market.
Entropy models verified
- Client Seed + Server Seed
- Hash Chain
- Server Seed + External Beacon
HMAC-SHA256 & SHA-256 architectures validated
Examples of games covered
Any provably fair game is eligible
The framework supports multiple entropy models: client seed + server seed, hash chain, and server seed + external beacon (e.g. drand, block hash). Each model is verified using the same S1-S5 structure with model-specific adaptations documented in the Operator Trust Analysis.
The framework has been validated on HMAC-SHA256 commit-reveal architectures and plain SHA-256 architectures. Additional architectural patterns are validated as the client base expands.
What every audit operates on
Operator's game logic & RNG specification
Player-facing API responses & published seeds
Bet histories & live game behaviour
Independent implementation & verification
Every test in this framework operates on the operator's game logic, player-facing API responses, published seeds, bet histories, and live game behaviour. Operators provide their game algorithm and RNG specification as part of the audit engagement. ProvablyFair.org independently implements the algorithm, collects live data, and verifies every outcome.
This framework is purpose-built for provably fair game verification. Provably fair systems are designed so that game outcomes can be independently verified - the cryptographic inputs are visible by design. The methodology combines source-level review of the operator's game logic with independent implementation, live data collection, and cryptographic verification to produce independently verifiable proof of every claim tested.
Source-level review of the operator's game logic is included in every audit. Where operators additionally grant ongoing repository access, the audit scope extends to continuous code monitoring (see Assurance Tiers below).
Not in scope
This audit covers the fairness and cryptographic integrity of provably fair game outcomes.
It does not cover:
Platform & Infrastructure Security
Fund custody
Withdrawal processing
Licensing or regulatory compliance
Responsible gambling practices
Anti-money laundering controls
Fairness of non-provably fair games
Audit Sections
Technical Methodology
Each layer is independently verified. Click to expand the full methodology for each section.
Governance & Process
Standards & Lifecycle
Verdict criteria, operator trust analysis, certification lifecycle, and independence commitments.
ProvablyFair.org Audit Framework
v1.0 · Published June 2026
This methodology is version-controlled and publicly published. All updates are documented.
- Open Standards
- Independent Audits
- Publicly Verifiable.