Scope
Current Scope & Audit Boundaries
This framework is optimized for provably fair games that use commit-reveal seed architectures — single-player games (Dice, Plinko, Keno, Limbo, Wheel), multi-step games (Mines, Blackjack, Hi-Lo, Tower-style), slots and video poker, and shared-outcome games (Crash, Roulette). These represent the vast majority of provably fair games in the crypto casino market.
Entropy Models Verified
- Client Seed + Server Seed
- Hash Chain
- Server Seed + External Beacon
HMAC-SHA256 & SHA-256 architectures validated
Examples of Games Covered
Any provably fair game is eligible
The framework supports multiple entropy models: client seed + server seed, hash chain, and server seed + external beacon (e.g. drand, block hash). Each model is verified using the same S1–S5 structure with model-specific adaptations documented in the Operator Trust Analysis.
The framework has been validated on HMAC-SHA256 commit-reveal architectures and plain SHA-256 architectures. Additional architectural patterns are validated as the client base expands.
What Every Audit Operates On
- Operator’s game logic & RNG specification
- Player-facing API responses, published seeds & the casino’s own verifier code
- Bet histories & live game behaviour
- Independent implementation & verification
Every test in this framework operates on the operator’s game logic, player-facing API responses, published seeds, bet histories, and live game behaviour. Operators provide their game algorithm and RNG specification as part of the audit engagement. ProvablyFair.org implements the algorithm independently, collects live data, and verifies every outcome. We also run the casino’s own published verification code against the captured bets: it must agree with our implementation and with the live results.
This framework is purpose-built for provably fair game verification. Provably fair systems are designed so that game outcomes can be independently verified — the cryptographic inputs are visible by design. The methodology combines review of the operator’s published game code with independent implementation, live data collection, and cryptographic verification to produce independently verifiable proof of every claim tested.
Not in scope
This audit covers the fairness and cryptographic integrity of provably fair game outcomes. It does not cover:
- Platform & Infrastructure Security
- Fund custody
- Withdrawal processing
- Licensing or regulatory compliance
- Responsible gambling practices
- Anti-money laundering controls
- Rakeback, rebates and promotions (RTP checks use the game’s own return)
- Fairness of non-provably fair games