CRYPTographic draw integrity

Provably fair.
Verifiable by anyone.

The secret is committed before the draw. After settlement, it is revealed so the exact winning ticket can be independently reproduced.

01 · BEFORE DRAW

Seed commitment

A fresh 256-bit secret is generated. Only its SHA-256 commitment is published, preventing the seed from being changed after entries arrive.

02 · AT DRAW

Deterministic result

SHA-256 hashes the revealed seed, epoch, final ordered ticket manifest, and nonce into one immutable draw digest.

03 · AFTER DRAW

Independent verification

The seed and complete proof are revealed. Rejection sampling maps the digest to a ticket with zero modulo bias.

LIVE ROUND COMMITMENTLOCKED
Preparing SHA-256 commitment…Published before settlement · the hidden seed cannot change without invalidating this hash
LAST DRAW PROOFComplete public verification record
The first proof appears here after this round settles.
DRAW FORMULASHA-256(serverSeed : epoch : orderedPlayerId:ticketCount manifest : nonce)

The resulting 256-bit integer selects one ticket from the exact final ticket count. Values outside the largest evenly divisible range are re-hashed with the next nonce, eliminating modulo bias.

15:00fixed epoch
1,000 $ZPOTone auto ticket
95 / 3 / 2winner · seed · burn