Stake Crash Verifier

Recompute the crash point your seed pair would produce on Stake from the server seed, client seed and nonce. Same HMAC-SHA256 stream the operator publishes, run in your browser.

Verify one betAnalyze a range

Casino

Game

Have a bet link? paste it; we open the right casino and game and tell you where the seeds are. Nothing is sent anywhere.

Examples

Verification Inputs

Server Seed unhashed, revealed after you rotate

Client Seed your chosen seed

Nonce bet counter, starts at 0

Server Seed Hash optional, the SHA-256 shown before you bet

Recomputes as you type. Nothing leaves your browser.

Crash Result

Paste the server seed and client seed from the bet. The crash result appears here as you type.

Algorithm sourceStake, Provably Fair: Game Eventschecked 2026-09-20

Read from the Wayback snapshot of 2025-07-19 (the live page challenges non-browser fetches); saved at research/casinos/stake/evidence/provably-fair-game-events-wayback-20250719.txt. Crash is verified on its per-seed curve only: live multiplayer Crash rounds come from a public hash chain, not your seed pair.

Stake fairness page Stake on GAMB·8

How Stake derives a Crash result

From float to result

This uses the same curve as Limbo on your seed pair. Live multiplayer Crash rounds are seeded from a public hash chain and a salt, not from an individual player's seeds, so this page verifies the per-seed math and cannot reproduce a specific live round.

What to compare

Use this to confirm the conversion. To verify a live round, use the operator's hash-chain verifier with the round hash from the bet.

Where the seeds are

Open the bet in your history on Stake. The client seed and nonce show immediately. The unhashed server seed appears only after you rotate your seed pair, so rotate first, then verify every bet from the old pair.

The byte stream, Stake

bytes = HMAC_SHA256(key = serverSeed, msg = clientSeed:nonce:round) // round starts at 0float = b0/256 + b1/256^2 + b2/256^3 + b3/256^4 // 4 bytes per floatresult = game event mapping applied to the floats, in order

Other Stake games

Stake Dice verifier Stake Limbo verifier Stake Mines verifier Stake Flip verifier Stake Plinko verifier Stake Hilo verifier Stake Keno verifier Stake Dragon Tower verifier Stake Wheel verifier Stake Roulette verifier Stake Diamonds verifier Stake.us Crash verifier Shuffle verifier Winna verifier

Keep what you worked out.

A free account saves your bankroll plans, sessions and the results you run here, on every device. No card, no upsell.

Create free account All tools

Frequently Asked Questions

Why does my live Crash round not match?

Because live Crash is a shared round. Its multiplier comes from a pre-committed hash chain published on BitcoinTalk, not from your server seed, client seed and nonce.

What does this page verify, then?

The seed-to-multiplier conversion itself, and any single-player game that uses it. It is the same code path as Limbo.

Which Stake algorithm does this use?

Stake, Provably Fair: Game Events, read 2026-09-20. The byte stream is HMAC-SHA256 of clientSeed:nonce:round keyed by the server seed, converted to 4-byte floats, then mapped to the per-seed crash multiplier.

Do my seeds leave the browser?

No. The HMAC and SHA-256 run with the Web Crypto API on your device. The share link carries the seeds only because you copied it.