Winna Coinflip Verifier

Recompute the coins for one bet on Winna from the server seed, client seed and nonce. Same HMAC-SHA256 stream the operator publishes, run in your browser.

Verify one betAnalyze a range

Casino

Game

Have a bet link? paste it; we open the right casino and game and tell you where the seeds are. Nothing is sent anywhere.

Examples

Verification Inputs

Server Seed unhashed, revealed after you rotate

Client Seed your chosen seed

Nonce bet counter, starts at 0

Server Seed Hash optional, the SHA-256 shown before you bet

Turns played 1 to 20, the rest are shown dimmed

Recomputes as you type. Nothing leaves your browser.

Coinflip Result

Paste the server seed and client seed from the bet. The coinflip result appears here as you type.

Algorithm sourceWinna Help Center, Provably Fair: Implementationchecked 2026-09-20

Published 2026-05-21, after our April 2026 audit placed Winna in the VERIFIER_ONLY tier; that audit is superseded for the algorithm question. Same byte stream as Stake (HMAC-SHA256 of clientSeed:nonce:cursor keyed by the server seed, eight uint32 / 2^32 floats per digest) and the same event mapping for the games listed, with two operator differences the verifier applies: Coinflip is float < 0.5 = heads (the opposite of Stake's Flip rule) and the Hilo card table is suit-major from Ace (♠A … ♦K). Dragon Tower is Winna's Pepe Tower, same LEVEL_MAP. Not listed: Slide (hash chain), Plinko Extreme (inverse-transform table), Coin Climber and Blackjack (not implemented here).

Winna fairness page Winna on GAMB·8

How Winna derives a Coinflip result

From float to result

One float is generated per flip. Which side a float maps to is the operator's published rule, and the two published rules are opposites (Winna: below 0.5 is heads; Stake's Flip: 0.5 or below is tails). The calculation step shows the rule this page applied.

What to compare

Compare the sides below, in order, with the result in your bet history.

Where the seeds are

Open the bet in your history on Winna. The client seed and nonce show immediately. The unhashed server seed appears only after you rotate your seed pair, so rotate first, then verify every bet from the old pair.

The byte stream, Winna

bytes = HMAC_SHA256(key = serverSeed, msg = clientSeed:nonce:round) // round starts at 0float = b0/256 + b1/256^2 + b2/256^3 + b3/256^4 // 4 bytes per floatresult = game event mapping applied to the floats, in order

Other Winna games

Winna Dice verifier Winna Limbo verifier Winna Mines verifier Winna Plinko verifier Winna Hilo verifier Winna Keno verifier Winna Pepe Tower verifier Winna Roulette verifier Stake verifier Stake.us verifier Shuffle verifier

Keep what you worked out.

A free account saves your bankroll plans, sessions and the results you run here, on every device. No card, no upsell.

Create free account All tools

Frequently Asked Questions

Is the coin fair?

Each float is uniform on [0, 1), so each side has probability one half. Any house edge is in the payout, not the coin.

Why does the same seed give the opposite coin on another casino?

Because the side rule is the operator's, not part of the hash. This page applies the rule the operator publishes; a generic verifier that assumes one rule for every casino is wrong on half of them.

Which Winna algorithm does this use?

Winna Help Center, Provably Fair: Implementation, read 2026-09-20. The byte stream is HMAC-SHA256 of clientSeed:nonce:round keyed by the server seed, converted to 4-byte floats, then mapped to the coin.

Do my seeds leave the browser?

No. The HMAC and SHA-256 run with the Web Crypto API on your device. The share link carries the seeds only because you copied it.