Winna Dice Verifier
Recompute the dice roll for one bet on Winna from the server seed, client seed and nonce. Same HMAC-SHA256 stream the operator publishes, run in your browser.
Verification Inputs
Recomputes as you type. Nothing leaves your browser.
Dice Result
Paste the server seed and client seed from the bet. The dice result appears here as you type.
Published 2026-05-21, after our April 2026 audit placed Winna in the VERIFIER_ONLY tier; that audit is superseded for the algorithm question. Same byte stream as Stake (HMAC-SHA256 of clientSeed:nonce:cursor keyed by the server seed, eight uint32 / 2^32 floats per digest) and the same event mapping for the games listed, with two operator differences the verifier applies: Coinflip is float < 0.5 = heads (the opposite of Stake's Flip rule) and the Hilo card table is suit-major from Ace (♠A … ♦K). Dragon Tower is Winna's Pepe Tower, same LEVEL_MAP. Not listed: Slide (hash chain), Plinko Extreme (inverse-transform table), Coin Climber and Blackjack (not implemented here).
How Winna derives a Dice result
From float to result
What to compare
Where the seeds are
bytes = HMAC_SHA256(key = serverSeed, msg = clientSeed:nonce:round) // round starts at 0float = b0/256 + b1/256^2 + b2/256^3 + b3/256^4 // 4 bytes per floatresult = game event mapping applied to the floats, in orderOther Winna games
Keep what you worked out.
A free account saves your bankroll plans, sessions and the results you run here, on every device. No card, no upsell.
Frequently Asked Questions
Why 10,001 outcomes and not 10,000?
The range 0.00 to 100.00 inclusive has 10,001 values. Multiplying the float by 10,001 before flooring is what makes 100.00 reachable.
Does my target or over/under choice change the roll?
No. The roll depends only on the server seed, client seed and nonce. Your target only decides whether that roll paid.
Which Winna algorithm does this use?
Winna Help Center, Provably Fair: Implementation, read 2026-09-20. The byte stream is HMAC-SHA256 of clientSeed:nonce:round keyed by the server seed, converted to 4-byte floats, then mapped to the roll (0.00 to 100.00).
Do my seeds leave the browser?
No. The HMAC and SHA-256 run with the Web Crypto API on your device. The share link carries the seeds only because you copied it.
