Pack OpeningSites
WATCHDOG & AUDITS
Claim Codes
Cryptographic Technology Guide

What is Provably Fair in Pack Opening?

The cryptographic mechanism that guarantees the site operator could not have tampered with your pack pull after you paid.

1. The Problem with Black-Box Mystery Boxes

In traditional mystery box sites or video game loot boxes, the server decides what you win behind closed doors. The operator could theoretically adjust the win rate based on your balance, decrease high-tier pulls when traffic spikes, or deliberately ensure that you never hit a high-value grail card like an Umbreon VMAX or 1st Edition Charizard.

Cryptographic verification can make outcomes checkable. A commitment published before purchase can show that a revealed result matches an earlier promise. It does not prove fair pricing, favorable odds, secure custody or reliable delivery. The full algorithm and its implementation still matter.

2. The Three Core Pillars of Provably Fair

  • The Server Seed (Hashed): Before opening any pack, the platform generates a randomized secret string called the Server Seed. They run this string through a SHA-256 algorithm and give you the resulting hash. A SHA-256 hash is a one-way mathematical fingerprint: you cannot determine the original string from the hash, but once revealed, anyone can verify that the hash matches the original string.
  • The Client Seed: This is a random string provided by your web browser (or customizable by you in your account settings). Because the server did not know what client seed you would use when it created the server seed, it could not have pre-rigged the result against you.
  • The Nonce: An incremental counter changes the input for each opening with a seed pair. The same prize can occur more than once; changing the input does not guarantee a different prize.

3. Step-by-Step: How a Pull is Mathematically Generated

Implementations vary. A typical seed-based system follows this pattern; use the provider’s published algorithm for exact verification:

  1. The implementation combines the committed server seed, client seed and nonce using a documented encoding.
  2. It applies its documented hash or keyed hash function.
  3. It converts part of the output to a number. Eight hexadecimal characters represent 32 bits, ranging from 0 to 4,294,967,295.
  4. A documented mapping converts that number to an outcome. Check both the seed commitment and the mapping against the published drop table.

4. Which Platforms are Provably Fair?

Gemma’s published terms describe a pre-payment SHA-256 commitment with a seed revealed after opening. Before buying on any platform, check that it supplies the algorithm, commitment, revealed inputs and a way to reproduce the result. A platform’s claim should be distinguished from an independent implementation audit.