Castle Roulette
Verify any Duel Castle Roulette spin. 48-segment live wheel: HMAC-SHA256(serverSeed, `${randomness}:0`) → first 4 bytes mod 48 = landing sector. Drand-beacon randomness is committed pre-round (no client seed or nonce).
Frequently asked
Is Duel Castle Roulette really provably fair?⌄
Yes. Duel publishes a cryptographic commitment (the hash of the server seed) for each round BEFORE you bet. Afterwards the server seed is revealed and anyone can recompute the outcome — which is exactly what the verifier above does. If the computed result matches the shown one, the round wasn't manipulated.
How do I verify a Duel Castle Roulette round?⌄
Paste the revealed server seed into the form above. The verifier re-runs the official math and shows you the exact result, step by step. Everything runs in your browser — your seeds never leave the device.
Where do I find my Duel seeds?⌄
On your Duel account's fairness / seed page. There you can rotate the server seed: rotating reveals the old one (so you can verify all your previous bets) and commits a fresh hash for the next ones.
Can Duel cheat on Duel Castle Roulette?⌄
Not without getting caught. The server-seed hash is published before the bet, so Duel can't change the seed after the fact — any change would produce a different hash than the committed one. That's what makes the game verifiable.