Provably fair The keeper's dive for every penalty in the ladder is committed before your first kick. You get the SHA-256 hash of the server seed at bet time; the seed itself only after the round ends. Replay it offline: HMAC-SHA256(server seed, "client seed:nonce:shot:swap index") shuffles the six zones. The keeper covers a uniform random subset, so every zone carries exactly the same save chance. Every outcome, multiplier and payout is decided server-side.
Provider security HMAC request signatures Timestamp drift guard (+/-5 min) Idempotency key for retries Provably fair verify endpoint No live-round secret ever reaches the browser
How it works Pick one of six zones, then shoot. Score and the multiplier climbs one rung. The keeper saves and the round ends with nothing. Collect whenever you like; finishing the ladder collects automatically. Changed your mind before the first kick? Cancel the round and your stake comes straight back.