Pullympus

Provably fair

Every pull is bound at commit time to a drand round that hasn't happened yet. When it lands, its BLS signature is verified on-chain and becomes the dice. Paste any pull below and recompute it yourself — in your browser, from public data only.

The rules

  1. Your pull targets the second drand round after its block, 3–6 s ahead. Nobody, us included, knows it.
  2. While any pull is pending, the machine's pool is frozen. New cards wait in staging.
  3. Pulls settle strictly in order. Anyone can settle; delivery can't be blocked.
  4. word = keccak256(chainHash, randomness, chainId, machine, machineId, pullId)
  5. Tier = first bucket whose cumulative odds exceed word mod 10000. Card = pool[tier][(word ≫ 128) mod size].