The
previous thread is to be locked, so I hope we can continue the discussion here.
Unfortunately the new system also does not offer provable fairness and potentially allows even players to cheat. This stems from the fact that the game result is generated from the number of satoshis in the pot and the hash of the last received transaction at the end of each round. Transactions can be generated in advance and later broadcast by anyone, which consequently allows the winner to be chosen at least for rounds with few players. A better explanation by another user can be found here:
The problem is that the hash of a bitcoin transaction is entirely predictable. I can pre-generate thousands of them and have them ready for broadcasting. Then I pick a bunch that make my ticket win and broadcast them at just the right time. If I was you, I could then pick one of them and claim that it was "the last bitcoin transaction". In other words your system isn't provably fair at all. It's exploitable by players, and cheatable by yourself.
I also urge you once again to start using SSL. Basic SSL certificates can be purchased for less than $5 per year or can even be obtained for free from
Let's Encrypt, albeit with some effort. It is irresponsible to send your players' information in the clear, especially when money is on the line.
That being said, I do think it is laudable that you have recognised the that your previous system was not provably fair and are attempting to make improvements.