Thanks for your thorough analysis! Let me clarify how our provably fair system works to ensure integrity:
Secure Salt Generation:
We use a 16-character hexadecimal salt (64 bits of entropy), making it virtually impossible to find another salt that produces the same SHA-256 hash. This level of security ensures that the salt cannot be manipulated to achieve a desired outcome.
Hash Commitment Before Bets:
We publish the hash of num:salt before any bets are placed. This means the outcome is locked in and cannot be altered based on the bets received. Once the hash is out there, we can't change the num or salt without invalidating the hash.
Immutable Results:
After the spin, we reveal the original salt, allowing anyone to verify that the hash matches the num:salt combination. This transparency ensures that the result was not tampered with after bets were placed.
Mathematical Impracticality of Manipulation:
Given the strength of SHA-256, attempting to find a different salt that results in the same hash is computationally infeasible. This makes it practically impossible to reroll the number to favor certain outcomes.
Security Assurance:
If anyone were to discover a way to manipulate the salt and hash to influence outcomes, we'd be very interested in learning about it and would gladly offer a bounty for such findings to further improve our system.
Our focus is on maintaining a fair and transparent gaming environment for Bitcoiners, leveraging the security of the Lightning Network and robust cryptographic practices. We appreciate your scrutiny and hope this clarifies our commitment to provably fair gaming!
— The LN Roulette Team
The fact that you provide the hash of the next game before the bet makes it kind of fair, i mean, you can't modify the bet result after the roll has been done. But if we get back to my example where a high roller is betting on the number 11, the engine can select a number different than 11 and provide the hash of that bet for the next roll. And that's my concern the user isn't involved in the game result, all is on the house side, and that isn't cool at all.
But i understand it is that way because all the users bet on the same hash, is one roll for all, if users had their own rolls they could input a user seed.