One problem I see is that there are many more client seeds than sha256 outputs. So "just" reversing the hash isn't enough. On average you'll find 3.5e22 different server seeds which hash to any given server seed hash, but you'll need to figure out which one is the right one. Not that it matters.

Your point stands that reversing a single PD server seed is much harder than reversing any single Bitcoin private key. So instead of typing to steal a few thousand coins from PD, why not steal tens or hundreds of thousands from a rich Bitcoin address?


The risk of somebody being able to brute force an sha256 hash is pretty much zero.

The risk of a dice site cheating players is significantly higher. It has happened at least twice this year already (on another site).

So if your goal is to "protect players and investors" you should go with the provably fair system that pretty much every established dice site uses (SatoshiDice is the only exception I can think of).