Thrill Originals verifier
Paste a revealed Thrill server seed, client seed and nonce. This page recomputes the selected Original with Thrill’s published HMAC-SHA512 construction — not Stake, Shuffle, BC.Game or Rainbet mappings. It is not on the unified /verify page yet. After the page loads, nothing is sent to a server.
What this page implements
HMAC-SHA512 + cursor
Instant games key HMAC-SHA512 with the revealed server seed and sign clientSeed:nonce:cursor. Each 64-byte digest increments the cursor. Integers walk 4-byte unsigned values with rejection sampling against 2³² − (2³² % range).
Floats vs integers
Limbo, Crash and Slide use a documented 7-byte / 52-bit float. Dice, Mines, Keno, Plinko, cards, Roulette and Coinflip use integers or a single even/odd byte. Mapping a float through floor(f × N) would be the wrong construction here.
Scheduled Crash and Slide
Those two games hash only HMAC-SHA512(serverSeed, clientSeed). The client seed is the highest-stake player in the event. The server seed is revealed when the round closes; check it against the hash shown in the preamble.
Not the unified calculator
Stake, Shuffle, BC.Game and the other live tabs stay on /verify. This URL is Thrill-only so you can check the numbers against thrill.com before any tab is added there.
Does any of my data leave this page?
No. After the page loads, hashing runs through the browser Web Crypto API. Seeds are not posted anywhere.
Why is there an integer byte-order control?
Thrill’s help article names HMAC-SHA512 and rejection sampling, but it does not say whether the 4-byte integer walk is little-endian or big-endian. The rest of the article reads like C#, so the default is little-endian. If a live Dice, Mines or Roulette bet disagrees, flip it and tell us which one matched.
Why are Plinko multipliers missing?
The published Game Event page says risk only changes the payout table, not the bucket. The bucket is the popcount of the trajectory integer. Official multiplier tables are not in that article, so this page reports the path rather than inventing payouts.
Crash and Slide ask for no nonce. Is that right?
Yes. Instant games sign clientSeed:nonce:cursor. Scheduled games sign only the active client seed, then extract the same 52-bit float used by Limbo.