Provably fair. Actually provable.
Every box is sealed with cryptography before its first pack is ripped, shuffled by a public coin flip, and published in full the moment it completes. You never have to take our word for anything; your own browser checks the math.
Inspect a completed box →The box fingerprint
Before a box's first pack is ever ripped, we publish a SHA-256 fingerprint of its complete card list. Swap, add, or remove a single card afterward and the fingerprint breaks, publicly.
The seed fingerprint
We also publish a fingerprint of a secret shuffle seed at the same moment. We can't change the seed later; the hash would stop matching.
A public coin flip
The shuffle mixes our seed with a drand randomness beacon, a public random number produced by an independent network, at a round that didn't exist yet when the box was sealed. Not us, not you: nobody can steer it.
Your rip
Packs claim the next slot of the shuffle the moment they're opened. Which slice you get is decided by rip order, and every slice was locked before the box went live.
The life of a box
Box sealed: fingerprints published
Beacon lands: shuffle fixed (still secret)
You rip: your pack claims its slot
Last pack ripped: box completes
Everything published: seed, card list, beacon
Your browser re-checks the math
How this compares
The industry standard is a server seed (hashed up front), a client seed you can edit, and a nonce that counts your opens, with seeds revealed on a delay. That proves each roll wasn't rigged after the fact. We go further: the entire box, every card in it, is committed before anything sells, the randomness comes from a public beacon instead of either party, and the full reveal happens the moment the box completes, not on a 24-hour timer. Odds can't be tuned per-open, per-user, or per-anything.
Fair questions
Can you swap a card after I buy?
No. The full card list is locked behind the fingerprint before the first rip. Changing anything afterward would break the published hash, and every visitor's browser would catch it on the Verify page.
Can anyone pick which pack they get?
No. The shuffle is secret until the box completes, and slots are claimed strictly in rip order. Nobody, including us, can see what's left inside while a box is live.
Why don't I get to set a client seed?
Casino-style sites let you set a "client seed" so the operator can't precompute results. We use something stronger: a public drand beacon that doesn't exist yet at sealing time. It does the same job a client seed does, without trusting either side, and unlike a client seed, it also can't be cherry-picked by the player.
Does Evolve work the same way?
Yes, identical model. When you evolve a card we commit a hashed server seed and pin the outcome to a future drand round that hasn't happened yet. Nobody chooses, nobody can peek; once the round publishes (~5 seconds) we reveal the seed and your browser recomputes the roll as HMAC-SHA256(serverSeed, drand randomness) straight from the public beacon. Same fairness, same 'you don't choose' guarantee as the boxes.
Are Master Ball overlays and God / Demigod packs verifiable too?
Yes. Special finishes (Master Ball / Poké Ball patterns) and rare bonus packs (a Demigod upgrades several slots to hits, a God Pack makes every slot a hit) are baked into the SAME box fingerprint. The overlay finish and the special-pack marker are committed before the first rip and reproduced by the Verify page, exactly like any other pull. A set's overlay odds are published on its product page; God and Demigod odds have no official source, so we show community estimates clearly labeled as estimates.
How is this different from other rip sites?
Most sites hash a server seed, combine it with your client seed and a nonce per open, and reveal seeds on a delay (often 24 hours). We commit the entire box's contents up front, not just a seed, so the odds can't be tuned per-open, and we reveal everything the moment a box completes. No waiting.
What if I don't trust your verifier?
You don't have to. The verifier is about a hundred lines of open TypeScript: hash the card list, hash the seed, mix the seed with the beacon, run the shuffle, slice into packs. Run it yourself against the published data.
Where do shipped cards come from?
We source every shipped card fresh, in Near Mint condition, from major third-party marketplaces such as TCGplayer, and mail it on to you. That's also what drives availability: if a card is purchasable there, it's shippable here.
When does a box get published?
The instant its last pack is ripped. The seed, the full card list, and the beacon value all go public, and the box shows up on the Verify page for anyone to inspect.