ProvablyFair.org | Independent Casino Audits (Luck․io, MoonRoll․io + ongoing)

[ProvablyFair.org]

Hello Bitcointalk community,

ProvablyFair.org is an independent verification project focused on analyzing the technical fairness of crypto casino systems, not the marketing claims.

This thread will serve as a central place where we post all independent audits and case studies we conduct.

Our reports focus strictly on verifiable math, cryptographic reproducibility, and technical architecture.

📌 Completed Audits & Case Studies

1. Luck․io — Full Technical Audit (30+ pages)

One of the most prominent “on-chain” casinos claiming full decentralization and provable fairness.

Our audit analyzed:
• RNG architecture (Proov VRF)
• Game logic & reproducibility
• Jackpot transparency
• Contract authority & upgradeability
• Proof-of-reserves structure
• more

🧾 Full audit:
https://provablyfair.org/luckio-audit

🧵 X.com summary thread:
https://x.com/provablyfairorg/status/1987924980311404888


2. MoonRoll Plinko — Case Study (Fake PF system)

Reviewed after multiple player reports about inconsistencies in their “Provably Fair” implementation.

Findings include:
• No client seed
• No commit-reveal
• No per-bet nonce
• Verifier uses different code + 95% RTP model
• Live game logic cannot be reproduced by players

🧾 Case study report:
https://provablyfair.org/moonroll-plinko-audit

🧵 X.com summary thread: https://x.com/provablyfairorg/status/1989351541384634453?s=20

📌 Our Mission

Provably Fair should be proven by math and cryptography - not marketing.

That means:

• Deterministic results — the same seeds always produce the same outcome
• Commit–reveal — the casino locks its server seed before you bet
• Player-controlled client seed — you influence the RNG, not just the casino
• Per-bet nonce — every round is uniquely tied to a seed pair
• Transparent RNG — no black-box randomness or hidden logic
• Public, reproducible game logic — with the same seeds, players should get identical results when verifying externally.
• No unverifiable “decentralized/trustless” claims without cryptographic proof

Our reports are fully independent, based solely on technical evidence.

⸻

📌 Follow Our Work

Website: https://provablyfair.org
X.com : https://x.com/provablyfairorg

More casino audits, will be posted here as we complete them.

Thanks,
ProvablyFair.org Team

[Ronsbit]

It is nice that you have come here as a group to identify with the bitcointalk platform, and I hope you will enjoy your stay here. I see you already introduced a casino here, which is a welcome idea, but I will advise you to try to let the casino know about this platform, and also invite them here, so that they would have an official representative here, and also an official announcement thread here, which would be of benefit to them. Maybe this idea could help them better strengthen their presence here.

[mikel_012]

Welcome

This link in the post is broken and can't be clicked because of a broken text

For more details: https://provablyfair.org

More provably fair is good because we can trust more casinos, nice idea

[xLays]

Welcome

This link in the post is broken and can't be clicked because of a broken text

For more details: https://provablyfair.org

More provably fair is good because we can trust more casinos, nice idea

Looks like the issue is caused by the last Unicode character or emoji in that link. If you want to visit it, just copy the link text and manually delete the last character. I tried it now and it works perfectly fine for me.

Yes, this might be a good idea, but for those who don’t know how this audit works, it’s nothing special in my opinion. Most casino players nowadays only care about how popular the casino is.

[khaled0111]

Welcome to Bitcointalk, ProvablyFair.com!
Your website reminds me of provably.com, but it looks like you are more focused on auditing casino's provably fair systems rather than providing independant verifiers for different casinos’ games that users can use to vetify their bets.
I tried to read the Luck.io audit you shared, but it looks too technical for regular users.
In my opinion, it would be more helpful if you can add a short and easy to understand summary and rate the casino's provably fair system based on the results of your audit.

[julerz12]

First time I've heard of this platform so, no offense but how can we trust that your audit is real? or it was even done in the first place? It would have been nice if your first post doesn't come with a casino's name on it and just wanting to introduce your platform. Not sure about what's happening in crypto-casinos but in the realm of smart contracts, a bunch of "auditing firms" is everwhere and most can be bought out to promote a certain project/startup, I'm guessing it's the same case with crypto-casinos.

[mikel_012]

Looks like the issue is caused by the last Unicode character or emoji in that link. If you want to visit it, just copy the link text and manually delete the last character. I tried it now and it works perfectly fine for me.

Yes, this might be a good idea, but for those who don’t know how this audit works, it’s nothing special in my opinion. Most casino players nowadays only care about how popular the casino is.

Yes, I visited the website directly and it works

But on the page to verify bets they only have a list of casino 1, casino 2, casino 3, with no real casinos. Maybe they are starting now and that's why they will still real casinos to the list.

First time I've heard of this platform so, no offense but how can we trust that your audit is real? or it was even done in the first place? It would have been nice if your first post doesn't come with a casino's name on it and just wanting to introduce your platform. Not sure about what's happening in crypto-casinos but in the realm of smart contracts, a bunch of "auditing firms" is everwhere and most can be bought out to promote a certain project/startup, I'm guessing it's the same case with crypto-casinos.

I think you can see for yourself if the math checks out with the pages in the audit. I don't know a lot about provably fair but I know they can be checked by every user if they want since it's just math algorithms.

[ProvablyFair.org]

First time I've heard of this platform so, no offense but how can we trust that your audit is real? or it was even done in the first place? It would have been nice if your first post doesn't come with a casino's name on it and just wanting to introduce your platform. Not sure about what's happening in crypto-casinos but in the realm of smart contracts, a bunch of "auditing firms" is everwhere and most can be bought out to promote a certain project/startup, I'm guessing it's the same case with crypto-casinos.

If you check the full report we provided evidence you can check for yourself: https://www.provablyfair.org/luckio-audit/readme/evidence

All our research and findings can be reproduced by anyone, check out our github for analysis tools we used.

[gordonics.com]

It's a good initiative. It's clear that you're just starting out, and you'll first need to build your own reputation before you can give reputation to other casinos.

The difficult thing about auditing server software is the degree of access to the source code the other party offers you. If the audit is only done on the front end, I don't think it's reliable.

What kind of involvement in the backend software are you offered to perform your in-depth audit?

You mention testing tools: are these open source tools you can tell us about, or are they tools developed internally by your team?

I read on the website that the audit is independent. So, are you able to be transparent about your business relationships with the casinos you review?

Finally, to improve your reputation, is it possible to know the structure of your team?

[uche6215]

It is nice that you have come here as a group to identify with the bitcointalk platform, and I hope you will enjoy your stay here. I see you already introduced a casino here, which is a welcome idea, but I will advise you to try to let the casino know about this platform, and also invite them here, so that they would have an official representative here, and also an official announcement thread here, which would be of benefit to them. Maybe this idea could help them better strengthen their presence here.

I support what you said, it will be better if ProvablyFair.org  tell the Luck.io team to come here so they can clarify their claim of being a provably fair casino. Though it t is good that ProvablyFair.org is bringing all those related casinos (Provably Fair casinos) to the forum. Buy it will be better if the casino represent themselves and answer some questions to improve their casino.

[ProvablyFair.org]

It's a good initiative. It's clear that you're just starting out, and you'll first need to build your own reputation before you can give reputation to other casinos.

The difficult thing about auditing server software is the degree of access to the source code the other party offers you. If the audit is only done on the front end, I don't think it's reliable.

What kind of involvement in the backend software are you offered to perform your in-depth audit?

You mention testing tools: are these open source tools you can tell us about, or are they tools developed internally by your team?

I read on the website that the audit is independent. So, are you able to be transparent about your business relationships with the casinos you review?

Finally, to improve your reputation, is it possible to know the structure of your team?

Yes - and that’s exactly what we’re doing. Our approach is to publish audits that anyone can independently verify.
The upcoming case studies are all based on public code, on-chain data, verifiable math, and fully repeatable testing.

The whole point of provably fair is that the fairness logic must be verifiable without needing privileged backend access.
If a casino requires backend access to “prove fairness,” then by definition it is not provably fair.

All of our audits are fully reproducible by the public - essentially open-sourced analyses. Anyone can follow the steps, rerun the proofs, and confirm the results themselves.


Casinos can pay us to audit their games, but the beauty of the model is that the audits are open and reproducible.
There’s no need to “trust” us - if a casino passes, players can verify the audit themselves.

You can read more about out 8 point framework here: https://www.provablyfair.org/audits

[Hispo]

I think this is the first time I have seen an audit being shared here in the section of the forum.
The only problem I see with these kind of initiative in the fact you are very unlikely to have access to the most important casinos which do nor have anything to do with decentralization or running on the blockchain. Casinos which are centralized continue to be the most used ones by gamblers.

Perhaps this project of yours could have had more relevance during the era in which web3 was getting pushed as the future of gambling and betting on sports, but those times have passed and the attention of people have turned again to centralized services, which are trusted by their track record.

Anyways, even though web3 is not being advertised as much as it used to, I hope you can still bring us some interesting audits in the future, if people find casinos to be provably fair, then their volume of money might increase in the future.

[ProvablyFair.org]

I think this is the first time I have seen an audit being shared here in the section of the forum.
The only problem I see with these kind of initiative in the fact you are very unlikely to have access to the most important casinos which do nor have anything to do with decentralization or running on the blockchain. Casinos which are centralized continue to be the most used ones by gamblers.

Perhaps this project of yours could have had more relevance during the era in which web3 was getting pushed as the future of gambling and betting on sports, but those times have passed and the attention of people have turned again to centralized services, which are trusted by their track record.

Anyways, even though web3 is not being advertised as much as it used to, I hope you can still bring us some interesting audits in the future, if people find casinos to be provably fair, then their volume of money might increase in the future.

Actually our focus is specifically on crypto casinos offering provably fair games. Luck.io was an interesting case because of its multiple claims about being trustless and decentralised on top of being provably fair.

Here is a case study we did on m​oonroll․io plinko provably fair claims:
https://provablyfair.org/moonroll-plinko-audit

X discussion: https://x.com/provablyfairorg/status/1989351541384634453?s=20

We’ll be reviewing many crypto casinos, both good and bad.

[Shishir99]

Why not create your own announcement thread in the gambling section first? You can have your own announcement thread, where you can explain what you do, and post updates about the latest audits in your thread, rather than creating a dedicated thread for Luck.io. I just checked your website, and as far as I understand, the website is new and does not contain. The casinos' list shows some examples, links only.

I don't see the list of the audits you have done so far. The audits page contains information about how you do it and Book audit information. Don't you think it is important to list the audits informations?

However, why casinos should trust you with their codes?

[Ronsbit]

It is nice that you have come here as a group to identify with the bitcointalk platform, and I hope you will enjoy your stay here. I see you already introduced a casino here, which is a welcome idea, but I will advise you to try to let the casino know about this platform, and also invite them here, so that they would have an official representative here, and also an official announcement thread here, which would be of benefit to them. Maybe this idea could help them better strengthen their presence here.

I support what you said, it will be better if ProvablyFair.org  tell the Luck.io team to come here so they can clarify their claim of being a provably fair casino. Though it t is good that ProvablyFair.org is bringing all those related casinos (Provably Fair casinos) to the forum. Buy it will be better if the casino represent themselves and answer some questions to improve their casino.

That would be the task for them to engage with now, and it is likely better that the casinos they promote avail themselves here for the forum members to have a good interaction with them, as that would help foster a good relationship between the community and the casinos. I know they would want to take advantage of such an opportunity as it presents itself here. OP alone can not really say everything about the casinos they present here, so it would be better if they also come here to talk more about their casino.

[ProvablyFair.org]

Why not create your own announcement thread in the gambling section first? You can have your own announcement thread, where you can explain what you do, and post updates about the latest audits in your thread, rather than creating a dedicated thread for Luck.io. I just checked your website, and as far as I understand, the website is new and does not contain. The casinos' list shows some examples, links only.

I don't see the list of the audits you have done so far. The audits page contains information about how you do it and Book audit information. Don't you think it is important to list the audits informations?

However, why casinos should trust you with their codes?

I’ve updated this thread to include all audits as we complete them, we’re a new project and have published two so far, with more on the way.

The website will also be expanded and updated as we grow, it’s still a work in progress.

Regarding your question about why casinos should “trust us with their code”:

That’s the entire point, if a game is truly provably fair, the core logic must be reproducible externally.
Players (and third parties) should be able to verify outcomes independently. Some casinos implement this correctly, but many use “provably fair” purely as marketing without providing real transparency.

Our role is to analyse implementations, expose fake PF systems, and promote genuine mathematical verifiability across the industry.

[Shishir99]

Snip

Thanks for the answer. You must first establish a reputation before offering audits to other casinos. You avoided my main questions, so I will ask them again - Why not create your own announcement thread in the gambling section first? You can have your own announcement thread, where you can explain what you do, and post updates about the latest audits in your thread, rather than creating a dedicated thread for Luck.io. If you post updates about other audits in the Luck.io thread, people would think it's all about Luck.io and ignore the thread.

[ProvablyFair.org]

Snip

Thanks for the answer. You must first establish a reputation before offering audits to other casinos. You avoided my main questions, so I will ask them again - Why not create your own announcement thread in the gambling section first? You can have your own announcement thread, where you can explain what you do, and post updates about the latest audits in your thread, rather than creating a dedicated thread for Luck.io. If you post updates about other audits in the Luck.io thread, people would think it's all about Luck.io and ignore the thread.

That’s exactly what we’re doing with these first audits - building a reputation through real, verifiable work.

And if you look closely, we’ve already turned this into a general audit thread. We’ll continue posting every new audit here going forward.

So far we’ve released two (Luck.io and MoonRoll.io), with more coming in the next few weeks. Anyone is welcome to ask questions about any of the audits, and casinos are welcome to join the discussion as well.

We always include clear recommendations in every report so operators know exactly what needs to be fixed to meet real provably fair standards.

[Haunebu]

First time seeing audits being released to the public which is a good sign and shows how confident you guys are when it comes to your tool, but it ain't going to be easy scoring customers(If that's your intention) in this over saturated crypto gambling environment.

The big sites already have reliable verifiers and won't change unless they are getting a better deal in the long run.

[ProvablyFair.org]

First time seeing audits being released to the public which is a good sign and shows how confident you guys are when it comes to your tool, but it ain't going to be easy scoring customers(If that's your intention) in this over saturated crypto gambling environment.

The big sites already have reliable verifiers and won't change unless they are getting a better deal in the long run.

Appreciate the comments, so let me clarify our direction a bit.

Right now a lot of casinos define “provably fair” however they want it's mainly marketing. Self auditing and self verification aren’t enough when the operator writes the code and also benefits financially from the outcome.

A casino’s verifier only proves the game matches their own backend. It doesn’t prove the code itself is fair or that it matches the house edge and mechanics they advertise.

A casino can still change the real house edge, apply different logic to high stakes players, ignore or override player controlled client seeds, or run a fairness checker that doesn’t match the live game.  All of those are possible cheating vectors, and none of them qualify as real provably fair.

That’s why an independent standard is needed, something where players can reproduce results outside the casino’s system. Think of it like a real time auditor that isn’t controlled by the operator. ProvablyFair.org isn’t competing with casino verifiers. We’re aiming to set the public, math backed benchmark and holding operators accountable to it.