Shuffle Keno verifier
This Shuffle Keno verifier recomputes a draw from the revealed server seed, your client seed and the bet's nonce, in your browser, using the construction Shuffle publishes: HMAC-SHA256(server seed, "clientSeed:nonce:cursor") read as floats, ten floats for Keno. Shuffle publishes 99% RTP for Keno (checked 2026-09-23). With the example inputs below the draw comes out as drawn 4, 6, 9, 14, 19, 20, 21, 27, 28, 32; press “Load example values” and Verify to reproduce it.
Disclosure: VerifyRoll is sponsored by Craze, a competitor of Shuffle. Figures here are computed or taken from what operators publish, dated; nothing is estimated.
Loading verifier…
How a Shuffle Keno draw is derived
How a Stake-scheme Keno draw picks 10 of 40 numbers using floats and selection without replacement, and why payout tables are operator-specific.
- Start with 40 positions numbered 0 to 39 (shown to players as 1 to 40).
- For each of the 10 draws, take the next float and compute floor(float × positions remaining). Remove the chosen position.
- Ten floats fit in two HMAC rounds: eight from cursor 0, two from cursor 1.
for i in 1 … 10: idx = floor(float_i × |remaining|); drawn_i = remaining[idx] + 1; remaining.splice(idx, 1)
Full derivation, payout rule and every operator's figure on the Keno maths page.
Shuffle's published RTP for Keno
99%, a house edge of 1%, as published by Shuffle and checked 2026-09-23. The draw is uniform over all 10-of-40 combinations (there are 847,660,528 of them). The edge is in the payout table, which is set by the operator and differs by risk level. The verifier proves the draw; it cannot see the RTP. Read the figure in the game's own info panel and compare it with this one.
Worked example
Computed on the server by the same function the verifier runs. The seed pair is the site's example, at nonce 8 on this page; it is not from a real Shuffle round.
- server seed
- 2b4d2f1a7c9e0f3b8a6d5c4e3f2a1b0c9d8e7f6a5b4c3d2e1f0a9b8c7d6e5f4a
- client seed
- verifyroll
- nonce
- 8
- HMAC-SHA256(server seed, “verifyroll:8:0”)149a1caa4fb1aacf79592126746d2ef933a1402922888136a0b8cb9e70ee8b36
- HMAC-SHA256(server seed, “verifyroll:8:1”)bddfa793a08d235d07b1d87478a80587b361aa86d8d65e80458d79a845220b7f
- Floats (10): 0.08047656 0.31130474 0.47401626 0.45479101 0.20167924 0.13489540 0.62781975 0.44113989 0.74169395 0.62715360
- pick 1: floor(0.08047656 × 40) = 3 → tile 3
- pick 2: floor(0.31130474 × 39) = 12 → tile 13
- pick 3: floor(0.47401626 × 38) = 18 → tile 20
- pick 4: floor(0.45479101 × 37) = 16 → tile 18
- pick 5: floor(0.20167924 × 36) = 7 → tile 8
- pick 6: floor(0.13489540 × 35) = 4 → tile 5
- pick 7: floor(0.62781975 × 34) = 21 → tile 27
- pick 8: floor(0.44113989 × 33) = 14 → tile 19
- pick 9: floor(0.74169395 × 32) = 23 → tile 31
- pick 10: floor(0.62715360 × 31) = 19 → tile 26
Questions
- What do I paste to verify a Shuffle Keno draw?
- The revealed server seed, your client seed and the bet's nonce, plus the server seed hash that was shown before play if you want the commitment checked. Keno consumes ten floats from the HMAC output.
- What RTP does Shuffle publish for Keno?
- 99%, a house edge of 1%, as published by Shuffle and checked 2026-09-23. The draw is uniform over all 10-of-40 combinations (there are 847,660,528 of them). The edge is in the payout table, which is set by the operator and differs by risk level.
- Are the drawn numbers sorted in the game?
- The game shows them sorted; the verifier shows the draw order first because that is what the floats produce, then the sorted set.
- Why is there no Keno calculator here?
- The hit probabilities are plain hypergeometric arithmetic, but without a payout table there is nothing honest to compute an RTP from. When operators publish tables in a stable form we will add one.
Next
- Verify any Shuffle bet: where the seeds are, all seven games.
- Stake Keno verifier: same construction, separate operator.
- Shuffle Roulette verifier
- Shuffle Dice verifier
- Shuffle in the casino directory
last reviewed 2026-09-27 · derivation as implemented in @craze/fairness