HOW TO VERIFY PROVABLY FAIR LIMBO

The Three Inputs Behind Every Limbo Round

Provably fair Limbo runs on the standard commitment scheme: three inputs feed a cryptographic function, and the multiplier is fixed before you bet.

Before your bet, the casino generates a secret server seed and shows you only its SHA-256 hash — a sealed commitment it cannot change later. You supply (or accept and can change) a client seed, and a nonce counts up by one with every bet on the same seed pair. To settle the round, the casino runs HMAC-SHA256 with the server seed as the key and a message built from your client seed and nonce. The output bytes become your multiplier.

Because the server seed is locked by its hash before the round and you control the client seed, neither side can nudge the multiplier after the fact without breaking the hash — which you can detect. For the full background on the commit-and-reveal model, see our complete guide to provably fair gambling and the general how-to-verify walkthrough.

How the Hash Becomes a Multiplier

Limbo and Crash share the same engine: a single random value drawn from the hash is run through a formula that converts it into a multiplier, with the house edge applied as a plain multiply-by factor. Here is the derivation used by Stake-style implementations and mirrored by our verifier:

• 1
  Compute the HMAC. The casino calculates HMAC_SHA256(key = serverSeed, message = clientSeed:nonce:0), producing a 64-character hex digest.
• 2
  Read a slice as a large integer. Take the leading hex characters of the digest and interpret them as one big integer, val. (Stake-style Limbo uses a 52-bit slice so the maths fits exactly in a double-precision float — the same range our verifier uses.)
• 3
  Apply the multiplier formula. The result is floor( (2⁵² / (2⁵² − val)) × (1 − edge) × 100 ) / 100. The (1 − edge) term — for example 0.96 for a 4% house edge — is the casino's advantage made visible.
• 4
  Compare to your target. Limbo lets you pick a target multiplier; you win if the generated multiplier is at least your target. A bigger val (closer to the cap) produces a higher multiplier, which is correspondingly rarer.

The shape of the formula is what gives Limbo its long tail: most rounds land on small multipliers, while the occasional huge value comes from val sitting very close to the cap. Every part of it is deterministic, so anyone with the same three inputs computes the same multiplier.

Worked Example You Can Reproduce

The digest is HMAC_SHA256("server-seed-demo-2026", "player-007:7:0"):

So a target of 2.00× would win on this round (2.63 ≥ 2.00), while a target of 3.00× would lose. The multiplier was fixed the instant the server seed was committed — the same three inputs can only ever produce 2.63×. The × 0.96 in the formula is the 4% house edge, proven rather than hidden.

Where to Find Your Limbo Seeds

The hardest part of verification is locating your seeds inside the casino. You must rotate (change) your seed pair first — the casino only reveals the unhashed server seed once it is retired, which is a security requirement so live results stay unpredictable. Then verification covers every round made under that pair.

What This Proves — and What It Does Not

This is the honest part most Limbo pages skip. A successful verification is powerful, but it has clear limits — and with Limbo the limit is right there in the formula.

Provably fair proves honesty, not generosity. Limbo is the clearest illustration of this: the × 0.96 in the formula is a 4% house edge baked straight into every multiplier. Verification confirms that exact edge was applied and the result was the one the cryptography pointed to — it does nothing to tilt the odds in your favour, and it cannot turn a losing target into a winning one. It also says nothing about whether the operator is trustworthy: a casino can implement flawless Limbo and still stall withdrawals or run unlicensed. That is why we still weigh licensing and payout history in our provably fair casino reviews. For the full breakdown, see is provably fair actually fair?

Verify Other Games Too

Limbo shares its engine with Crash and every other original. Once you can verify a multiplier, the rest follow the same pattern — only the final mapping from hash bytes to result changes:

• •Plinko — the hash bytes become per-row left/right moves down the pegs into a bucket.
• •Keno — the byte stream seeds a draw of distinct numbers from the pool.
• •Dice, Crash & Mines — covered step by step in our how to verify provably fair results guide.

Frequently Asked Questions