Dot Derby is real SOL on Solana mainnet. Here's exactly how the game stays honest, what the contract guarantees, and — just as important — what it does not yet enforce. No spin. Read it before you bet.
Every bet, payout, refund and jackpot lives in one Solana program. Inspect it yourself:
The program is upgradeable, and the upgrade authority is the operator (the address above). That means the operator can ship new code — useful for fixes, but you are trusting us not to abuse it. We're keeping it upgradeable while the game is young; a future authority freeze / multisig is on the roadmap.
Each hourly race is decided by a secret 32-byte seed. The trick is that the seed is locked in before you bet, but stays hidden until the race runs — so nobody, including us, can predict the winner while betting is open, and everyone can verify it afterward.
When the race is created, we publish the sha256 commitment of the secret seed on-chain. The seed itself stays secret. The commitment is a fingerprint: it locks the seed in without revealing it.
The maze you see is derived from that public commitment. So every bettor sees the exact same map for the whole betting window — and the map can't be reshuffled once bets are in.
Which dot actually falls in the hole depends on the secret seed, not just the map. Since the seed stays hidden until premiere, no bettor can predict the winner — not even with the map in front of them.
At race time the seed is revealed on-chain. You can sha256 it and confirm it matches the commitment published in step 1, then re-run the open-source physics engine to recompute the winner yourself. Same seed → same winner, every time.
Every race uses a fresh seed that never repeats. The Past Races tab shows the commitment and revealed seed for finished races so you can verify any of them after the fact.
Splits are enforced by the on-chain program in basis points (500 / 500), not by a server we control. The math is in the contract.
Payouts aren't pushed — you claim your winnings directly from the on-chain vault whenever you want.
If a race is cancelled, every bettor can pull back their full stake. No stake is stranded.
If the operator ever goes dark and neither settles nor cancels, any bettor may reclaim their full stake 24 hours after premiere — no permission from us required. The escape hatch is in the contract itself.
We'd rather be straight with you than oversell. Here's the real trust model:
The physics simulation can't run on-chain, so the winner is reported by the operator. It is fully verifiable and provable from the revealed seed — anyone can recompute it with the open-source engine and catch a false result — but it is not yet enforced by an on-chain draw or a formal third-party human audit. The contract was hardened through extensive adversarial review, and the commit-reveal scheme means a dishonest result would be publicly detectable, but detection is not the same as on-chain enforcement.
Bet responsibly. Only bet what you can afford to lose.
You might see a warning from Phantom or another wallet. That's expected for a project this new, and it isn't a sign of a scam — here's why it happens:
mainnet · real SOL · provably fair, honestly disclosed · bet what you can afford to lose