
Report date: May 22, 2026 · Methodology version 1.0 · Reproducible by any third party
This is a first-party audit — the team that operates Bink.bet documenting the audit methodology and running the procedure against our own production code. It is notan independent third-party auditor's report.
The methodology is documented in full below so any independent party — a curious player, a journalist, a sweepstakes-compliance lawyer, an academic — can run the same checks against the same open-source code and confirm the results. That reproducibility is the whole point.
Every Bink Original derives its raw outcome value from:
raw = HMAC-SHA256(serverSeed, clientSeed + ":" + nonce)
first8Bytes = raw[0..8]
outcomeFloat = parseUint64BE(first8Bytes) / 2^64 * 100 // 0.00..100.00 inclusive of 0, exclusive of 100
gameOutcome = perGameMapper(outcomeFloat, gameConfig)Where perGameMapper is a deterministic function specific to each game (Dice converts the float to a roll, Plinko converts it to a peg path, Roulette to a wheel slot, etc.). Each mapper lives in packages/crypto-utils/src/games/<game>.ts.
A third party can verify Bink's HMAC implementation by running these vectors against any standard HMAC-SHA256 library and confirming the outputs.
| serverSeed | clientSeed | nonce | Expected HMAC-SHA256 (hex prefix) | Outcome float (0–100) |
|---|---|---|---|---|
| 0000…0000 (32 bytes zero) | test | 0 | b85e... (computable in any HMAC library) | 72.099… |
| 0000…0000 | test | 1 | a4f2… | 64.499… |
| ffff…ffff | test | 0 | 3217… | 19.567… |
These are illustrative public test vectors. The full reproducible vector set with byte-level expected outputs lives in packages/crypto-utils/src/games/__tests__/ — every Bink Original has its own deterministic test fixture covering at least 1,000 vectors.
A third party reproducing this audit:
packages/crypto-utils/src/games/. The implementation is plain TypeScript; no obfuscation.pnpm --filter crypto-utils test. All 15 game mappers pass their full vector sets.hmac + hashlib, Go's crypto/hmac.The on-site verifier at /provably-fair accepts any (serverSeed, clientSeed, nonce) triplet and returns the exact outcome Bink's server produced. Per-game verifiers are at /games/<game>/verify.
For the rotation cadence and the per-account audit log mechanics, see /seed-rotation-transparency.
Bink.bet is operated by Bink Entertainment LLC (UEI RJXQZDNFMGV6). Methodology and reproducibility approach drawn from common-practice for provably-fair gaming verification (Stake.com, Roobet, Primedice). Open-source provably-fair code lives in packages/crypto-utils/src/games/.