Workshop ticket, two seats
Settled. 18 of 20 tickets were revealed, so 2 bonds joined the pool and 2 nonces stayed out of the seed. The seed was every revealed nonce sorted and hashed together with the chain value, here a fixed stand-in, and the winners below are what that seed produces when the computation is run again from the published record.
The ticket sheet · 20 cells
The ringed cells belong to the sample holder described below, not to you.
The draw
CZc2dFYh…GLK9g7zA
Sample holderXjux5Ctv…Ynh3TQfc
Audit
seed = SHA256( "rialo-raffle-v1|seed|4|" ‖ sort(18 nonces) each followed by "|" ‖ 1abd0e7316cb6176 )
Recomputed while this page was rendered, from the 18 public nonces and the chain value alone: the winners it produces are 17, 10, which is what the record says. This is a sample whose record was made by the same code, so here the check shows the method and cannot fail. On a live raffle the page recomputes the draw from chain data, and that check can.
Facts
| Creator | JnGCkG…PrKBMF |
|---|---|
| Prize deposited | 3.00 RLO |
| Ticket price | 0.150 RLO |
| Reveal bond | 0.050 RLO |
| Supply | 20 |
| Sold | 20 |
| Revealed | 18 |
| Outstanding | 2 |
| Bonds forfeited | 0.100 RLO |
| Winners set | 2 |
| Pool | 6.10 RLO |
| Winners drawn | 17, 10 |
| Chain seed | 1abd0e7316cb6176 |
| Seed | 59638a7fd51dc3cce2adc72b95407639c23ddccdb007b84618470a2de98d7ddc |
Sample holder
| Ticket 03 | Revealed |
|---|---|
| Ticket 17 | Won 3.05 RLO |
These belong to one address kept in the sample record, not to any wallet and not to you. Nothing was read from a browser to build this page. It is here as a worked example, so the bed can show what a held ticket and a revealed one look like.
Activity
- won ticket 17 CZc2…g7zA3.05 RLO
- won ticket 10 Xjux…TQfc3.05 RLO
- revealed ticket 11 Dg6y…ji7Y
- revealed ticket 20 JmTT…jnPW
- revealed ticket 09 HEq8…TFuo
- revealed ticket 18 RZ4Q…qNHd
- revealed ticket 14 GWvn…Kdwk
- revealed ticket 16 UA4J…g5zx
- revealed ticket 01 Cdzy…iZhN
Sample raffle 0004 is settled. It is fixed demonstration data, not an account on chain. 20 tickets sold, 18 revealed, 2 bonds forfeited into a pool of 6.10 RLO. Tickets 17 and 10 won 3.05 RLO each, drawn from a seed anyone holding the public reveals can recompute. The replay walks exactly this and invents nothing.
1. the 18 revealed nonces, sorted
Sorted, because hashing them in the order they arrived would pay whoever reveals last.
2. the preimage as bytes, chain value last
These are the 337 bytes the seed is the SHA-256 of, written as hex: the text “rialo-raffle-v1|seed|4|” as UTF-8, then each sorted nonce’s 16 bytes followed by one “|” byte (7c), then the chain value’s 8 bytes. Hash them as bytes, decoded from the hex, and you get the seed below; hashing the hex as text gives a different digest. The chain value, the last 16 characters, is read at the draw after every nonce is public, so a holder deciding whether to stay silent cannot know it. Whoever produces the draw block may be able to influence it.
3. the seed
4. the draw, 2 samples without replacement
- Sample 1 of 2index 14 of 18 gives ticket 17
- Sample 2 of 2index 8 of 17 gives ticket 10
Each sample is 48 bits of a SHA-256 keystream over the seed, reduced modulo the pool that is still standing. The pool shrinks between the samples, which is why the second winner could not be the first. The draw is randomized and checkable, not unbiasable: whoever produces the draw block may be able to try other chain values once every nonce is public, and a holder can withhold a reveal to move the seed at the cost of their bond.