How Hedge works
Three properties define the platform: provably fair outcomes, self-custodial money, and integer-only accounting. Each one is enforceable by the user without trusting us.
Provably fair
Every round on every game derives its outcome from HMAC-SHA256(server_seed, client_seed || nonce). The server seed is committed (its hash is published) before the round. The client seed is yours - you can rotate it whenever you want. The nonce increments per round.
After you rotate the seed pair, the prior server seed is revealed. From that point you (or anyone) can reproduce every round you played by re-running the HMAC with the same inputs. The standalone verifier app at /verifier does this in your browser - paste seed + nonce + multiplier, get the same outcome the site showed.
Self-custodial deposits
Deposits land in addresses derived from a master seed Hedge controls (HD wallet at the standard BIP-44 / BIP-84 / SLIP-0010 paths for each chain). Once on chain, withdrawals are user-initiated and email-confirmed; the operator can't move funds out of your balance without your active confirmation.
Three chains at launch: USDT-TRC20, Bitcoin (P2WPKH segwit), Solana (native SOL). No KYC at any step. Withdrawal velocity caps and a 24-hour cooldown on new destination addresses are the friction we keep against compromised accounts.
Integer-only money
Every monetary value is a bigint of the asset's smallest unit (sats, lamports, 6-decimal USDT). No floats anywhere in the money path. Bet placement and settlement are one DB transaction; balance is a derived view from an append-only double-entry ledger. Daily reconciliation checks that the sum of liabilities never exceeds custody.
Responsible-design defaults
The product is built around four counterweights that never degrade: a real-values toggle that makes Chip displays dual-currency on demand; deposit / loss / wager limits that are set in real currency (not Chips); a 30-minute session modal that surfaces wagered / won / lost totals with three equal-weight buttons; and a self-exclusion switch that silences every in-product channel for the duration of the exclusion.
No fake activity, no manufactured scarcity, no near-miss design, no buried cash-out.