LIMBO PROVABLY FAIR VERIFIER
Limbo strips the multiplier game to its skeleton: pick a target, get a number, win if the number clears it. The number is pure seed-math — type a revealed pair and nonce here and the identical multiplier falls out, along with every intermediate step.
Every mode first checks the commitment: SHA-256(server seed) must equal the hashed seed you were shown before betting. Stake and Shuffle seed games use HMAC-SHA256(server seed, "clientSeed:nonce:cursor") per their published docs; BC.Game modes are ported from its open-source verifier; Stake and BC.Game crash use the game hash and salt. For Roobet and other casinos we could not find a byte-level spec, so only the commitment is checked. Sources are listed in the supported list.
Calculation Steps
Think of Limbo as Crash with the animation deleted. No rocket, no timing, no cash-out reflex — you commit to a target, the multiplier appears, done. What remains is the purest expression of the provably-fair idea: a single float, one inversion, one comparison. That austerity makes Limbo the fastest game to audit and the clearest one for understanding how seed-derived randomness behaves.
Not sure which to choose? See what we recommend for each type of player.
HOW LIMBO RESULTS ARE CALCULATED
After checking that SHA-256(revealed server seed) matches the hashed seed you were shown, Limbo turns a single random float into a multiplier with a 1% house edge. The float is the first 4 bytes of HMAC-SHA256(serverSeed, "clientSeed:nonce:0"); the conversion differs by casino:
- Stake (stake.com/provably-fair/game-events):
max(floor(1e8 / (float × 1e8) × 0.99 × 100) / 100, 1). Anything that would fall below 1.00x is shown as 1.00x. - Shuffle (help.shuffle.com 9286069):
0.99 × 2^24 / (2^24 × float + 1), rounded down to two decimals. Shuffle’s published formula has no 1.00x floor, so the tool shows the value exactly as the formula gives it.
Dry run from Shuffle’s own article: server seed def, client seed abc, nonce 1 give the float 0.43053963 and a Shuffle multiplier of 2.29x (Stake’s formula gives 2.29x for the same float too). Our earlier version of this tool added 1 to the float before inverting and had no 1.00x floor; it was off by a cent in about 1% of rounds and could show an impossible 0.99x. That is fixed (22 Oct 2026).
WHAT THE MULTIPLIER DISTRIBUTION ACTUALLY LOOKS LIKE
Because the result is essentially 0.99 divided by a uniform float, the chance of clearing any target m is about 0.99 / m. Concretely: a 2.00x target lands roughly 49.5% of the time, 10x about 9.9%, 100x about 0.99%, and 1,000x once per ~1,010 bets. The median round sits near 1.98x — half of all multipliers are below it — and at every target your expected return is the same 99%. So a long drought under 5x is not the site “cooling you off”; it is a heavy-tailed 1/x curve doing what heavy tails do. Knowing the curve is the difference between auditing a game and just glaring at it.
WHY BOTHER CHECKING A NUMBER?
Precisely because Limbo shows you nothing else. With no animation to scrutinise, the entire round is one printed multiplier — and the natural fear is that the multiplier was chosen after the casino saw your target, always landing a hair beneath it. Recomputing the round dissolves that fear: the float came from a server seed committed by hash before the bet and a client seed the operator never controlled, so the value existed independently of anything you typed. One caveat survives every successful check — the 0.99 factor is a permanent 1% house margin — and the underlying commitment scheme is explained in full in our guide.
Related Resources
Play Limbo: Crash & Limbo Games
Strategy: Lowest House-Edge Games
Sites scored on verifiability: the fair-casino leaderboard