Is CryptoPot Fair? How a Weekly Draw Lottery Ensures Honest Results

"Provably fair" means something different here

If you've spent any time researching crypto gambling, you've seen the phrase "provably fair." It comes up constantly on crypto casino sites — slots, dice, roulette. In that context it refers to a cryptographic technique where the outcome of each game round is mathematically verifiable by the player after the fact, using a server seed and a client seed.

That system was designed for instant casino games. It does not map cleanly onto a weekly draw lottery, and applying casino-style "provably fair" language to a lottery format is often misleading.

CryptoPot is not a casino game. The fairness model is different — and in some ways more straightforward. Here is exactly how it works.

What fairness means in a weekly draw lottery

In a casino game, fairness means: given the rules and the RNG, could the house have manipulated this specific spin to produce a different outcome? Cryptographic proofs address that question.

In a weekly draw lottery, the fairness questions are different:

Was every eligible ticket actually included in the draw? No ticket secretly excluded or duplicated.
Was the winning ticket drawn randomly, without the operator knowing which ticket would be selected in advance? No ability to pick a winner that benefits the house.
Were the payouts calculated correctly and sent to the right people? No manipulation of prize amounts or recipient addresses after the draw.
Is there a complete record of what happened? Can the process be reviewed if a player disputes the outcome?

These are the questions CryptoPot is designed to answer — not the slot-machine RNG question.

How CryptoPot addresses each one

1. Every eligible ticket is included

Tickets are eligible for the draw if their NOWPayments transaction has confirmed on the Binance Smart Chain before ticket sales close at 6:00 PM AST on Sunday. The 2-hour window between ticket close (6:00 PM) and draw time (8:00 PM) exists specifically to allow any pending transactions to settle — so no legitimate ticket gets excluded due to a slow confirmation.

The admin panel displays the full list of eligible tickets before the draw runs. This list is locked at 6:00 PM and cannot be modified after that point.

2. The winning ticket is drawn randomly

One ticket is selected at random from the eligible pool. Every ticket has exactly equal weight — a player holding one ticket and a player holding ten tickets are entered proportionally with no other adjustments.

The draw is admin-triggered, not fully automated, which allows for a human review step before it runs. This is a deliberate choice: it means there is a person who has confirmed the eligible ticket list looks correct before the draw fires, rather than a fully automated process that could theoretically run on a corrupted or incomplete pool.

The randomness is generated at draw time — not pre-calculated or held in advance. There is no way for the operator to know which ticket will be selected before the draw runs.

3. Payouts are calculated and sent automatically

Once the winning ticket is drawn, the payout calculation runs automatically:

Consolation prizes are assigned to all qualifying tickets (3-of-5 and 4-of-5 matches)
Affiliate earnings are calculated from that week's referred player entries
The major winner receives the remainder of the winners pool

Every payout record is written to the database before any funds move — including the recipient wallet address, amount, type, and timestamp. This creates an immutable record of what was owed to whom before the payment batch executes.

Payouts are then sent via NOWPayments mass withdrawal to each winner's registered USDT BEP20 wallet address. The address used is the one stored in the player's account — not a dynamically generated or editable address.

4. A complete record exists

Every draw produces a permanent record:

The eligible ticket list at close time
The winning ticket and winning numbers
Every consolation match identified
Every payout attempt — amount, recipient address, timestamp, outcome (success or failure)
Any failed payouts and their retry or resolution status

This log is visible in the admin panel and is never deleted. If a player believes their payout was incorrect, there is a full audit trail to review.

What CryptoPot does not claim

It is worth being honest about what this model is not:

It is not a smart contract lottery. The draw logic runs on a server, not on a public blockchain smart contract. This means the draw process is not independently verifiable on-chain the way a fully decentralised smart contract lottery would be. We are asking players to trust that the server-side draw is run honestly — and providing the audit trail and payout transparency as the evidence for that trust.

The admin can see the eligible ticket list before the draw. In a fully decentralised system, even the operator would not know which tickets are in the pool. In CryptoPot's model, the admin reviews the list before triggering the draw. The control is that the list is locked before the draw runs and the entire log is permanent and reviewable after.

Random number generation is server-side. It is not derived from a blockchain hash or a publicly verifiable source. This is a known limitation of the current architecture.

We are not the right choice for a player who requires on-chain, cryptographically verifiable randomness. We believe most players are better served by a clear, auditable, human-reviewed process with transparent payout logs than by a technically "provably fair" system that is impossible for most people to actually verify.

The security model that matters most

The most important security decisions in CryptoPot are not about the draw randomness — they are about protecting the payment flow.

Payment credentials are server-side only. The wallet addresses and API keys that control where player funds go are stored as environment variables on the server. They cannot be changed through any admin interface or database edit. Changing them requires a code deployment. This directly addresses the attack vector that took down the previous site — an attacker who gained admin access could not redirect payouts to a different wallet.

Payout addresses are registered wallets. Winnings go to the wallet address a player registered at account creation. There is no post-draw redirection, no manual override by admin, and no "change payout address" form that could be abused.

All payout attempts are logged immutably. Every outgoing payment attempt is recorded with the exact recipient address used, before and after the transaction. If anything went wrong, there is a timestamped record of what was attempted.

How results are published

After each draw, the results are posted publicly on the CryptoPot homepage:

The winning numbers for the week
Each winner identified by partial wallet address (e.g., 0x1a2b...9f3c) and payout amount
Full addresses are never displayed publicly — privacy is preserved while transparency is maintained

Any player can verify their own payout by checking their wallet transaction history on BscScan using their wallet address.

The bottom line

CryptoPot is a server-side weekly draw lottery with a human review step before each draw, an immutable payout audit trail, and public results published after every draw. It is not a smart contract lottery and does not make cryptographic provably-fair claims.

What it does offer is a clear, auditable process where every eligible ticket is included, every payout is logged before it is sent, results are published publicly, and the payment infrastructure is hardened against the most common attack vector in crypto platforms.

For a player who wants to understand exactly what they are entering — how the draw works → and how to verify a crypto lottery is legitimate → are the right places to start.

Ready to enter?

Enter this week's draw →

Draw every Sunday at 8:00 PM Atlantic Standard Time (AST). Ticket sales close at 6:00 PM AST. All payouts sent automatically via NOWPayments to registered USDT BEP20 wallet addresses.