Public verification of the giveaway

The short version, no fluff

Winners are picked 100% at random and the result is verifiable by anyone. You don't have to trust us: below we explain why we couldn't cheat even if we wanted to.

Giveaway data

Complete sequence history

Current winners: Minecraft Hosting · spot 1 → #502051 (d***@g***.com) · Minecraft Hosting · spot 2 → #526368 (s***@h***.com) · Minecraft Hosting · spot 3 → #224394 (l***@g***.com) · Minecraft Hosting · spot 4 → #515548 (l***@h***.com) · Minecraft Hosting · spot 5 → #232901 (r***@g***.com) · Minecraft Hosting · spot 6 → #543524 (t***@g***.com) · Minecraft Hosting · spot 7 → #353533 (s***@g***.com) · Minecraft Hosting · spot 8 → #986645 (j***@g***.com) · Minecraft Hosting · spot 9 → #588688 (c***@g***.com) · Minecraft Hosting · spot 10 → #271381 (r***@g***.com) · Minecraft Hosting · spot 11 → #971971 (d***@g***.com) · Minecraft Hosting · spot 12 → #587556 (m***@g***.com) · Minecraft Hosting · spot 13 → #476639 (l***@g***.com) · Minecraft Hosting · spot 14 → #192323 (m***@g***.com) · Minecraft Hosting · spot 15 → #437560 (i***@g***.com) · Minecraft Hosting · spot 16 → #636935 (r***@g***.com) · Minecraft Hosting · spot 17 → #969874 (j***@g***.com) · Minecraft Hosting · spot 18 → #400436 (y***@g***.com) · Minecraft Hosting · spot 19 → #184858 (v***@g***.com) · Minecraft Hosting · spot 20 → #861740 (j***@g***.com)

Or by hand, with Python

It verifies the snapshot checksum, that the number used is EXACTLY the one published by the drand beacon, and that EVERY published iteration k comes from that number. Skips (already-awarded participant) are declared with their reason in the same API.

import hashlib, json, urllib.request

data = json.load(urllib.request.urlopen("https://sorteos.holy.gg/api/public/verificacion"))
ids  = data["snapshot"]["entryIds"]
seed = data["giveaway"]["drandRandomness"]   # numero aleatorio publico de drand

# 1) checksum == sha256(snapshot)
canon = json.dumps(ids, separators=(",", ":")).encode()
assert hashlib.sha256(canon).hexdigest() == data["snapshot"]["checksumSha256"]

# 2) el numero es EXACTAMENTE el que publico el faro drand (no lo pusimos nosotros)
chain = data["giveaway"]["drandChain"]
rnd   = data["giveaway"]["drandRound"]
beacon = json.load(urllib.request.urlopen(f"https://api.drand.sh/{chain}/public/{rnd}"))
assert beacon["randomness"] == seed, "el seed no coincide con drand"

# 3) k -> ids[sha256(seed:k) mod N]
for r in data["rolls"]:
    d = hashlib.sha256(f"{seed}:{r['k']}".encode()).hexdigest()
    assert ids[int(d, 16) % len(ids)] == r["entryId"], f"k={r['k']} mismatch"

print("OK")
for r in data["rolls"]:
    lot = r.get("prizeLot") or {}
    seat = f"{lot.get('label')} · lugar {r['seatIndex']}" if r.get("seatIndex") else ""
    print(r["k"], r["entryId"], r["status"], seat, r.get("reason") or "")