"Provably fair" appears on almost every mystery box site now, but the phrase only means something if you can actually check it. This page ranks the main mystery box and case opening sites by one thing: whether a normal user can take a real result and independently confirm it, using published inputs and a standard hash. Not by bonuses, not by how many boxes they list, and not by anyone's star rating. Just: can you verify it yourself, and how far does that check go?
How this list ranks sites
Every site below is scored on four practical questions, all of which you can confirm for yourself:
- Does it publish its algorithm? The exact hash function and how the seeds are combined into a result. Without this, you cannot recompute anything.
- Can you access your own seeds? The hashed server seed before you play, and the revealed server seed, client seed, and play count after. No seeds, no check.
- Is the result reproducible? Given those inputs, does re-running the published method produce the same outcome the site showed?
- Can you map the result to the item? The strongest sites publish per-item ranges, so you can confirm not just that the draw was honest but that the exact item you received was correct for your number.
We are not an operator and we do not rank boxes by their prizes. The role here is the neutral instrument: we score each site on whether its fairness claim actually holds up to a check, using our own independent verifier, which recomputes results on your device and sends nothing anywhere.
The comparison at a glance
| Site | Publishes its algorithm | Seeds you can access | Roll-to-item checkable |
|---|---|---|---|
| JemLit | Yes, with sample code | Yes | Yes, published win ranges |
| LuxDrop | Yes, runnable code on-site | Yes | Yes, per-item ticket ranges |
| HypeDrop | Yes, one method per mode | Yes | Odds published; ranges vary by mode |
| Boxed.gg | Main steps, plus a linked code sandbox | Yes, server seed revealed after 24h | Yes, per-item ranges shown |
| PackDraw | Yes | Yes, in your account | Ticket space published; item ranges vary |
| Cases.gg | Partly, with on-site verify controls | Yes | Odds published |
| RillaBox | Describes it, no formula published | Not visible today | No |
Fully verifiable: you can reproduce a result yourself
These sites publish their method clearly enough that a real result can be recomputed end to end.
JemLit is the cleanest example. Its fairness page publishes the exact scheme, an HMAC-SHA512/256 over your client seed and nonce keyed by the server seed, along with sample verification code and, importantly, the per-item win ranges. That last part means you can confirm both the roll and the item it maps to. Your seeds are reachable through its Fairness popup. If you want one site to learn verification on, this is it.
LuxDrop publishes runnable code directly on its fairness page, using a straightforward SHA-512 over the server seed, client seed, and nonce, then mapping the result to a ticket range per item. Seeds are visible and there is an on-page verify button. It has a smaller audience than the big names, but on pure checkability it is one of the easiest to confirm.
HypeDrop publishes a specific method for each of its game modes, backed by odds tables at two-decimal precision, and exposes the three inputs you need: client seed, server seed, and play count. The draw is reproducible from those. How far the item mapping goes depends on the mode, but the core check is solid.
Worth a mention in this tier is Ripster.gg, a newer Pokemon, One Piece, and sports-card site that publishes its full algorithm with copy-paste verifier code and its own in-browser check. It has almost no track record yet, but on verifiability it qualifies.
Verifiable, with a catch
These sites give you most of what you need, but one step takes extra effort or is not fully nailed down.
Boxed.gg is the strongest TCG-focused option, covering Pokemon, Magic, and Yu-Gi-Oh. It documents its inputs, reveals the server seed after 24 hours, and shows a drop table plus a per-item "provably fair range" for every box. The one catch is that the exact step that turns the hash into a ticket number lives in a code sandbox it links to rather than on the page itself, so a full check is possible but takes one extra hop.
PackDraw publishes its method plainly: the server seed's SHA-512 hash is shown before you buy, and the revealed server seed, your client seed, and a nonce are combined and normalized to a ticket between 1 and 1,000,000, with battles using a public blockchain block in place of the client seed. Your seeds sit in your account history. One honest caveat: we implement PackDraw's published method in the verifier, but we have not yet confirmed our recomputation against a real published PackDraw result, so treat the tool here as a check against the published method rather than a settled match until that confirmation exists.
Cases.gg builds verification controls into its own fairness page, exposes seeds, and auto-rotates the server seed every 1,000 opens. You can check a result on-site, and its inputs are reachable, though its exact conversion is less cleanly documented than the sites above.
Claims fairness, but you cannot check it today
RillaBox has a fairness page and describes a hashed-result scheme, but it does not expose the seeds or nonce needed to actually reproduce a result. That means the claim cannot currently be independently verified, whatever else is true about the site. This is not an accusation, it is a plain statement of what the check can and cannot reach: without visible seeds, there is nothing to recompute. If it exposes seeds later, that changes.
The same logic rules out sites that publish only pull rates with no seed-commit scheme at all. A published odds table is useful, but it is not the same as being able to prove a specific result.
How to check any of these yourself
Wherever a site exposes seeds, the check is the same, and you can do it right here. The verifier below runs entirely on your own device.
- Before you open, save the hashed server seed. This is the commitment.
- Note your client seed and the play count for the pull you care about.
- Rotate your seed so the site reveals the real server seed.
- Paste the values into the verifier. It recomputes the outcome and confirms the revealed seed matches the hash you saved.
Step 1Where did you play?
Using Ripster box / upgrade: HMAC-SHA256 over clientSeed:noncedetails
HMAC-SHA256 keyed with the server seed over clientSeed:nonce. The first 8 hex characters become a 32-bit integer, divided by 2^32 and multiplied by 100 for a roll in [0, 100). Items are sorted by item ID and selected by cumulative probability: the first item whose cumulative probability is at least the roll wins.
Where to find your numbers on Ripster.gg:
- Before rolling, copy the Server Seed Hash from the Provably Fair modal (also recorded per roll in Account History).
- After the roll, open the Provably Fair modal to copy the Server Seed, Client Seed and Nonce.
- Change your Client Seed anytime in Account Settings; doing so reveals the current Server Seed so all past rolls become verifiable.
Source: Ripster.gg's own fairness page
Step 2Paste your numbers
Runs entirely on your device via your browser's built-in cryptography. Don't take our word for it: open DevTools → Network, click the button, and watch: zero requests.
Runs entirely in your browser. Nothing you paste is sent anywhere.
If you are new to what these inputs are, the what is provably fair guide walks through the whole flow, and what is a server seed covers the single most important input in detail.
What this list does not tell you
The bottom line
If your priority is being able to check what you get, the sites that publish their full method and expose your seeds, JemLit, LuxDrop, HypeDrop, and Boxed.gg for the TCG crowd, are the ones where the "provably fair" label actually means something you can test. PackDraw and Cases.gg are checkable with minor caveats. RillaBox and any site that hides its seeds simply cannot be verified today, no matter how the fairness page reads. Whichever you use, do not take the label on trust: rotate your seeds, paste a real result into the verifier, and watch it check out for yourself.