Duel.com holds PF-2026-DUEL certification under Framework v1.0
- Certified
- June 8, 2026
- Audit period
- March–May 2026
- Next review
- June 8, 2027
- Scope
- 10 in-house games
You don't have to trust us. You can check our work.
All 10 game repositories publish the code, data and checks. Re-run the suite locally.
Browse all 10 repositories
Game audit matrix
Open a game to inspect its full audit, test results and source repository.
| Game | RNG model | Live bets | Sims | Simulated RTP | Proven RTP | Result | |
|---|---|---|---|---|---|---|---|
| Plinko | HMAC-SHA256 | 8,100 | 27M | 99.917% | 99.9% | Pass | |
| Dice | HMAC-SHA256 | 6,700 | 98M | 99.922% | 99.9% | Pass | |
| Mines | HMAC-SHA256 | 7,050 | 24M | 99.904% | 99.9% | Pass | |
| Keno | HMAC-SHA256 | 5,100 | 40M | 99.970% | 99.9% | Pass | |
| Beef | HMAC-SHA256 | 6,450 | 4M | 99.147% | 99.2% | Pass | |
| Crash1 finding | HMAC-SHA256 + drand | 1,100 | 5M | 99.872% | 99.9% | Pass | |
| Castle Roulette | HMAC-SHA256 + drand | 1,350 | 5M | 100.007% | 100.0% | Pass | |
| Video Poker1 finding | HMAC-SHA256 | 5,400 | 10M | — † | 99.9% | Pass | |
| Blackjack | HMAC-SHA256 | 6,000 | 10M | 99.467% | 99.4296% | Pass | |
| Groomer's Van2 findings | HMAC-SHA256 → PCG32 | 6,225 | 30M | 100.06% | 99.9720% | Pass |
| Game / result | Live bets | Sims | Sim. RTP | Proven RTP | RNG model |
|---|---|---|---|---|---|
| PlinkoPass | 8,100 | 27M | 99.917% | 99.9% | HMAC-SHA256 |
| DicePass | 6,700 | 98M | 99.922% | 99.9% | HMAC-SHA256 |
| MinesPass | 7,050 | 24M | 99.904% | 99.9% | HMAC-SHA256 |
| KenoPass | 5,100 | 40M | 99.970% | 99.9% | HMAC-SHA256 |
| BeefPass | 6,450 | 4M | 99.147% | 99.2% | HMAC-SHA256 |
| CrashPass1 finding | 1,100 | 5M | 99.872% | 99.9% | HMAC-SHA256 + drand |
| Castle RoulettePass | 1,350 | 5M | 100.007% | 100.0% | HMAC-SHA256 + drand |
| Video PokerPass1 finding | 5,400 | 10M | — | 99.9% | HMAC-SHA256 |
| BlackjackPass | 6,000 | 10M | 99.467% | 99.4296% | HMAC-SHA256 |
| Groomer's VanPass2 findings | 6,225 | 30M | 100.06% | 99.9720% | HMAC-SHA256 → PCG32 |
RTP values apply to each report’s tested configuration and strategy. Simulated RTP is a Monte Carlo estimate; proven RTP is our own derivation from the published rules. † Video Poker’s return depends on strategy; only its optimal-play proof is shown.
4 input-validation findings across 3 gamesAudit verdict
Five independently tested control areas underpin the certification.
All 5 control areas passed10 games · independently verified
DeterminismAll 10 games fully reproducible — every outcome recomputable from (serverSeed, clientSeed/drand, nonce, state)
RNG IntegrityHMAC-SHA256 with bias-free rejection sampling across all games; 2 games (Crash, Castle Roulette) additionally bind drand public beacon
Live ↔ Verifier Parity100% match — 53,475 / 53,475 live bets reproduced exactly against an independent verifier
RTP Validation253M simulated rounds across all games; every theoretical RTP independently re-derived from first principles and matched within statistical tolerance
Fairness Integrity151 game integrity checks · 147 pass · 4 findings — all at the API input-validation layer, none affecting outcome determinism, RTP, or payout integrity · no fairness failures
Findings & disclosures
Four input-validation findings were disclosed to Duel. No fairness failure was recorded.
Malformed payloads receive an HTTP 200 response, including game-specific request probes.
View probesAuto-cashout values above the theoretical maximum crash point are accepted.
View probesThese findings concern API request validation. The audited cryptographic core, RNG, RTP derivation and payout logic operated correctly. Reproducible probes are published in Section 5 of each affected game report.
Audit process
Each game followed the same framework, with an independent implementation and captured live bets.
- 01InitiatedScope & specification
- 02Bet CaptureLive bets recorded
- 03Parity TestingIndependent replay
- 04RTP Simulation253M rounds
- 05Integrity Testing151 checks
- 06Certification8 June 2026
RNG, reproducibility, RTP and payout integrity within game logic. Platform finances, licensing, infrastructure, third-party titles and promotional programs are outside this audit.
Transparency & verification
Inspect the code, reproduce the audit or check a result from its disclosed inputs.
Reproduce the audit
Every game has a public repository with its verifier, captured dataset and simulation harness.
- Choose a game repository
- Clone the audited commit & install
- Run npm test
Verify a single bet
Recompute a game result from its revealed seeds and public inputs using the independently audited implementation.
Open ProvablyFair verifier
Duel’s own verifier ↗Operator-run tool. Listed separately from the independent ProvablyFair verifier.
Read the methodology, scope and conclusions in the executive summary.