Dice games

Dice Crypto Explained: How Cryptocurrency Dice Rolls Are Made, Checked and Priced

Quick answer

Dice crypto games generate a number from 0 to 100 using hashed seeds, and you win if it lands under (or over) your target. Your win chance is set by the target, and the payout is set by the house edge: at 1%, the multiplier is 99 ÷ win chance. Provably fair seeds let you recheck every roll after it happens.

Key facts
Early exampleSatoshi Dice, a Bitcoin gambling site launched April 2012
How rolls are madeHMAC-SHA256 of server seed, client seed and nonce
Multiplier at 1% edge99 ÷ win chance (e.g. 25% → 3.96x)
Roll under 25 vs roll over 75Same 25% chance, same payout
Check any game's edge1 − win chance × multiplier
Our RTP check1,000,000 rolls per target, all within 0.06 points of 99%

Dice crypto games are the simplest bets in a crypto casino: a number between 0 and 100 is generated, and you win if it lands under (or over) a target you set. Your win chance equals the size of the range you pick, and the multiplier is set by the house edge. At the 1% edge we modelled, roll under 25 wins 25% of the time and pays 3.96x.

What makes cryptocurrency dice different from a dice app is how the roll is produced. Each result comes from hashed seeds that you can check after the bet. This page covers where crypto dice came from, how a provably fair roll is calculated, how roll-under and roll-over compare, and how to read the house edge of any dice game from two numbers on the screen. For bankroll simulations and classic two-dice odds, see our dice game guide.

What crypto dice is, and how it differs from real dice

A physical die has six faces, so it can only produce six probabilities. Crypto dice replaces the die with a number, usually shown with two decimals, which means you can set almost any win chance you like: 2%, 33%, 90%.

Each bet has three inputs:

  1. Stake, for example 1 USDT.
  2. Target and direction: roll under a number, or roll over it.
  3. Roll. A win pays stake × multiplier; a loss costs the stake.

The game shows the win chance and the multiplier before you bet. That transparency is a big part of dice's appeal: you don't need a strategy chart or a payout table, just two numbers.

A short history of cryptocurrency dice

Dice games appeared early in Bitcoin's history. A well-documented example is Satoshi Dice, a Bitcoin gambling website launched in April 2012 by Erik Voorhees, according to its Wikipedia entry.

The basic idea is the same today: pick a chance, see the payout, get a result. Modern crypto dice usually follows a "provably fair" scheme in which the casino commits to a secret before you bet and reveals it afterwards, so you can recompute every roll yourself.

How provably fair dice rolls are generated

One major operator publishes its provably fair implementation in detail. The scheme uses four ingredients:

  • Server seed: a secret random value chosen by the casino. You are shown its SHA-256 hash before you play, which locks the casino into that seed without revealing it.
  • Client seed: a value you can set yourself, so the casino can't know the full input in advance.
  • Nonce: a counter that goes up by one with every bet you place on that seed pair.
  • Cursor: a position counter used when a game needs more random bytes than one hash provides.

The game feeds these into HMAC-SHA256, a keyed hash function. HMAC is defined in RFC 2104 and SHA-256 in NIST's Secure Hash Standard. The hash output is split into groups of bytes and turned into floats between 0 and 1, and the dice game scales a float onto its 0 to 100 range.

roll = f(HMAC_SHA256(server seed, client seed : nonce : cursor))

f converts the first bytes of the hash into a number between 0 and 1, then scales it to the dice range. The exact scaling is in each game's published code.

How to check a crypto dice roll yourself

  1. Before betting, note the hashed server seed and set your own client seed.
  2. Play as normal. Each bet uses the next nonce.
  3. Rotate to a new seed pair. The casino then reveals the old server seed.
  4. Hash the revealed seed with SHA-256 and confirm it matches the hash you saw in step 1.
  5. Recompute a few rolls with the published code (most casinos also offer a verifier page) and compare them with your bet history.

If the hash matches and the rolls match, the casino could not have changed the results after seeing your bets. Verification proves the roll wasn't tampered with. It does not change the odds or remove the house edge.

Roll under vs roll over

Roll-under wins when the result is below your target. Roll-over wins when it is above. On a 0 to 100 range, mirrored bets have the same chance:

roll under t: win chance = t roll over t: win chance = 100 − t

Roll over 75 → 100 − 75 = 25%, exactly the same as roll under 25.

Because the multiplier depends only on the win chance, mirrored bets pay the same. Here are mirrored pairs at a 1% edge, from our dice data:

Mirrored roll-under and roll-over bets have identical odds
Roll underEquivalent roll overWin chanceMultiplier (1% edge)
Under 5Over 955%19.8000x
Under 10Over 9010%9.9000x
Under 25Over 7525%3.9600x
Under 33Over 6733%3.0000x
Under 50Over 5050%1.9800x

Games differ slightly at the boundaries: some range from 0.00 to 99.99, some to 100.00, and a result exactly equal to the target may count as a loss. That's why the win chance a game displays is the number to trust, not a mental shortcut. Switching direction mid-session changes nothing about your expected result.

House edge settings: how to read them

Crypto dice multipliers are set from the win chance and the house edge:

multiplier = (100 − house edge %) ÷ win chance %

At a 1% edge: 99 ÷ 50 = 1.98x for a 50% chance; 99 ÷ 25 = 3.96x for a 25% chance.

Turn it around and you can find the edge of any dice game from the screen:

house edge = 1 − win chance × multiplier

50% chance paying 1.98x: 1 − 0.50 × 1.98 = 0.01, a 1% edge.

Edges vary between games, and we don't quote any particular casino's setting. To show how much the setting matters, here is what different multipliers on a 50% bet would imply. These multipliers are illustrations of the formula, not figures from a specific site:

Multiplier shown for a 50% chance Return per 100 USDT bet House edge Expected cost of 1,000 bets of 1 USDT
1.98x 99 USDT 1% 10 USDT
1.96x 98 USDT 2% 20 USDT
1.94x 97 USDT 3% 30 USDT
1.90x 95 USDT 5% 50 USDT

Small differences in the multiplier compound over volume. Dice is fast, and 1,000 bets can take minutes with auto-bet. Our dice odds calculator shows the multiplier and expected loss for any target at a 1% edge, which gives you a benchmark to compare against.

What our simulation shows

We rolled 1,000,000 simulated results at five targets with a 1% edge and measured the return to player (RTP), the share of all money bet that came back as winnings.

Observed RTP over 1,000,000 rolls per target Theoretical RTP 99%
Under 10 98.993% Under 25 98.979% Under 49.5 99.057% Under 75 99.002% Under 90 99.013%

Every target returned between 98.98% and 99.06%, against a theoretical 99%. Low targets and high targets cost the same over a large number of bets. What differs is the ride: in our 20,000-session bankroll test, a 10% target doubled a 100 USDT bankroll 43.94% of the time, while a 90% target never did. The full session results are in our crypto roll-under dice guide.

Strategy: what works and what doesn't

What doesn't work:

  • Seed tricks. Changing your client seed, resetting the nonce or waiting for a "fresh" server seed doesn't shift the odds. Every seed pair produces results with the same distribution.
  • Martingale and auto-bet scripts. Doubling after losses wins small amounts often and loses large amounts occasionally. The Wizard of Odds explains why it doesn't dent the edge; a script only makes it happen faster.
  • Reading the history. A streak of high rolls doesn't make a low roll due. Treating independent results as linked is the gambler's fallacy.

What does help:

  • Check the edge first. Multiply win chance by multiplier before you play. A lower edge is the only thing that lowers your long-run cost.
  • Pick volatility on purpose. Low win chances swing hard; high win chances grind slowly. Neither changes the edge.
  • Control speed. Expected loss scales with total amount bet, so fewer, smaller bets cost less.
  • Verify a sample of rolls after each seed rotation.

Playing crypto dice with USDT

Most crypto dice games accept several coins. USDT keeps your bankroll in dollar terms, so a session's result isn't mixed up with BTC or ETH price moves. Two practical points:

  • Fees vs edge. On a small bankroll, one network fee can cost more than the house edge on dozens of bets. Our USDT payment guides compare networks.
  • Stake size. With 1% expected loss per bet, 1 USDT bets cost about 0.01 USDT each on average. Size bets so your bankroll survives normal swings.

If you like seeing exact odds, crash games use the same 99 ÷ x logic for a rising multiplier, and our online dice guide covers non-gambling dice rollers and polyhedral dice probability. Everything else on dice is on our dice games hub.

Common mistakes

  • Assuming every dice game uses a 1% edge without checking the multiplier.
  • Thinking roll-over and roll-under have different odds at the same win chance.
  • Believing a verified game can't lose money: provably fair proves honesty, not profit.
  • Letting auto-bet run thousands of rolls without a stop-loss.

Frequently asked questions

What is crypto dice?

Crypto dice is a casino game where a random number between 0 and 100 is generated for each bet and you win if it lands on your side of a target you choose. It is played with cryptocurrency such as BTC or USDT, and most versions are provably fair, meaning you can recompute each roll from published seeds after the bet.

Is roll over better than roll under?

No. Roll over 75 and roll under 25 both win 25% of the time and, at the same house edge, pay the same multiplier. The direction is a display choice. What matters is the win chance and the multiplier the game shows, which together tell you the house edge.

Can changing my client seed improve my odds?

No. The client seed exists so the operator can't pick results in advance, not to give you an edge. Any seed produces rolls with the same distribution, and the house edge is built into the multiplier, not the seed. Changing seeds after losses is a form of the gambler's fallacy.

What house edge do crypto dice games use?

It varies by game, so check rather than assume. Multiply the win chance by the multiplier shown: if 50% pays 1.98x, the return is 99% and the edge is 1%. Our data and examples use a 1% edge; a lower multiplier at the same win chance means a higher edge.

When did cryptocurrency dice start?

One well-documented early example is Satoshi Dice, a Bitcoin gambling website launched in April 2012 by Erik Voorhees. Dice suits crypto well because the win chance and payout can be shown on every bet.

Sources

  1. Satoshi Dice — Wikipedia. Bitcoin gambling website launched in April 2012; founder Erik Voorhees
  2. Provably Fair: Implementation — Stake.com. Server seed hashed before play, client seed, nonce, cursor; HMAC_SHA256 output split into floats
  3. RFC 2104: HMAC — IETF. HMAC keyed hashing
  4. FIPS 180-4 Secure Hash Standard — NIST. SHA-256 specification
  5. Doctrine of the maturity of the chances — Encyclopaedia Britannica. Gambler's fallacy: falsely assumes plays are dependent
  6. Martingale Betting System — Wizard of Odds. Martingale does not dent the house edge