How We Run and Verify BOOF Poker
We explain how our dealer shuffles and settles hands, what the completed-hand verifier checks, what stays private, and where verification stops.
How we run the game
We run BOOF Poker on centralized BOOF servers. It is not an on-chain Poker protocol. Our dealer creates the deck, delivers private cards, advances the action clock, settles pots, and archives completed hands.
For each hand, we derive a deterministic shuffle with HMAC-SHA256 and commit to a hash of the secret server seed. After the hand is complete, authorized server code checks the private archived seed against that commitment and reconstructs the visible deal. The public integrity record reports those server checks without disclosing the seed.
We have not completed an independent audit of this system, and we do not describe it as independently proven fair. Seed verification cannot prove which code ran in production, that private information never leaked, or that players did not collude.
How you can check a completed hand
- We create a secret server seed and publish its SHA-256 hash with the hand state. The seed remains private after the hand.
- We run a Fisher–Yates shuffle using HMAC-SHA256 values derived from the seed and messages shaped as poker:{nonce}:{index}.
- We keep the seed private even after settlement because it could reconstruct opponents’ folded cards.
- After we archive the hand, our server hashes the private seed, compares it with the commitment, rebuilds the deck, and compares the board and archived cards with the deal.
- Hand history links to the server-reported integrity record. Without the seed, you cannot independently reproduce the shuffle from that record; it is not an independent fairness proof or an audit of the service.
What we show and what we keep private
| Information | Who can see it | Why |
|---|---|---|
| Community cards and public actions | Everyone at the table | They define the shared game state. |
| Your hole cards | You and our dealer | Opponents must not learn them before showdown. |
| An opponent’s folded cards | That opponent and authorized BOOF systems | Folding does not make private cards public. |
| Active and archived server seeds | Authorized BOOF server processes only | Disclosure could reveal future cards or reconstruct private folded cards. |
| Archived hand and moderation records | Authorized BOOF staff and the bounded public verifier | We preserve evidence without exposing unnecessary private information. |
How we settle pots, refunds, and splits
We return uncalled excess before we build the final pots or apply any table fee. We create main and side pots from each contribution layer and restrict every layer to eligible players who have not folded.
Table fees
- We do not apply a table fee when no community card was dealt (no-flop-no-drop), and we exclude sit-and-go tournament state from table charges.
- When a table fee applies, we take a percentage of the called pots, up to a big-blind cap.
- BOOF-denominated tables are rake-free. We charge them no table fee.
- On SOL and USDC tables, our current operator default is 5% of called pots, capped at 3 big blinds. We stamp each table with its rate · cap · version, for example rake-5-3.
- We show the live stamp on the public lobby, on every table card, and in the join response (`rake`). We can change the settings; the dealer restamps the table between hands, and the live stamp is the fee that applies.
Side pots, tied hands, and odd units
- We build all-in contributions into separate layers. You can win only a layer for which your seat remains eligible.
- We divide tied pots in the asset’s minimum supported units instead of using unbounded decimals.
- If one minimum unit remains after an equal split, we award it clockwise from the first eligible seat after the dealer button.
Bots, collusion, and multiple accounts
A verifiable shuffle does not stop players from sharing cards, coordinating actions, automating decisions, transferring value through play, or controlling multiple accounts.
We exclude our agent room from the public table catalog and link it separately from the lobby as Agent Arena. It accepts agent API seats rather than Phantom wallet players. That separation does not prove that every public opponent is human or that we detect every form of automation.
We have not yet published a complete policy covering collusion, bots, multiple accounts, investigations, enforcement, shared households, or appeals.
What happens when you disconnect
Our dealer remains authoritative when your browser disconnects. Normal action deadlines continue, and completed settlement does not pause. When you reconnect, we send the current table state back to your client.
We have not published an uptime guarantee, reconnect grace period, or guaranteed dispute-response time.
How to preserve a disputed hand
- Record the table slug, hand number, approximate time, asset, and your seat.
- Open hand history and save the verifier URL and its commitment and deal results.
- Save screenshots and the visible action sequence without exposing credentials.
- Describe what you observed instead of presenting an unverified conclusion as fact.
- Use only a support route published on boof.gg. We have not yet published a verified public route.
What verification cannot prove
Our completed-hand verifier does not prove treasury solvency, correct withdrawals, absence of bots or collusion, production deployment integrity, incident-response quality, or legal compliance. It also does not reveal an opponent’s folded private cards merely because another player requests them.
Frequently asked questions
Is BOOF Poker on-chain?
No. We use Solana for deposits and withdrawals. We handle Poker actions, cards, table balances, and settlement on BOOF-operated servers and ledgers.
Can I verify a completed BOOF Poker hand?
You can inspect server-reported commitment and deal checks. We do not disclose the seed because it would reveal private cards, so you cannot independently reproduce the shuffle from the public record. This is not an independent fairness proof or audit.
Can another player see my folded cards?
We redact folded opponents’ private cards from public views. We have not completed an independent security audit of every production path.
Can seed verification stop collusion?
No. It checks part of the shuffle and deal. We need separate monitoring, investigation, enforcement, and appeal controls for player behavior.
Does BOOF charge an unmatched bet?
No. We return uncalled excess before rebuilding pots and applying any table fee. Each table shows its live fee stamp (rate · cap · version) in the lobby and on its table card.
How does BOOF divide an odd unit in a tied pot?
We divide the pot in the asset’s minimum units and award any remaining unit clockwise from the first eligible seat after the dealer button.
Verify it yourself
Use our first-party links to inspect the product directly. External links explain general rules or wallet safety and do not endorse BOOF.