Poker Fairness & Game Integrity
How BOOF Poker creates and verifies completed deals, protects hidden cards, records hands, and limits what seed verification can establish.
The short answer
BOOF Poker is centralized and server-authoritative, not an on-chain Poker protocol. The dealer derives a deterministic shuffle with HMAC-SHA256, commits to a server-seed hash, archives the revealed seed after a completed hand, and exposes a single-hand endpoint that checks the commitment and reconstructs the visible deal.
That mechanism is useful evidence, but this page does not call the product independently proven fair. No independent audit was found, and seed verification alone cannot establish that production always ran approved code, that private information never leaked, or that players did not collude.
How a completed hand can be checked
- The server creates a secret seed and publishes its SHA-256 hash as the commitment associated with the hand state.
- The engine runs a Fisher–Yates shuffle using HMAC-SHA256 values derived from the seed and messages shaped as poker:{nonce}:{index}.
- While cards remain private, the active seed must remain secret so undealt cards cannot be predicted.
- After archival, the verifier hashes the revealed seed, compares it with the stored commitment, reconstructs the deck, and compares the board and tabled hands with the archived deal.
- The history panel links completed hands to the verifier. Its outputs are narrower than an audit of the whole service.
Public information versus private cards
| Information | Who should see it | Why |
|---|---|---|
| Community cards and public actions | Everyone at the table | They define the shared game state. |
| Your hole cards | You and the authoritative server | Opponents must not learn them before showdown. |
| An opponent’s folded cards | That opponent and authorized server systems | Folding does not make private cards public. |
| Active server seed | Authorized dealer process only | Early disclosure could reveal future cards. |
| Archived hand and moderation records | Authorized staff and bounded public verifier output | Review needs evidence without unnecessary private disclosure. |
Pots, refunds, splits, and rake
The reviewed engine returns an unmatched portion of the largest committed wager before it rebuilds pots or calculates rake. It then creates main and side pots from contribution layers and limits each layer to eligible, non-folded seats.
Rake boundary and current-rate disclosure
- The engine takes no rake when no community card was dealt and excludes sit-and-go tournament state from cash-game rake.
- Rake is calculated from the rebuilt called pots using the percentage and big-blind cap stamped onto that table state.
- Repository policy makes BOOF-denominated tables rake-free. SOL and USDC tables use changeable operator settings. The public lobby response reviewed on September 7, 2026 did not expose those live stamped values, so this page does not claim a current SOL or USDC rate. Check the table’s displayed terms before joining.
Side pots, tied hands, and odd units
- All-in contributions are layered into separate pots, and a player can win only a layer for which that seat remains eligible.
- Tied pots are divided in the asset’s minimum supported units rather than with unbounded decimals.
- If a minimum unit remains after an equal split, the engine awards it clockwise from the first eligible seat after the dealer button.
Bots, collusion, and multi-accounting
Randomness does not prevent players from sharing cards, coordinating actions, automating decisions, transferring value through play, or controlling multiple accounts. The repository separates an agent-only table from the public cash lobby, but no complete public anti-collusion, bot, multi-account, investigation, or sanctions policy was verified.
A publishable integrity program should combine multiple proportionate signals with manual review, protect legitimate shared households, record enforcement decisions, and provide an appeal path. Exact detection thresholds may remain confidential, but applicable rules and broad evidence categories should be public.
The source also separates a direct-link agent room from the public lobby. That separation is useful, but it is not proof that every public opponent is human or that all automation is detected.
Disconnects and authoritative recovery
A disconnect does not make the browser authoritative or pause completed settlement. The client is expected to reconnect and accept the dealer’s current table state while normal action deadlines continue. The reviewed implementation contains reconnection handling, but no public uptime, grace-period, or dispute-response guarantee was verified.
How to preserve a disputed hand
- Record the table slug, hand number, approximate time, asset, and your seat.
- Open the hand history and save the verifier URL and its commitment/deal results.
- Save screenshots and the visible action sequence without exposing credentials.
- Describe observed behavior rather than asserting cheating as a fact.
- Use only a support route published on boof.gg; a verified route was not available at review.
Limits of verification
A completed-hand verifier does not prove treasury solvency, correct withdrawals, absence of bots or collusion, production deployment integrity, incident response quality, or legal compliance. It also cannot reveal folded opponents’ private cards merely to satisfy another player’s request. Independent technical and operational evidence remains missing.
Frequently asked questions
Is BOOF Poker on-chain?
No. Deposits and withdrawals use Solana, but Poker actions, cards, table balances, and settlement are handled by BOOF-operated servers and ledgers.
Can I verify a completed BOOF Poker hand?
The hand-history interface links to a verifier that checks the revealed seed against its commitment and reconstructs the archived visible deal. This is not an independent audit of the full system.
Can another player see my folded cards?
The intended public views redact folded opponents’ private cards. No independent security audit confirming every production path was found.
Can seed verification stop collusion?
No. Shuffle integrity and player-behavior integrity are separate problems that need separate monitoring, review, and appeal controls.
Does BOOF take rake from an unmatched bet?
The reviewed engine returns uncalled excess before rebuilding pots and calculating rake. Live SOL and USDC rate/cap values were not exposed by the public lobby response, so check the displayed table terms before joining.
How does BOOF divide an odd unit in a tied pot?
The reviewed engine divides the pot in the asset’s minimum units and awards any remaining unit clockwise from the first eligible seat after the dealer button.
Sources and scope
Product statements were checked against the BOOF repository, live public endpoints, and the launch claims register on 2026-09-06. External references support general rules or safety guidance; they do not endorse BOOF.