Provably Fair
Every price on RandomPips is a pure mathematical function of a secret seed, the instrument, and the UTC second: price = f(seed, instrument, second). Nobody — including us — can nudge a single tick without changing the seed, and the seed is cryptographically committed in advance. That makes manipulation not just against the rules, but detectable by anyone.
The commitment, live
SHA-256 of the seed currently generating every tick (also exposed on every /api/prices response):
How it works
- Commit — before the seed is ever used, we publish its SHA-256 hash (above).
- Generate — each second, each instrument's move comes from HMAC-SHA256(seed,
instrument:second). One tick per second, no exceptions, no reruns. - Reveal — when we rotate the seed, we publish the old one. Anyone can then recompute the entire price history it produced and compare it against our candles, tick by tick.
If even one historical tick didn't match, the revealed seed wouldn't hash to the committed value or the recomputation would diverge — and anyone could prove it publicly. All indices are martingale (zero drift): the expected next price is always the current price. The only house edge is the disclosed spread.
1 · Verify a revealed seed
When we rotate the seed we publish the old one. Paste it here: its SHA-256 must equal the hash that was published while it was live.
2 · Recompute any price path
With a revealed seed, pick any instrument, any historical price and its UNIX timestamp (from our candles), and recompute the next 60 ticks — they must match the candle data exactly. The math runs in your browser.
RandomPips synthetic indices are a simulated environment. See our Terms of Service and Risk Disclosure.