The casino that runs on on-chain proof, not trust.

Hyperush is a decentralized, provably-fair casino on HyperEVM. You hold your own funds, every outcome is verifiable on-chain, and randomness comes from a public threshold-BLS beacon that no one — not even us — can manipulate.

Overview

Hyperush is a casino you don't have to trust. Three properties make that real:

The first game is Coinflip, built end-to-end to prove the whole pipeline; Dice and Roulette run on the same engine.

Architecture

Hyperush is split across two chains, each doing what it's best at, joined by a bridge that only ever moves money in and out.

Randomness is verified on-chain by a dedicated DrandVerifier contract on Base, using the BN254 pairing precompile — so the fairness proof isn't a promise, it's a transaction. See Provably fair.

Provably fair — how randomness works

Hyperush uses drand (the evmnet beacon): a free, public, threshold-BLS randomness beacon on the BN254 curve that publishes a fresh, unpredictable value every 3 seconds. Crucially, it is verifiable on-chain.

1. Commit to the future. When your bet is placed, the contract seals it to the next drand round — a beacon that does not exist yet. No one, including the house or the sequencer, knows the outcome at placement time.
2. The beacon publishes. A few seconds later, drand releases that round's signature. It's a threshold signature — no single party can forge or withhold it.
3. Verify & settle on-chain. DrandVerifier checks the beacon's BLS signature against drand's public key using the 0x08 pairing precompile (~166k gas), then the outcome is derived deterministically:
   randomness = sha256(signature) → roll = keccak256(beacon, betId).

Because the outcome is a pure function of a signature no one controls and can't predict, every result is independently reproducible — you never have to trust an RNG.

How to play

Fund your wallet with HyperEVM testnet HYPE (via gas.zip or a faucet) to try it. Your funds stay yours at every step — never share your keys.

Games & odds

All games run on the same engine and the same beacon. Payouts are fixed in the contract; the house edge is small and transparent.

Each flip commits to a fresh drand round, so results are independent and verifiable — there's no streak memory and no operator thumb on the scale.

Zero-confirm sessions

Signing a wallet popup for every bet is slow. Hyperush lets you enable a session key once, after which bets need no popup at all:

• Enable (gasless). You sign a single EIP-712 message authorizing a browser-held session key with a spend cap and expiry. The keeper submits it — you pay no gas to enable.
• Bet freely. Each bet is signed by the session key in the background — no popup, no per-bet transaction.
• Bounded & revocable. A leaked key is bounded by its cap and expiry, and you can revoke any session at any time (also gaslessly, by signature). Your profile lists all active and past sessions.

There's also an Auto mode: keep betting the same stake automatically after each result settles.

The sequencer

The zero-confirm experience is powered by a permissionless sequencer (the "keeper"):

• You sign a bet (EIP-712) — no transaction, no gas.
• The keeper batches signed bets and submits them; the contract seals each to currentRound()+1 on-chain.
• It's permissionless — anyone can run one, or you can self-send your own bets. The frontend works either way.
• The keeper also pushes the drand beacon the instant it publishes (via a WebSocket/SSE feed), so a round resolves as fast as physically possible.

Houseroll & yield ● designed · coming

Beyond gambling, you'll be able to lock your HYPE and become the house — earning a combined yield from staking and the casino's edge, on the same capital.

Getting paid — the withdrawal waterfall

Winners are always paid instantly from a liquid buffer; the staked reserve is never in a player's path. Locker withdrawals settle through three tiers, cheapest first:

1. Net against deposits — free & instant; incoming deposits pay exiting lockers, no kHYPE moved.
2. Liquid buffer — instant, from the reserve kept for exactly this.
3. kHYPE unbond — the ~7-day backstop, guaranteeing any exit settles in bounded time. An optional penalized "emergency exit" skips the wait.

The sacred max-bet / bankroll ratio is always computed against liquid bankroll only, so a big win is always coverable — solvency is enforced when a bet is accepted, never scrambled for at payout.

Security & safety rules

• Non-custodial. You hold your funds; the Vault has no owner-rescue over user balances.
• Randomness can't be gamed. Every outcome goes through the single on-chain drand verifier — never a manipulable chain value.
• Bankroll protection is sacred. A max-bet / bankroll ratio bounds how large a bet the house will accept; it is never removed or circumvented.
• Testnet ≠ mainnet. Fully isolated environments — separate keys, addresses, and infrastructure. Test code never points at mainnet.
• Admin via multisig. Upgrade and admin actions go through a Gnosis Safe, never an individual key.

Contracts & parameters testnet

All addresses below are public testnet deployments — safe to inspect. The casino is multiplayer: everyone connects to the same shared contracts.

drand evmnet parameters

Status

Hyperush is live end-to-end on testnet — deposit, flip, and withdraw are proven on-chain. Production hardening, the houseroll yield vault, and mainnet are next.