How Lootbox works

Overview

Pick a listed pump.fun token, choose a box, and open it. You pay the box price in SOL and receive that token as your loot — the amount is random, but always fair. Every box guarantees a floor so you never walk away empty, and the house keeps a small, honest edge. Whenever an open loses, a slice of that loss is burned straight back into the ecosystem — a real on-chain buyback + burn of the token you opened and of $LOOTBOX. Wins are pure profit — nothing is burned.

The boxes

Four box tiers — the higher the price, the bigger the potential loot. The odds and the guaranteed floor are the same fair formula for every tier; only the stake changes.

Starter Box0.1 SOL

Bounty Box0.25 SOL

Legendary Box0.5 SOL

Memecoin God's Box1 SOL

Opening a box

1. 1. Connect your wallet and pick a box.
2. 2. Before you pay, Lootbox locks in a secret and shows you its hash (the commit).
3. 3. You approve a real on-chain SOL payment. Your transaction signature becomes part of the outcome.
4. 4.The result is computed, your loot is swapped from the token's market and sent to your wallet, and the secret is revealed so you can verify everything.

Provable fairness (commit-reveal)

The outcome is not a mystery number from a server. It is derived deterministically from two things: a secret Lootbox commits to before you pay, and your payment signature, which nobody can predict. Neither side can change the result after the fact.

// 1) Before you pay, the server commits:
seed       = random 256-bit secret
commitHash = sha256(seed)            // shown to you now, locked in

// 2) You pay on-chain. Your signature is unpredictable:
signature  = <your Solana payment tx>

// 3) The outcome is derived — a fixed, public formula:
rng        = HMAC_SHA256(seed, signature)   // deterministic draw stream
outcome    = payout(rng, reserveHealth)     // see "Payout math"

// 4) After the open, the server reveals the seed. You check:
sha256(seed) === commitHash          // ✓  the seed was never swapped

Because commitHash is published first, the house can't pick a seed after seeing your bet. Because the draw depends on your signature, you can't predict or grind it either. Every open exposes its commit hash, revealed seed and signature — paste them into the Provably Fair page to reproduce the result yourself.

Payout math

The payout rule is fixed and public — the “Floor + Dynamic Ceiling” model:

floor      = 40% of box price        // you never receive less
RTP band   = 82% … 90%   (hard cap 93%)  // long-run return to player
             ↑ scales with reserve health, never above the cap
jackpot    ≤ current reserve          // a jackpot is capped by the buffer

In plain terms: the guaranteed floor means the most you can lose on one box is 60% of its price. The RTP band under 100% means the house keeps a small, honest edge. And capping jackpots by the reserve means the pool can always pay what it promises.

Buyback & burn

Nothing is wasted. Whenever a box loses, a slice of that loss funds a real on-chain buyback + burn. A win is pure profit — nothing is burned:

• · 15%of the loss buys back and burns the box's own memecoin — removing supply and feeding its ecosystem.
• · 10% of the loss buys back and burns $LOOTBOX.
• · The remaining 75%of the loss is kept as SOL in the token's prize reserve — so the reserve grows, and the payout ceiling rises with it over time.

Every burn is a real transaction shown, with the exact amount burned, in the token's Recent openers and the Ecosystem & Statistics feed.

Solvency

Each token has a prize reserve that buffers variance. Because a jackpot can never exceed the reserve, the pool can always pay out — insolvency is mathematically impossible, not just unlikely. We stress-tested the model with a Monte-Carlo simulation of 2,000,000 boxes across 200 independent runs: realized RTP landed around 90% every time, with zero insolvent runs and zero sub-floor payouts.

Token eligibility

Only genuine pump.fun tokens can be listed. Their mint and freeze authority are revoked and they are classic SPL (or Token-2022 with no malicious extensions), which makes honeypots impossible. All swaps use a strict minimum-output guard, so thin-liquidity slippage is bounded and transparent.

On-chain & transparent

Every box payment goes to the Lootbox fee wallet and is verified on-chain before an outcome is ever computed — no payment, no result. Every payout and every burn is a real Solana transaction with a signature you can open on Solscan. The Ecosystem & Statistics page is the public ledger of it all, and the Provably Fair tool lets anyone re-check any single open. Trust nothing — verify everything.