FAQ

Is this really random?

As random as the drand network, which produces it by a threshold of independent operators signing a number nobody knows in advance. You verify the signature; you do not take our word.

Why not use a VRF oracle?

A paid oracle makes you trust whoever holds its key, and costs a fee per request. drand is public and free to read, and the check happens in your contract. If you already trust a specific oracle, nothing stops you using both.

Can we pick the winner by choosing the round?

Not on chain: the round must be at least 2 rounds in the future at commit time, and a draw cannot be changed. Off chain it is only true if you publish your commitment before the round, which the page asks you to do.

Can the signature be forged?

Not without breaking BLS12-381 or getting a majority of drand operators to collude. Flip one bit and the check fails; try it on the home page.

How much does it cost?

About 157,643 gas to verify a round and 208,689 to reveal a draw, measured on a fork. Reading rounds from the relays is free.

Do I need $CRICKET?

No. Nothing in the contracts or the site requires it.

What if the relays are down?

The site tries four. A contract does not use relays at all: anyone can submit the signature from any source.

Is it deployed?

Not yet. The contracts, the engine and the proofs are built and tested; the addresses will be published here first.

Can I draw weighted tickets?

Write the entry several times. A true weighted draw is on the roadmap, not in v1.

Why a cricket?

It chirps on a steady beat that everyone hears at the same moment, and it cannot be told when to sing. That is the whole idea.