Sats are real money. A sat (satoshi) is the smallest unit of Bitcoin. You never need a single one to play this game: the whole site is free, alpha packs cost nothing, and nothing on this page can take a payment.
Nobody can reshuffle this box
Card shops ask you to trust them. This one hands you the receipt instead.
1 · The order was fixed first
The box was shuffled once, from a published seed, and then fingerprinted with SHA-256. That fingerprint went public before the first pack was opened. Move one card and the whole fingerprint changes — there is no quiet edit.
2 · Packs come off the top
Every pack takes the next cards in that fixed order. No re-roll when you are lucky, no top-up when you are not, no card held back for someone else. The counter above is your place in the box.
3 · You check it, not us
Press the button below. Your browser hashes the entire card order itself and compares the result with the published fingerprint. If they match, this box is the box that was promised.
Not checked yet.
The honest footnote: during alpha the full card order ships inside this page, which is exactly why you can verify it right now. When the mint is live the order stays sealed until the box is empty; the reveal is published then and this same check runs against it. The recipe is plain: SHA-256 over every card id in box order, each followed by a zero byte.
Your collection
A left click — or a tap — adds a card to the Booster pulls Stack; right click on a desktop, press and hold on a phone, opens its gallery entry. Duplicates stack up as ×N — a Stack has no copy limit in Edition One, so extras are playable, not dead weight. During alpha your collection lives in this browser only: it is a playground, not a ledger.
What you pulled
Every pack, with the slice of the box it came off. These positions are the ones the fingerprint above covers — you can point at any row and check it against the revealed order.
How the NutFT demo works
1 · Request a pack
The store asks the NutFT-aware mint for one output per card. Demo payment is deliberately out of scope.
2 · Verify the proofs
The wallet verifies amount 1, the collection unit, the CardBinding inside the secret, P2BK, and the mint's DLEQ proof.
3 · Read the catalog
Cards remain bearer proofs. The wallet fetches the Blossom manifest to display artwork and metadata; game rules stay outside the token.
Demo mode is free. Open the NutFT store from the running table server to issue Cashu proofs into the browser wallet. This demo does not move real money.