Code:
hmac(clientSeed + ':' + nonce, serverDailySecret);
but with a global secret key, every person with the same seed will have the same result. It looks like you default everyone to the client seed of 'BITCOIN' and as you'll notice, everyone gets the exact same outcomes.
The two ways to fix this, would be to enforce that no two users can use the same client seed (kind of annoying). Or use:
Code:
hmac(username + ':' + clientSeed + ':' nonce, serverDailySecret);
Also, I'd recommend using a scheme that allows people to verify instantly. No one likes waiting a full day to check the results. I'd shameless rip the JD scheme, it's well understood and has many independent implementations.
all I see is just a moving multiplier bar , so how could players know their rolled numbers?Did I miss something? 
