What Is a Smart-Contract Casino?
'Smart-contract casino' gets slapped on everything from fully on-chain dice to a web2 site that merely accepts crypto deposits. The reality is an architecture spectrum, and where a casino actually sits on it determines what you can prove versus what you are simply trusting. Here is the honest map — and where Llamabet sits on it.
See the games it anchors →The spectrum: from fully on-chain to on-chain in name only
At one extreme sits the fully on-chain game: every action is a transaction, the contract holds the game state and the randomness, and the chain is the game engine. At the other extreme sits a conventional web casino that takes crypto deposits into a custodial wallet and runs everything on a private server — 'blockchain casino' as a paint job. Between them lies the architecture most serious real-time casinos actually use: an off-chain game engine for speed, cryptographically anchored to the chain through pre-bet commitments and on-chain settlement. The middle is not a compromise of convenience — for most games it is the only design that is simultaneously fast, private where the rules demand hidden information, and provable. The question to ask of any operator is not 'are you on-chain?' but 'exactly which parts are on-chain, and can I check them?'
Why every card can't be a transaction
Real-time table games break the fully on-chain model in two places. First, latency: a blackjack hit or a poker raise needs a response in milliseconds, and even a fast chain adds a signing round-trip plus network confirmation per action — tolerable once per game, unplayable ten times a hand, and gas accrues on every move. Second, hidden information: on-chain state is public by construction, but poker requires hole cards that only one player can see, which pure on-chain state cannot represent without heavyweight cryptography that multiplies the latency problem. Fully on-chain works beautifully for slow, single-shot games like a lottery draw. For live blackjack, roulette and multiplayer Hold'em, an off-chain engine is not laziness — it is physics and game design.
How Llamabet splits the difference
Llamabet runs the game engine off-chain and puts the honesty on-chain, before any money moves. Ahead of each round, the four-deck shoe is shuffled deterministically from a server seed plus your client seed, and the SHA-256 hash of that shuffled deck is committed to Sui: the commitment is BLS-signed by the deployer key, the Move contract verifies the signature on-chain, and the result is frozen as an immutable ServerHashObject — a timestamped, unchangeable record created before your bet exists. After the round, the server seed is revealed. Rerun the published deterministic shuffle with the revealed seed and you reproduce the exact deck, card for card, and can confirm its hash matches the frozen commitment. The house committed to the outcome while blind to your wager, and the chain holds the receipt.
Real SUI in, real SUI out
Commitments are half the story; settlement is the other half. Bets are signed from your own wallet — via Google zkLogin, which derives a self-custodial Sui address with no seed phrase, or a standard Sui wallet like Slush — and table-game payouts are on-chain SUI transfers that land in about a second, which you can watch happen in the explorer. The minimum bet is 1 SUI. Every contract package and house wallet address is published at /contracts with direct explorer links, so the flow of funds is auditable end to end, and poker hands are chained together and independently checkable at /poker/verify. Nothing about your balance lives solely in a database you cannot see.
How to audit any 'on-chain casino' claim
Four questions separate architecture from branding. One: can you find the contract? A real operator publishes package IDs and addresses; if you cannot locate them, stop there. Two: what does the contract actually do? Read it in the explorer — does it verify fairness commitments or hold and pay funds, or is it just a token with a casino attached? Three: can you recompute an outcome? Given the data published before and after a round, an independent party should be able to reproduce the result exactly; if there is no commit before the bet, 'provably fair' is a slogan. Four: do payouts visibly leave a house wallet on-chain? If the answers are no, the chain is being used as marketing. Any casino that clears all four has given you something no license alone can: verifiability without permission.
Move, in one plain paragraph
Llamabet's contracts are written in Move, Sui's native smart-contract language, and the language choice matters more than it sounds. Move treats assets as typed objects with strict ownership: a coin cannot be duplicated, silently created or accidentally destroyed, because the bytecode verifier enforces conservation of resources before code ever runs. Contracts state explicitly which objects they take, own and transfer, which shrinks the classic bug classes — double-spends, unguarded balance mutations, reentrancy-style drains — that have emptied contracts on other platforms. It is not a guarantee that any given contract is correct, but it means the platform itself refuses whole categories of mistake, which is exactly the property you want under a system that holds wagers.
Frequently asked questions
Are any casinos fully on-chain?
Yes, for game types that suit it — single-shot games like lotteries or simple dice can run entirely in a contract. Real-time blackjack and multiplayer poker generally cannot, because per-action latency and public state break the gameplay. The credible design for live games is an off-chain engine with pre-bet on-chain commitments and on-chain settlement, which is how Llamabet works.
What does Llamabet's smart contract actually do?
Before each round, it verifies a BLS signature over the SHA-256 hash of the shuffled deck and freezes that commitment as an immutable object on Sui — a pre-bet, timestamped record the house can never edit. After the reveal, anyone can recompute the deck and check it against the frozen hash. Contract addresses are published at /contracts with explorer links.
Is a smart-contract casino safer than a regular crypto casino?
It is more verifiable, which is the meaningful difference: rigged outcomes become detectable and funds flow through addresses you can watch. It does not change the house edge, and it cannot protect funds you send to a phishing clone — so verify the domain and the published contracts first, and only play with money you can afford to lose.