Sats are real money. A sat (satoshi) is the smallest unit of Bitcoin. You never need a single one to play this game: the whole site is free, alpha packs cost nothing, and nothing on this page can take a payment.
Starter sets
—
1 · What a set is
—
2 · The strong ones
—
3 · Edition One does not move
—
—
Nobody can reshuffle this box
Card shops ask you to trust them. This one hands you the receipt instead.
1 · The order was fixed first
The box was shuffled once, from a published seed, and then fingerprinted with SHA-256. That fingerprint went public before the first pack was opened. Move one card and the whole fingerprint changes — there is no quiet edit.
2 · Packs come off the top
Every pack takes the next cards in that fixed order. No re-roll when you are lucky, no top-up when you are not, no card held back for someone else. The counter above is your place in the box.
3 · You check it, not us
Press the button below. Your browser hashes the entire card order itself and compares the result with the published fingerprint. If they match, this box is the box that was promised.
Nobody can reprint this box
Card shops ask you to trust them. This one hands you the receipt instead.
1 · The print run was fixed first
Every numbered card's print run went into a census, and the census was fingerprinted with SHA-256 before the first pack was sold. Change one copy count and the whole fingerprint changes — there is no quiet reprint.
2 · Supply only runs down
Each pack takes fourteen numbered cards out of whatever is left, by a rule that is the same rule for everybody, plus one free Basic. Nothing is ever put back. The mint publishes what remains, card by card, with a rolling hash over every pack it has sold.
3 · You check it, not us
Press the button below. Your browser fetches the mint's signed catalog, adds up the print runs it is actually selling from, and re-hashes them. If that matches the published fingerprint, this mint is selling the box that was promised.
Not checked yet.
The honest footnote: during alpha the full card order ships inside this page, which is exactly why you can verify it right now. When the mint is live the order stays sealed until the box is empty; the reveal is published then and this same check runs against it. The recipe is plain: SHA-256 over every card id in box order, each followed by a zero byte.
The honest footnote: the mint's fingerprint covers a census, not an order, and its recipe is just as plain: take every numbered card as id → copies printed, sort those pairs by id, write them as JSON with no spaces, add one zero byte, and SHA-256 the result. That zero byte is the same terminator the free box's order uses. The ten Basic cards are not in it, because they have no print run to commit to. The button above does exactly that against the catalog the mint signs, so any sha256 tool you trust more than this page will give you the same answer.
Where your cards go
Two places, and they are two different things.
The wallet →
Cards the mint has issued you, counted: how many, how many of them different, how many spare. A pack bought from the mint lands there the moment the mint issues it.
The Stack Builder →
Where cards become a Stack. A left click — or a tap — on any card above adds it to the Booster pulls Stack; open the builder and press Load.
What a spare is worth
A Stack may hold four copies of a card — one of a Genesis card, and as many Basic Resources as it needs (§7). Duplicates up to that line are playable rather than dead weight.
Free alpha packs stay in this browser. Nothing is minted for them and nothing is published — it is a playground, not a ledger. They live in this browser and nowhere else. A click on any card above sends it to the Stack Builder, which is where a pull becomes part of a deck — though the draft lives in the same browser storage, so that is a step towards playing with it, not a safer place to put it. Right click on a desktop, press and hold on a phone, opens a card's gallery entry instead.
Where your cards are
Everything you pull goes straight to your wallet — that is where your collection lives, with a count on each card and the checks that prove it is yours. From there, the Stack Builder in OG mode builds a Stack out of exactly what you own.
How the NutFT mint works
1 · Request a pack
The store asks the NutFT-aware mint for one output per card. Demo payment is deliberately out of scope.
2 · Verify the proofs
The wallet verifies amount 1, the collection unit, the CardBinding inside the secret, P2BK, and the mint's DLEQ proof.
3 · Read the catalog
Cards remain bearer proofs. The wallet fetches the Blossom manifest to display artwork and metadata; game rules stay outside the token.
Demo mode is free. Open the NutFT store from the running table server to issue Cashu proofs into the browser wallet. This demo does not move real money.