👁️ What the public sees
Anyone reading the chain or the explorer.
🕯️ What the players know
Off-chain secrets kept on each player's own device.
Loading…
-
Asks for view access, then scans for UTXOs of this game's PUMPKIN resource.
-
The wallet signs a fresh challenge with the pumpkin's one-time key. We then check that the key that signed is the key the chain says guards the live pumpkin.
⚠️ Never use “Send privately” on the pumpkin. That moves it outside the game, the game loses track of it, and nobody can prove holding it at midnight. The curse breaks, and the holder forfeits the bond.
The rules
- Join. Every player locks a bond (1 tTARI) into the pot with their public player key.
- Summon. The host gives the single PUMPKIN to one player's secret ghost key. It is now a stealth UTXO: a commitment and a one-time key.
- Pass. The holder passes it to someone else's ghost key. The pass is sealed by a brand-new throwaway key and otherwise signed only by the pumpkin's one-time key, and the fee comes from the game's gas tank, so nothing ties the pass to a player.
- Guess. Anyone can seal a guess on who holds it: a hash of
(game, you, suspect, salt). Nobody can read it yet. - Midnight. After the midnight epoch, passes stop. The holder spends the pumpkin back into the cauldron to a revealed output under their player key. That proves they hold it.
- Open and claim. Guessers open their hashes. Right guessers split everyone else's bonds. The holder gets their own bond back. If nobody guessed right, the holder takes the pot.
What stays secret
- Who held the pumpkin after each pass, and the whole chain of hands.
- Which player sent which pass. The sealing key is a throwaway, the only other signature is the pumpkin's one-time key, and gas pays the fee.
- Who suspects whom, until the guesses are opened.
What still leaks (honestly)
- The number and timing of passes, and the commitment of the live pumpkin.
- The host summons publicly, so the first hop is from the host.
- The final holder, at midnight. That is the point of the reveal.
- Off-chain metadata: IP addresses, when you're online, and who you message for a ghost address.
Code and threat model: see the README in the repository.