Commit
The organizer commits a seed and pins the future randomness sources first.
TapeOut circuit = the verifiable mix layer. Entropy comes from outside (commitment, drand, block hash); TapeRNG mixes it deterministically with the TapeOut Keccak IP Core — the proof replays the netlist
X Layer · TapeOut
Randomness you can actually verify.
Commit-reveal, drand quicknet, a future blockhash and a TapeOut circuit combined into one replayable pipeline. Publish once; anyone can verify the proof.
3entropy sources
1publish transaction
0asset custody
100%replayable proof
Protocol
From commitment to final seed
drand
A future quicknet round is fixed and verified on-chain via EIP-2537.
Blockhash
A fixed revealBlock adds L2 entropy and prevents keeper block selection.
TapeOut
The Keccak IP Core mixes deterministically; mainnet proofs replay the netlist.
Finalize
Pin the finalSeed; the SDK/CLI replays the whole proof from commit to final seed.
TapeRNG
Why TapeRNG
Multi-source entropy
Commit-reveal, drand and blockhash constrain each other; no single beacon is trusted blindly.
On-chain beacon
The drand quicknet BLS12-381 signature is verified directly on X Layer, not by an off-chain keeper.
TapeOut-native
The Keccak IP Core is reused today; the roadmap adds a custom 32-bit mixer and a dedicated tapeout.
Replayable proof
The SDK/CLI recomputes the seed, circuit output and derived result; anyone can check.
Demo
Three steps
Create a request
Commit a seed and pin a future drand round and revealBlock.
Pin the entropy
Verify the drand signature on-chain via EIP-2537, then mix in blockhash and the TapeOut circuit.
Replay the proof
Anyone recomputes preSeed → finalSeed with the SDK/CLI to verify the whole pipeline.
TapeRNG
Roadmap
Now
X Layer testnet demo: commit-reveal + drand quicknet + blockhash + TapeOut Keccak IP Core; inline proof verification.
Next: custom TapeOut circuit
Design and tape out a 32-bit NLFSR or a larger Keccak-based mixer, replacing the reused IP Core with TapeRNG-specific hardware.
Next: advanced cryptography
Explore zk proofs of BLS verification, VDFs, threshold signatures and post-quantum options beyond on-chain BLS12-381.
Later
More consumers (NFT drops, games, fair launch), multi-chain adapters and SDK plugins.
Live demo
Try verifiable randomness
Submit one request, publish one transaction, and receive a replayable proof.