Part of the complete guide: Crypto lottery: the complete guide
What "decentralized" should mean for a lottery
Decentralization is about who you have to trust. In a traditional lottery you trust an operator and a regulator: the operator draws, holds the money and pays, and the regulator checks. In a decentralized lottery, as much of that trust as possible is replaced by code and public data that nobody controls. The practical test is simple: if the operator vanished, was hacked, or turned dishonest, what could they do to you and your prize?
The answer is never "nothing", because even the best system has humans somewhere, the website you use, or the legal entity that has to answer to regulators. So decentralization is a spectrum, not a switch. The useful questions are which parts are decentralized and how well.
The five things that can be decentralized
| Layer | Centralized version | Decentralized version | Why it matters |
|---|---|---|---|
| Randomness | The operator's private random number generator | A public beacon or verifiable random function nobody controls | Decides who wins. If the operator controls it, the draw can be rigged |
| Custody of funds | The operator holds the pool in its own wallet or bank | A smart contract holds the pool; nobody can move it outside the rules | Decides whether the prize exists when you win |
| Payout logic | The operator decides who is paid and when | The contract pays winners automatically or on claim | Decides whether you are actually paid |
| Code and upgrades | Closed code the operator can change at will | Open, verified, audited code with no owner key, or with limited, time-locked powers | Decides whether rules can change after you play |
| Access and governance | One website, one company, one set of rules | Contract usable through many front ends; rules changed only by transparent governance | Decides whether it can be shut down or censored |
A five-level scale
- 1Level 0: operator-run and opaque. A private generator, no published data, a "certified RNG" badge. You trust everything.
- 2Level 1: operator-run with a verifiable draw. The operator holds the money and pays prizes, but the ticket list and a public random value are published, so anyone can recompute the winners. You trust the operator only to pay.
- 3Level 2: on-chain, with admin keys. A smart contract holds the pool and uses verifiable randomness, but an owner can upgrade the code or pause it. You trust the owner not to abuse keys.
- 4Level 3: on-chain, immutable and audited. No owner can touch the pool, the code is verified and audited, and randomness is public. You trust the code, which means the audit and the design.
- 5Level 4: fully decentralized. Level 3 plus no single front end, governance by a transparent process, and a design that can run without the original team.
Most products that call themselves decentralized sit at Level 1 or 2. That can still be a good product, but the label should match the level.
Where CryptoDrawz sits today
We are at Level 1, and we say so. The draw is verifiable: tickets close at a fixed time, the ticket list is fingerprinted and published, the random value comes from the public drand beacon, and a button on every result recomputes the winners in your browser. We cannot choose the random value, and we cannot change a result once it is saved. What is not decentralized: we hold the money and we pay prizes ourselves, and the website and rules are run by one operator.
That is why we describe ourselves as a lottery you can verify, not as a decentralized lottery. A move to Level 3, with a smart contract holding the pool, public randomness and an independent audit, is on our roadmap, and we will not use the word until it is true. If you see a lottery that claims "decentralized" with none of these features, that is a warning sign in itself.
How to check any "decentralized lottery" claim
- 1Find the contract address. If there is none, the pool is not on-chain.
- 2Open it on a block explorer. Is the source code verified? Can you see the pool balance and every ticket purchase?
- 3Look for who controls it: is there an owner or admin address, can it upgrade the code, can it withdraw the pool, pause deposits or change fees?
- 4Find the randomness. Is it a verifiable random function, a public beacon or something the owner controls? When is it requested relative to when tickets close?
- 5Find the audit report. Who did it, when, which version, and were the findings fixed?
- 6Check how prizes are paid. Automatically by the contract, or after contacting the team?
- 7Check the website. Can you interact with the contract without it, for example through a block explorer?
The trade-offs of going decentralized
- Fewer people to trust, but more code to trust. A bug in a contract can lose real money, and you cannot call support.
- Lower operating costs and higher payout share are possible, but gas fees and audits cost money.
- Immutable rules protect players but make fixes slow. A bug may mean deploying a new contract.
- Legal clarity can be harder. Regulators have views on who is responsible for a contract nobody owns.
- Players need wallets and some technical knowledge, which narrows the audience.
Examples of different designs
Several approaches exist. No-loss lotteries such as PoolTogether pool deposits, use the yield as prizes and let players withdraw their deposits, so you can play without risking your principal. On-chain jackpot games such as Megapot sell low-priced tickets and run draws through smart contracts on a layer-2 network. Operator-run lotteries with verifiable draws, like ours today, are simpler and cheaper to run but keep custody with the operator. Mining lotteries, where a small Bitcoin miner tries to find a whole block, are decentralized by nature but cost electricity. Details change quickly, so check each project's own documentation. Our comparison of crypto lottery types goes through them side by side.
Ready?
A weekly draw you can check yourself.
$5 tickets, a public random value, and every result published with the data to recompute it.
Frequently asked questions
Is there a truly decentralized lottery?
Some on-chain designs come close at Level 3: contract-held pools, verifiable randomness and audited, immutable code. Fully decentralized governance and access is rarer.
Is a lottery decentralized if it accepts crypto?
No. Accepting crypto only changes the payment method. Decentralization is about who controls the draw, the money and the rules.
Is CryptoDrawz decentralized?
Not yet. Our draw is verifiable, but we hold funds and pay prizes ourselves. An audited on-chain version is planned.
What is the safest kind of crypto lottery?
One whose risks you understand. A verifiable draw protects against rigged winners. An audited contract protects against operator theft. Neither protects against your own mistakes or scams.
Do decentralized lotteries need a licence?
Gambling law applies to the people and entities involved and varies by country. A contract does not remove legal responsibility.