A demonstration of Babilonia. Trustless bitcoin betting, where the transactions look like normal payments, and the dealer never holds your coins.
Both sides prove their choices are honestly formed with a zero-knowledge proof — before any coin moves. Your guess stays hidden, and the dealer can't collect without publishing the secret that decides the outcome. Nothing to change after the fact.
Coins move only when you sign — and you hold a pre-signed refund before any coin moves. If the dealer vanishes, broadcast it and your stake returns, enforced by Bitcoin, not the dealer.
Your spending keys stay in your wallet. The browser holds only per-bet keys that never own coins; the dealer only ever sees public messages.
The protocol code is open source — inspect and build it yourself. View source · 📄 Read the paper
Every bet is really 5 sub-bets at once. Your stake is split — at random — across five 1-of-N thimble games, each at its own odds, all in one pot. They settle in a single payout.
The five don't settle separately on-chain. You and the dealer agree the net and co-sign one payment — it looks like an ordinary transaction. A pre-signed fallback forces the same result if either side balks, so cooperating is the easy path.