BOMB. Docs
Documentation

How BOMB works — start to finish.

BOMB is a live hot-potato market. You play with points; every point is backed one-to-one by USDT sitting in an on-chain vault under your own address — a vault BOMB can never lock you out of. Pass the bomb before it pops; everyone but the last holder cashes out. This guide covers getting in, how the game plays, where your money lives, and how to take it out without asking anyone.

01Getting started

You don't need a crypto wallet connected, an extension, or gas to play. You need a login, one wallet address to be paid to, and some USDT. Here is the whole path.

  1. Sign up. Pick a login ID and password, and register the wallet address your withdrawals will go to (details below).
  2. Deposit USDT. Your account page shows a personal deposit address. Send USDT on BNB Smart Chain (BEP-20) to it from any wallet or exchange. Points appear a few minutes later.
  3. Pick a table. Six sizes — FUSE $10, SPARK $25, EMBER $50, BLAZE $100, INFERNO $300, SUPERNOVA $500 — and two ways to play: Pure Luck tables play themselves; Secret tables let you decide when to buy. Every size has both. You can watch any table live before you sit down.
  4. Sit down. The size is the minimum points you need to take a seat — and it is also the most a single game can ever cost you.
  5. Play. Hold the bomb, pass it on before it pops, and your winnings land in your points balance the moment the game ends.
Gasless, pop-up free

You never pay gas and never sign a transaction. The only on-chain action you ever take is sending USDT to your deposit address. Everything else BOMB pays for.

Sign up

Registration takes a minute and asks for four things. Three of them are ordinary; the fourth is the one that matters.

  1. Login ID and password. Your key to the game — sitting down, buying, seeing your history. It has no power over your money.
  2. Your wallet address. An EVM address you control (MetaMask, Trust Wallet, a hardware wallet — any of them). This is where every withdrawal is paid, and the only wallet that can pull funds out without BOMB's help. You type it twice and confirm a checkbox; the form also checks it on-chain and refuses addresses that look like contracts or exchange deposit addresses.
  3. Referral code (optional). If a partner invited you, enter their code here. It cannot be added later.
Never register an exchange deposit address

Payouts come from a smart contract, and exchanges do not credit contract transfers to their deposit addresses — funds sent there can be lost for good. Register a wallet whose private key or seed phrase you hold. The on-chain check catches common mistakes but cannot prove you own the key. When in doubt, make your first withdrawal a small one.

Your registered wallet

Think of your login as the key to the table and your registered wallet as the key to the safe. Even if someone stole your password, they could only ever send your money to your wallet.

  • Every withdrawal goes there. The vault contract has your address on file and pays that address only. BOMB signs the amount; it cannot change the destination.
  • It can start a self-custody exit. If BOMB ever stops processing withdrawals, a transaction from this wallet opens a timelock that lets you take everything you are owed straight from the contract — see Self-custody exit.
  • Changing it is deliberate. You can change your registered address only while your points balance is zero and nothing is in flight, and a BOMB operator confirms the change by hand. After a change, make a small test withdrawal first.

Deposit

Open your account page and copy your personal deposit address (there is a QR code too). It is a small contract that belongs to you alone: the only thing it can do is forward whatever arrives into the vault as your balance.

  • From an exchange: withdraw USDT and choose the BNB Smart Chain (BEP-20) network. Paste your deposit address.
  • From a wallet: send USDT on BNB Smart Chain to your deposit address. An ordinary transfer — nothing to approve on BOMB.
  • From anyone: the address identifies you by itself, so a transfer from a friend's wallet or a family member's exchange account is credited to you just the same.

After the network confirms, BOMB's relayer triggers the forward (it pays the gas), the vault records the deposit under your registered address, and your points balance updates. Deposits show up in the Deposits list on your account page with their transaction hash.

Right token, right network

Only USDT on BNB Smart Chain is credited. Anything else sent to your deposit address — another token, or USDT on another network — is returned by hand on request, minus the network fee it costs to send back. Send a small amount first if you are unsure.

02How the game works

BOMB is hot potato with money. A bomb is passed from player to player and its price rises every second. Each time it changes hands, the new holder pays the current price to the one before — so passing it on is how you earn. The one person holding the bomb when it pops loses; everyone else walks away ahead.

Each table runs as a game. On Pure Luck tables the bomb is handed on automatically ten times and pops on the tenth holder. On Secret tables you choose whether to buy at each pass, up to fourteen passes. Both modes share the same money rules below.

TableMinimum to sitBase pricePrice ceilingMost you can lose in one game
FUSE$10$3.33$5$10
SPARK$25$8.33$12.50$25
EMBER$50$16.67$25$50
BLAZE$100$33.33$50$100
INFERNO$300$100$150$300
SUPERNOVA$500$166.67$250$500

The base price is a third of the table minimum. The bomb starts at $0, climbs as a percentage of the base price, and can never go above 1.5× base. The table minimum is exactly 3× base — enough to cover the worst possible game, so you can never owe more than you sat down with.

Passing the bomb

  • Take a seat. Joining a table puts you in the next game. While it is still gathering you can leave and step out. Once 5 players are seated the countdown runs and the game begins — from that point your seat is final.
  • The first holder is drawn. The very first bomb holder is picked at random from everyone seated and gets the bomb for free — provably fair: the draw seed is committed (hashed) before the game and revealed after it, so you can verify no one could steer the result.
  • Hold, then pass. While you hold the bomb its price climbs. On Pure Luck tables it is handed on for you every 5 seconds; on Secret tables it moves when another player presses Buy. Either way, the next holder pays you the current price.
  • Survive to win. Anyone who held and successfully passed — plus everyone at the table who never got stuck with it — shares the winnings when it pops.
No take-backs

While a game is still gathering players you can leave. Once it starts — and whenever you press Buy during a pass — it's final. That's what keeps the game fair for everyone at the table.

Jackpot & the draw

Every game builds a jackpot out of the money the final holder loses. You don't need to do anything special to be eligible — being at the table enters you.

  • Each pass pays its losers. At every pass, the players who were in the draw (or bid) but did not end up with the bomb share a slice of the jackpot.
  • It's a participation reward. You can earn from the jackpot without ever holding the bomb — being seated is enough.

The jackpot is 90% of the popped amount: each earlier pass pays its losers 6%, and everything left lands on the final pass, where the bomb actually went off. The exact split is shown on the explosion receipt at the end of every game.

When the bomb explodes

  • Pure Luck: the tenth holder. After ten hand-offs the bomb pops on whoever is holding it. No other ending.
  • Secret: nobody buys. If a pass ends with no buyer, the bomb goes off in the holder's hands — and the secret number decides whether it was live.
  • Secret: the 14th pass. A game is capped at 14 passes — whoever takes the bomb on the final pass pops instantly.

When the bomb pops, the holder has paid for a bomb nobody will buy and is slashed the same amount on top. The slash is redistributed strictly by the rules — never to any individual by hand: 90% becomes the jackpot (split across the passes), 4.5% goes to the BOMB treasury, 4.5% goes to the partner who referred the players, and 1% accrues to the competition prize pool that funds recurring leaderboard events. Your share is credited straight to your points balance — there's nothing to claim.

Bounded loss

Each table asks for a minimum of 3× the base price — and that's also your absolute maximum loss. The worst case (buying at the 1.5× ceiling and popping at the ceiling) adds up to exactly 3×, so your balance always covers it: no margin calls, no surprise debt.

House seats

When a table is short of players, BOMB fills empty seats with its own accounts so games can start. They play by exactly the same rules and have no edge. A game with only house seats moves no money at all.

Provably fair

Every draw — who gets the bomb first, who is handed it on each Pure Luck pass, and the secret number on Secret tables — is decided by a random seed. The catch that makes it fair: we lock that seed in before the game starts, and you check it yourself after. We can't see the outcome and then change it, and you don't have to take our word for any of it.

Think of it like a sealed envelope:

Before the game    We pick the seed, seal it, and publish only
                   the envelope's fingerprint (the commit hash).

After the game     We open the envelope and reveal the seed.

Your check         Your browser hashes the revealed seed and asks:
                   "Does this fingerprint match the one published
                    before the game?"   Match = untouched.

The fingerprint is a one-way hash (keccak256): easy to go from seed to fingerprint, impossible to go backwards. So publishing the fingerprint early gives nothing away about the result — yet if we swapped the seed afterward, the fingerprints wouldn't match and it would be obvious instantly. That's what locks us in.

When you open a finished game's verification panel, you'll see:

  1. seedThe actual random value, now revealed, that decided the game.
  2. commit hash ✓The fingerprint published before the game. Recomputed from the seed, it matches.
  3. reveal hash ✓The fingerprint of the revealed seed — also matches.
Computed on your device

The two ✓ checks run in your own browser with keccak256 — not on our servers. You're not trusting BOMB's word; you're re-doing the math yourself. If either check ever failed, you'd know the game was tampered with.

Auto join

On Pure Luck tables there is nothing to decide during a game, so the only question is whether you're in. AUTO JOIN answers it for you: flip it on and the table seats you in every new game until you switch it off.

  • It runs on the server, not in your browser. Tab open or closed, phone locked or not, you keep being seated. Nothing depends on your connection.
  • Set a limit if you like. You can cap it by time or by number of games; when the limit is reached it switches itself off and the table shows you it did.
  • It stops if you run low. If your points fall below the table minimum, AUTO JOIN is removed automatically. Topping up does not re-arm it — flip it on again yourself.
Secret tables have no auto

On Secret tables the whole game is your decision to press Buy, so there is no automatic rule of any kind. If you're seated, you're playing.

Pure luck tables

Pure Luck strips the game down to chance: no timing, no bidding decisions — you sit down, and the roulette does the rest. Every table size has Pure Luck tables; pick the mode in the Lobby.

  • Everyone is always in the draw. Every player who isn't holding the bomb is automatically in every draw. There's no buy step and no way to sit a pass out — being seated is being in.
  • The bomb moves on a fixed 5-second beat. Each holder keeps the bomb for exactly 5 seconds, then the wheel spins and the next holder is drawn at random, paying the current price to the one before. Passes fire themselves.
  • Exactly 10 draws, then it pops. The game ends with the 10th holder — whoever the wheel lands on last pops. A full game runs about 2 minutes.
  • Fast price, same ceiling. The price climbs at 3% of the base price per second and reaches the 1.5× ceiling exactly as the tenth holder pops. The 3× minimum covers the absolute worst case — bounded loss works exactly the same.
  • Same jackpot math. 90% of the popped amount pays the game's participants, split across the passes — and every draw is provably fair with the same sealed-seed scheme.
  • 5 to start, 50 seats per game. If a table is full, try another one in the same tier.

Secret tables — the secret number

Secret tables turn every pass into a single question: is the bomb live yet? Every bomb carries a hidden Secret Number K (1–13, sealed with the game's fairness hash before it starts). Passes run on an automatic 6-second beat — during each pass you may press BUY to take the bomb at the posted price. When a pass ends with no buyer, the card flips:

  • MISFIRE (pass ≤ K). The bomb failed to go off — the holder wins. The table replays the missing buyer: everyone else pays an equal share of twice the popped price. Half goes to the holder as the sale they were denied (always a profit), and the other half is distributed like a normal explosion — 6% per earlier pass to its losing bidders, plus the exploded pass's remainder (90% minus 6% per earlier pass) also to the holder.
  • BOOM (pass > K). The bomb was live — the holder is slashed for the popped price. Pass 14 is always fatal (K never exceeds 13).
  • The only action is BUY. You escape the bomb when someone buys it off you at the next pass — at a higher price.
  • Sitting out is not free. If nobody ever buys, the first pass is always a MISFIRE and the whole table pays the first holder. Watching from a seat is a bet too.
  • Price ladder is public. The price climbs 1% of the base price per second during the 6-second window, so pass p always executes at exactly 6% × p of the base. No time cap — games end only by a no-buyer card flip or pass 14.
  • Same fairness scheme. K is derived from the same sealed seed as the draws — after the game you can recompute K yourself and verify the card was honest.
  • Same bounded loss. The 3× minimum covers the absolute worst case, including your share of a MISFIRE payout.
Where

Every table size has Secret tables; pick the mode in the Lobby. Each Secret table's left panel has a CARDS tab with the full history of revealed secret numbers.

03Your money

You play with points. A point is not a balance on our server that we could edit — it is a live mirror of USDT held in the on-chain PointVault under your registered address. Two keys, two jobs:

Login · game access

Login and password

Sits you down, buys, shows your history. It has no power over your money. If it were ever stolen, funds could still only leave to the wallet on the right.

Registered wallet · money control

Your registered wallet

Every withdrawal is paid here and nowhere else — the vault hard-codes the recipient. It is also the only wallet that can open a self-custody exit if BOMB ever stops processing withdrawals.

Why points at all?

Because a live game can't wait for a blockchain. Points let every pass settle instantly with no transaction and no gas, while the money itself never leaves the vault until you withdraw. On-chain, there are only ever two kinds of transaction: deposits in, withdrawals out.

How funds flow

  Any wallet or exchange        Your deposit address          PointVault (on-chain, BSC)
  (you send)                    (a contract, yours only)      (smart contract)

   +----------+   (1) send     +----------------+  auto-forward   +------------------+
   |   USDT   | -------------> |   forwarder    | --------------> |  balance held    |
   |  BEP-20  |   to your      |   code only    |  depositFor(you)|  under YOUR      |
   +----------+   address      |   knows you    |                 |  address         |
                               +----------------+                 +--------+---------+
                                                                           |
        (2) points = live mirror of that balance                           |
            you play, win and lose with points - nothing moves on-chain    |
                                                                           |
   +------------------+   (3) withdraw: withdrawFor()                      |
   |   registered     | <--------------------------------------------------+
   |   wallet         |   paid straight from the vault to your registered
   +------------------+   address, and nowhere else

   (4) If withdrawals ever stop: requestExit() from your registered wallet,
       wait 48 h, then forceWithdraw() with a checkpoint proof. No BOMB signature needed.
  • (1) Deposit. Send USDT on BNB Smart Chain to your personal deposit address. It forwards into the vault as your deposit; nobody at BOMB can redirect it. Points appear after the network confirms.
  • (2) Play. Buying, holding and winning all happen in points, instantly. The vault balance does not move during a game — only when you deposit or withdraw.
  • (3) Withdraw. Request any amount from your account page. BOMB's relayer submits withdrawFor and the vault sends USDT directly to your registered wallet, gas on BOMB. The request and its transaction hash show in your withdrawals list.
  • (4) Self-custody exit. The fallback that makes this non-custodial — below. You will never need it while BOMB is operating normally.

The vault

"Custody" is about control, not about where the bytes live. The question that matters is: can the operator block your withdrawal, or send it somewhere else? The PointVault contract is built so the answer to both is no.

  • Deposits cannot be redirected. Your deposit address is a contract whose only function forwards into the vault under your registered address. There is no other recipient in the code; BOMB's relayer merely pays the gas to trigger it.
  • Withdrawals cannot be rerouted. withdrawFor pays the address the vault has on file for you. BOMB signs the amount, not the destination.
  • Withdrawals cannot be blocked — only delayed. Every hour BOMB posts a checkpoint to the vault: a Merkle root of what every account is owed, points included. That root is what the self-custody exit pays against.
  • No admin escape hatch. The contracts are not upgradeable. The owner is a 2-of-3 multisig that can rotate the signing keys but cannot move user balances.
When withdraw is blocked

To stop anyone from dodging a loss, a withdrawal is refused while you are seated in a game that hasn't finished. Once it settles, your full balance is withdrawable — there is no other hold.

What we cannot close, honestly

The game engine runs off-chain, and the checkpoint root is posted by BOMB. In theory a dishonest operator could post a root that understates a balance. That is the same trust you already place in any live game server — it can affect game outcomes, but it cannot take your deposits or stop you leaving, and it cannot pay out more than the vault holds.

Self-custody exit

This is the guarantee behind "non-custodial": a way to take everything you are owed directly from the contract, with no signature from BOMB. Your account page has a Self-custody tab that shows your status and the exact transaction to send at each step.

  1. Request an exit. From your registered wallet, call requestExit() on the vault (any block explorer's Write Contract tab works). This freezes your account for play and starts a 48-hour timer.
  2. Wait for a checkpoint. BOMB posts checkpoints hourly. Your exit opens once 48 hours have passed and at least one checkpoint has been posted since your request, so it reflects your final balance.
  3. Withdraw with your proof. Call forceWithdraw(user, grossClaim, proof) — the Self-custody tab gives you the exact values. Anyone can send this transaction; the vault pays your registered wallet regardless of who sends it.
If BOMB goes silent

If no checkpoint is posted for 7 days, the vault opens for everyone against the last root — no request needed. The exit needs a checkpoint to exist, not a BOMB that is still running.

Only when you need it

Requesting an exit is one-way for that account — it stops play and is meant for the day withdrawals are not being processed. For everyday cash-outs, use the normal withdrawal on your account page.

04FAQ

Do I need crypto experience to play?

Almost none. You need a wallet address to be paid to (any wallet app will give you one) and USDT on BNB Smart Chain, which most exchanges can send directly. You never connect a wallet to the site, never sign anything, and never pay gas.

Do I pay gas fees?

No. Deposits are forwarded by BOMB's relayer, withdrawals are submitted by it, and games are settled in points. The only fee you ever see is what your exchange or wallet charges to send USDT.

Is BOMB holding my money?

No. Your USDT sits in the on-chain PointVault under your registered address. BOMB can delay a withdrawal but cannot block it or send it elsewhere — see The vault and Self-custody exit.

How do I get USDT on BNB Smart Chain?

On your exchange, withdraw USDT and pick the BNB Smart Chain (BEP-20) network — sometimes labelled BSC or BEP20. Paste your BOMB deposit address as the destination. If you hold USDT on another network, most exchanges let you withdraw it on BSC directly.

I sent the wrong token or used the wrong network. Is it gone?

Usually not, but it is not credited automatically. Contact support with the transaction hash; anything other than USDT on BNB Smart Chain is returned by hand, minus the network fee it costs to send it back.

Can I change my registered wallet?

Yes, but deliberately: only while your points balance is zero and no withdrawal is in flight, and a BOMB operator confirms the change by hand. This protects you from someone talking you into pointing your payouts at their address. After a change, make a small test withdrawal first.

Can I cancel a bet?

While a game is still gathering players — yes, leave the table and your points are free. Once the game starts, or once you press Buy during a pass, it's final. This is intentional — it stops players from dodging a loss and keeps the table fair.

Why can't I withdraw right now?

A withdrawal is refused only while you are seated in a game that hasn't finished. Once it settles, your full balance is withdrawable. If it is still refused, check the Self-custody tab on your account page — it explains any hold on the account.

What if BOMB stops processing withdrawals?

Follow Self-custody exit: one transaction from your registered wallet, a 48-hour wait, and a second transaction that pays you straight from the contract. If BOMB stops posting checkpoints altogether, the vault opens for everyone after 7 days with no request at all.

How do I know the game is fair?

Three layers. Provably fair draws: every random pick — and the secret number — comes from a seed that is committed as a hash before the game and revealed after it, so results were fixed in advance and you can verify it yourself. Non-custodial funds: your USDT sits in the on-chain vault under your address, never on a server. Bounded loss: a game can never cost more than the table minimum, by construction. The contracts are listed below.

I played before with an email or MetaMask login. Where is my USDC?

Still in the old Arbitrum vault, under the wallet that login created — nobody else can move it. Use the recovery page described in Legacy funds. It is not converted into points; it is returned to you on-chain.

05Verifiable contracts

Your funds — every deposit, withdrawal, checkpoint and exit — are enforced by these contracts on BNB Smart Chain (mainnet). Read them yourself.

ContractRoleAddress
PointVault vault Holds every user's USDT · checkpoints · self-custody exit 0x9b41FcCb…5797Ca
ForwarderFactory Derives and deploys personal deposit addresses 0xbcb2A2A6…332204
DepositForwarder implementation The code behind every deposit address — forwards into the vault only 0xf5cea0B6…2564A2
SettlementAuthority Names the relayer key allowed to sign withdrawals 0xF06E9590…01f7Cc
Owner 2-of-3 multisig Owns the vault and authority · cannot move user balances 0x4cf6E728…f40B59
Relayer Pays gas · signs withdrawal amounts · posts checkpoints 0x6Cd40FF3…d30DA4
USDT BEP-20 Settlement token (18 decimals) 0x55d39832…197955
Check the vault yourself

On BscScan, open the PointVault contract and read totalLockup(1000) — the total USDT held for all users — and latest() for the time of the most recent checkpoint. If that timestamp is ever more than 7 days old, the dead-man exit is open.

How it fits together

Gameplay runs on BOMB's realtime engine for instant, pop-up-free play, in points. Money never does: deposits, withdrawals, hourly checkpoints and the self-custody exit live in the contracts above, and every point is backed by USDT the vault holds under your address. Draws are provably fair via pre-committed seeds.

Practice for free

Want to try BOMB without real money? A test playground runs at test-app.hallofbomb.com with free test points from the built-in faucet. Same rules, same tables, nothing at stake.

06Recovering legacy funds

Before points, BOMB ran on an earlier vault on Arbitrum with an embedded in-app wallet created by an email or MetaMask login. If you deposited USDC there and never withdrew it, it is still there — that Lockup contract is immutable and nobody but you can move your balance.

  • Where to go. app.hallofbomb.com/legacy — a single-purpose recovery page. It stays online for as long as any legacy balance remains.
  • How it works. Log in with the same email or wallet you used back then. The page shows your remaining vault balance and a single Withdraw button. Gas is sponsored, so the old wallet does not need any ETH.
  • Where the USDC goes. To your old Game Wallet (the embedded wallet from that login), not to MetaMask. Use Export private key on the same page to import that wallet anywhere and move the funds onward.
  • No point account needed. The recovery page never asks you to sign up. Legacy funds are not converted into points — they are simply returned to you on-chain.