Every Bitcoin Storm participant is assigned a permanent slot number between 1 and 10,000,000 at the moment of registration. That slot is the participant's identity in every draw for five years. When the protocol runs a daily Bitcoin draw, it selects a slot — not a wallet — from the full 10-million-slot universe, commits the selection cryptographically on-chain, and leaves the mapping sealed until Year 5.
On Bonanza Day — the Year 5 settlement event — a single reveal seed unlocks all 2,100 sealed results simultaneously: the 275 founding-draw winners and the 1,825 daily-draw winners. If treasury profit at Year 5 is sufficient to purchase 2,100 BTC at that day's market price, every winning wallet receives 1 BTC. If profit is insufficient, no Bitcoin is purchased and all profit flows into the 80/20 cash distribution instead. No party — not the founder, not DFINITY, not the NNS — can know any result before Year 5. This document explains exactly how that works, step by step, in plain language.
When you register and complete the $100 token-swap entry, the protocol does three things in sequence. It records your wallet, it assigns you a slot number, and it marks that slot as filled.
A slot is a number between 1 and 10,000,000. It is permanent. It does not change during the cycle. It cannot be transferred, swapped, or re-issued. If you are the 47th person to register, you are assigned slot 47. If you are the 4,892,113th, that is yours. Your slot number is what the protocol uses to identify you in every draw for the next five years.
Think of the 10-million-slot universe like seats in a stadium. You arrive, pay for admission, and are given a specific seat number that is yours for the entire five-year event. You can check your seat number at any time. But during the event, nobody — not even the announcer — knows which seats will be called. The seat numbers to be called have already been sealed in envelopes, and those envelopes will be opened only at the end.
If fewer than 10,000,000 people register by the end of the subscription window, the remaining slots stay empty. The universe of slots is fixed at 10M regardless. This is structurally important — see Section 6 for how unfilled slots are handled at Bonanza Day.
The protocol uses something called a Verifiable Random Function, or VRF. It is a piece of cryptography that does two things at once: it produces genuinely unpredictable random numbers, and it produces a proof that the number was generated correctly.
In a conventional lottery, you have to trust that the operator ran the draw honestly. If the operator wanted to cheat, they could pick a number that favours themselves and claim it was random. There is no way for you to check.
A VRF removes the need to trust the operator. The output of the function is mathematically provably random. Anyone — including you — can verify, using the published proof, that the number was produced correctly and that nobody chose it. If anyone tampered with the process, the verification would fail and the manipulation would be publicly detectable.
A conventional random draw is like flipping a coin behind a curtain and reporting the result. You cannot see what happened. You have to take the reporter's word for it.
A VRF draw is like flipping a coin in a locked glass box that records the flip. The result is sealed. The recording is public. Later, anyone can open the recording, replay the flip, and confirm the reported result was accurate. The reporter cannot lie because the recording exists.
The Internet Computer provides a native raw_rand() function backed by threshold BLS signatures across the subnet. Every draw in the Bitcoin Storm protocol is seeded by this function. The output includes both the random value and a cryptographic proof that can be verified independently by any party with access to the subnet's public key. No single node, no subset of nodes, and no external party can predict or influence the output.
Once the protocol launches, it runs one daily draw every day for 1,825 days — five full years. The mechanic is the same every day.
This happens 1,825 times across the cycle. By Year 5 close, the canister holds 1,825 sealed commitments, each pointing to a slot that nobody has been able to read.
The cycle runs for five years. During that time, no winners are revealed. But the protocol is not a black box. Several things are visible and verifiable at any moment through the on-chain canister.
What you cannot see: whether any of the sealed commitments corresponds to your slot. That mapping is cryptographically locked until the reveal seed is released at Year 5.
So during the five-year hold, every participant is in the same position — watching the same public data, knowing their own slot number, seeing commitments accumulate, unable to tell whether their slot has been drawn. The waiting is universal and symmetrical. Nobody has inside information.
The founding draw is a separate mechanism from the daily draw. It is exclusive to the first 1,000,000 participants — the founding million. When the 1,000,000th slot is filled, the protocol runs a one-time sealed event that commits 275 winners from that cohort.
Founding-million participants remain eligible for every daily draw as well. Winning the founding draw does not remove a participant from the daily draw pool. The two mechanisms are fully independent.
At the end of the five-year cycle, the protocol runs its single reveal event. This is Bonanza Day. All 2,100 sealed draws — 275 founding + 1,825 daily — are unsealed in one event. If treasury profit at Year 5 is sufficient to purchase 2,100 BTC at market price, all winners are revealed and paid 1 BTC each. Every participant receives their pro-rata share of the Pool Value; any residual profit is then split 80% pro rata to participants and 20% to the founder as Performance Fee. If profit is insufficient for the BTC purchase, no Bitcoin is bought and all profit flows into the 80/20 cash split instead.
The win mechanism is built so that no party — founder, developer, DFINITY, NNS, or any participant — can manipulate the outcome. The integrity is not a promise. It is a cryptographic property of the protocol.
At Year 5, anyone with a block explorer can replay every step of every draw and verify independently that the revealed winners match the commitments that were sealed years earlier. If any commitment or reveal has been tampered with, the mathematics will not line up, and the protocol will flag the inconsistency publicly.
When the protocol opens for registration, the flow for a new participant is the same for everyone. The steps below walk through what the participant experiences and what the canister does in response.
See exactly what a participant experiences when they sign up — from the slot counter to the wallet connection to the moment your permanent slot number is assigned.
The wallet you connect at registration is bound to your slot for the full five-year cycle. Every distribution the protocol would pay you — Bitcoin from the founding draw, Bitcoin from the daily draws at Bonanza Day, and your pro-rata share of the Year 5 Pool distribution — goes to that wallet address. The binding is permanent. The wallet cannot be changed.
This has an important consequence: if you lose access to your wallet, you lose access to any distribution the protocol would pay you. There is no recovery mechanism at the protocol level. The canister has no admin key, no customer-service override, no discretionary wallet reassignment. The same rules that make the protocol immutable make wallet loss irrecoverable.
That said, the wallet you choose at registration determines whether you have any recovery options at all. The two categories behave very differently.
Internet Identity is the recommended wallet for Bitcoin Storm registration. It is ICP's native authentication system and supports multi-device recovery. At registration, a participant can add multiple authentication devices — a primary passkey, a backup phone, a recovery phrase, a hardware key. Losing one device does not mean losing the identity. As long as you have at least one registered authenticator still accessible, your Internet Identity is recoverable.
Setting up recovery takes an extra minute during initial sign-up. We strongly recommend every participant who registers with Internet Identity adds at least one backup authentication method before completing registration.
Other wallets supported at registration — Plug Wallet, NFID, Stoic, and similar — use the standard web3 seed-phrase model. If you lose access to the wallet (lost device, lost seed phrase, forgotten password, compromised backup), there is no way to recover access. Not at the protocol level, not at the wallet level, not through Bitcoin Storm customer operations. The seed phrase is the only key, and if it is gone, the wallet — and therefore the slot — is gone with it.
This is not a Bitcoin Storm policy. It is the nature of self-custody cryptocurrency wallets. The protocol respects that reality rather than working around it, because any protocol-level recovery mechanism would introduce a discretionary override that would undermine the canister's immutability guarantees — the very property that makes every other part of the protocol trustworthy.
Unless you have a specific reason to use a different wallet, register with Internet Identity and take the extra minute to add at least one backup authentication device during setup. It is the only way to protect yourself against wallet loss for the five-year cycle.
The Bitcoin Storm win mechanism is built on three ideas. First: every participant gets the same permanent slot identity, with odds identical to every other slot in the 10-million-slot universe. Second: every draw is run at the moment it is scheduled, committed publicly on-chain, and sealed cryptographically so that nobody — including the founder — knows the result before it is revealed. Third: all 2,100 sealed draws — the 275 founding and the 1,825 daily — resolve together at Year 5 settlement. If treasury profit at Year 5 is sufficient to purchase 2,100 BTC at market price, all winners receive 1 BTC. If profit is insufficient, no Bitcoin is purchased and all profit flows into the 80/20 cash distribution.
What this produces is a draw mechanism that cannot be manipulated, cannot leak results early, cannot favour insiders, and can be independently verified by anyone at any point using the public ledger. The fairness is not a matter of trust — it is a property of the mathematics.