Source: Bitcoin puzzle record, onchain · live
Your wallet is level 256. Safe until about 2058.
Highest level cleared: 135. 121 levels to go.
A wallet key is 256-bit, so a wallet is level 256. Every smaller key that falls is a level cleared. That date is a trend, not a prediction: if AI, quantum computing or new math speeds key-breaking up, it moves toward today, and the bounties on BNB, ETH and SOL are where that shows first.
Already exposed? Get safe in a few checked steps. Nothing to connect to check.
How the date is set
Every step is a key cracked for real on Bitcoin. Each dot links to the transaction.
A trend, not a prediction. One breakthrough could pull the date in by decades, and that jump is exactly what the clock is built to catch. The full record
Bounties live on
One ladder. Three chains.
The same levels are posted on BNB Chain, Ethereum and Solana, each with its own escrow and its own record. A level that falls anywhere is a level cleared.
- BNB ChainBNB testnet
- Held in escrow
- 1,500 tUSD
- Open levels
- 61
- Paid out
- 25 tUSD
- Last fall
- 5 days ago
- EthereumSepolia
- Held in escrow
- 1,500 tUSD
- Open levels
- 61
- Paid out
- 25 tUSD
- Last fall
- 4 days ago
- SolanaSolana devnet
- Levels scheduled
- 67
- Year-one prizes
- 1,500 tUSD
- Paid out
- 0 tUSD
- Last fall
- None yet
Program on Solana devnetSOL ladder
01 / 03 · Check
Is your wallet's key already public?
The clock only matters for keys that are public. An EVM key becomes public the first time it signs. A Solana address is its public key from the start. The scanner shows which of yours are, since when, and what they hold. It runs in your browser and never asks for a key.
Before it sendshidden
0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045
Only the address is onchain: a fingerprint of the key. A fingerprint can't be worked backwards, so there is nothing to attack.
After its first send, Oct 1, 2015public
04e95ba0b752d75197a8bad8d2e6ed4b9eb60a1e8b08d257927d0df4f3ea6860992aac5e614a83f1ebe4019300373591268da38871df019f694f8e3190e493e711
Every signature carries the full public key, readable by anyone, forever. From here, getting to the private key is a math problem. How hard that problem still is, is what the clock tracks.
Most wallets that have ever sent are in the same spot. The only reset is moving to a fresh address.
02 / 03 · Get safe
Move before the date does.
A key that has never signed has never shown its public key. Moving to one is the fix, and there is no rush: the clock reads decades. Do it calmly, one checked step at a time.
03 / 03 · Watch
Bounties that fall first.
The ladder posts the same kind of problem as a wallet key at smaller sizes, each with a prize in escrow on BNB, ETH and SOL. Anyone can claim one: a person, a GPU farm or an AI agent. When levels start falling faster than expected, the clock hears it before wallets do.
64-bitfell after 18 h on Ethereum, paid 25 tUSD
Wallet-key math
The problem behind every BNB, ETH and SOL key, at smaller sizes.
27 levels per chain
Post-quantum math
The kind meant to replace wallet keys once quantum computers arrive.
26 levels per chain
Control
Pure guessing. If only these fall faster, it is more hardware, not a breakthrough.
14 levels per chain
Each tick is a bounty on the day it opens, one row per chain. When one is solved it lights up, linked to the transaction that paid it.
Hardware
LVL256 NEO
The fresh-key habit, in your pocket. A hardware wallet whose keys are made on the device and never leave it, in the LVL256 skin: a pixel-printed swivel cover over a graphite body. Turn it around.
Concept · not for sale
- CoverPrinted anodized metal, swivels open
- BodyGraphite anodized enclosure
- ControlsTwo buttons and a display, under the cover
- Size98 × 27 × 9 mm
The tech behind
A key never signs twice.
A
Single-use keys
Every send is signed by a key that has never signed before, and whatever is left moves to the next fresh key in the same transaction. On EVM chains a smart account (EIP-7702) does both in one step; on Solana, one transaction with two transfers. Funds never wait behind a public key. The screen counts it: exposed, 0.
B
A quantum-safe rescue key
Next to its everyday keys, the device makes a hash-based key. Its signatures rest on hashing, not elliptic curves, so the attack this site measures doesn't touch it. It is registered as the account's rescue route: if curve keys ever fall, the funds still move, with this key.
C
The clock, on the device
The NEO shows whether its own keys have ever signed, and how high the LVL256 ladder has climbed, read from the ladder's contracts. A wallet that tells you how safe it is, in the same numbers as this page.
Built in the order that can't fail
01 · Softwarenext
NEO mode as a smart account on testnet: single-use keys and the rescue key, proven against copies of real chains. Works with the wallet you already own.
02 · Partner devicelater
The same logic on an existing hardware wallet, in the LVL256 skin. No factory, no new chip, nothing new to trust.
03 · The NEOlater
Our own device, the one above, built only once the first two have shipped and people use them.
The evidence
A real-money test, running since 2019.
In 2015 someone put bitcoin in wallets whose keys were made deliberately small, from easy to very hard. In 2019 they made 20 of those keys public, exactly like any wallet that has sent a transaction. Since then, whoever cracks one takes the bitcoin, and the blockchain shows the moment it happened. 15 are cracked. The bigger the key, the longer it held out. The 5 left still hold 75 BTC between them.
Key sizeHow long it survived once public
- 65–105-bit9 keys, all cracked within 114 days
- 110-bitcracked after 1.0 years
- 115-bitcracked after 1.0 years
- 120-bitcracked after 3.7 years
- 125-bitcracked after 4.1 years
- 130-bitcracked after 5.3 years
- 135-bitcracked after 7.2 years
- 140-bitnot cracked yet · 7.4 years and counting · 14 BTC waiting
- 145–160-bit4 bigger keys, not cracked · 62 BTC
- LVL 256Your wallet's key. The boss.260.5 times harder than the biggest one cracked. At today's pace, reached around 2058.
The Bitcoin puzzlereal keys and real bitcoin, separate from LVL256's own bounties
Your wallet's key is 256-bit. Every extra bit doubles the work, so today it is 260.5 times harder than the biggest key cracked so far. About this data. The AI result that started this: HAWK key recovery, July 2026.
Built so nobody has to be trusted.
A
Drawn from a future block
Each instance comes from the hash of a block chosen in advance, read through the chain's own history contract. Parameters are checked onchain before any money is locked.
B
Claimed without front-running
Solvers commit to a solution bound to their own address, then reveal it. Copying a commitment pays the original solver. Copying a reveal comes too late to win.
C
Paid by the contract
Prizes sit in escrow from the day a level is posted. The owner cannot withdraw them, change a level or pick an instance. Unsolved prizes return to the pool after a year.
Status
Plain about what is and isn't done.
- Network
- BNB testnet, Sepolia and Solana devnet. Prizes are test tokens with no value.
- Audit
- Not audited yet. An independent audit comes before mainnet.
- Parameter review
- Pending. Independent cryptographers review the spec before real prizes.
- Costs
- Estimated, not benchmarked. How they are made
- Sources
- Every claim cites a primary source. Read them