Sepolia · Testnet demo · release 1

64-bit secp256k1-shaped

Find the secret scalar d with d·G = Q. Exactly what recovering a private key from its public key means.

Fell in 18 h
Prize
25 tUSD
Estimated cost
under $1 on CPU2³⁰·⁵ work, estimated, not benchmarked
Opened
Oct 14, 2026 · 5 days ago
Expires
Oct 14, 2027
Commitments
3

Fallen

Solved 18 h after it opened.

Committed Oct 15, 2026 by 0x46907e…9a42EF. Paid 25 tUSD.

verify the payout onchain

The instance

Derived from the hash of block 11,914,105. Anyone can recompute every value below from the spec and the chain.

Level id
0x29b87e2f043639264f62e40299040d78f0ce0238aaeec2a41bafab8dbe47e340
Seed
0xf28b03e2ad48b0f8c4aba587cbae1aaa421990963b052cc37c543e59d0a2e1b8
Curve
y² = x³ + 7
p
9223372036854783571
n (order of G)
9223372034947717963
G
(2617508912950131665, 5997218944238621264)
Q
(2350926527912006740, 8031894055669727174)
Contract
0x5D6322…C48277

Claim

Solved it? Check the answer here, then commit and reveal. The reference solver and the spec are in the method notes. How to solve

This level has fallen.

Its prize has been paid. The date and the solution stay on the chain.

History

Every event for this level, from the contract.