Sepolia · Record

64-bit secp256k1-shaped

Find the secret scalar d with d·G = Q. Exactly what recovering a private key from its public key means.

Open
Prize
Record level, no prize
Estimated cost
under $1 on CPU2³⁰·⁵ work, estimated, not benchmarked
Opened
Oct 19, 2026 · 2 h ago
Expires
Oct 16, 2036
Commitments
0

The instance

Derived from the hash of block 11,947,420. Anyone can recompute every value below from the spec and the chain.

Level id
0x345023c7e36a18c425fdfd0d3f47ff21a4d09a3900429a2296950d899e82414e
Seed
0xb1f468a36a11a6b9cd5f4221be99b616af4583d0bbe9c4b97c0b7995d646bf26
Curve
y² = x³ + 7
p
9223372036854783571
n (order of G)
9223372034947717963
G
(2617508912950131665, 5997218944238621264)
Q
(2848370891984658001, 1516322661242102288)
Contract
0x5D6322…C48277

Solve

Find d. Small levels can be solved right here; big ones need a GPU. How solving works

Solve in your browser

This level is small enough for a laptop. Your browser searches for d on every core you give it. Nothing is sent anywhere, and the answer is checked here before you can use it.

Average work
3.8 billion steps
This device
…
Expected time
about 3 min 11 s
at 20 million steps/s per core

Keep this tab in front while it runs. Browsers slow down tabs in the background.

Claim

Solved it? Check the answer here, then commit and reveal. The reference solver and the spec are in the method notes. How to solve

  1. 1

    Connect a wallet

    No browser wallet found. Any EIP-1193 wallet works, on Sepolia.

  2. 2

    Check your solution

    Checked in your browser against the live instance. Nothing is sent until you commit.

  3. 3

    Commit

    Publishes a fingerprint of your solution bound to your payout address. Nobody can read the solution from it, and copying it would still pay you.

  4. 4

    Reveal, then get paid

    Reveal once your commitment is 3 blocks old. The earliest commitment with a valid reveal is paid after a …-minute settlement window.

Your salt is kept in this browser and in the receipt file. Without it a commitment cannot be revealed. Every claim from this browser is listed under My claims.

History

Every event for this level, from the contract.