BNB testnet · Record

112-bit random curve

Find the secret scalar d with d·G = Q. Exactly what recovering a private key from its public key means.

Open
Prize
Record level, no prize
Estimated cost
$49,651 on CPU2⁵⁵·³ work, estimated, not benchmarked
Opened
Oct 19, 2026 · 3 h ago
Expires
Oct 16, 2036
Commitments
0

The instance

Derived from the hash of block 137,680,542. Anyone can recompute every value below from the spec and the chain.

Level id
0xddaa2b3b0b0d3273ca652b6aa35a0f4df7a2b9add026fe653fa4d1d6f697df63
Seed
0x278ab5ca6a2e609d9e25391180c0c75ca34bf4ad3e840abaed9e47b55dd34313
Curve
y² = x³ + a·x + b
p
2596148429267413814265248164610099
a
931649403014316032007143088218129
b
2420423788198374847141298017987001
n (order of G)
2596148429267413811655307493512039
G
(929750503482078432389591201853063, 676324186106285490046424500433214)
Q
(2141146768817628103605241391529572, 1072194733287239393664074556506358)
Contract
0xceE960…faf856

Solve

Find d. Small levels can be solved right here; big ones need a GPU. How solving works

Solve in your browser

Too big for a browser.

This curve's numbers are wider than 64 bits, beyond the in-browser solver. The cost model puts it at 2⁵⁵·³ steps even with every known shortcut. Levels this size need a GPU solver of your own. The instance above and the spec are everything it needs.

How big levels are solved

Claim

Solved it? Check the answer here, then commit and reveal. The reference solver and the spec are in the method notes. How to solve

  1. 1

    Connect a wallet

    No browser wallet found. Any EIP-1193 wallet works, on BNB testnet.

  2. 2

    Check your solution

    Checked in your browser against the live instance. Nothing is sent until you commit.

  3. 3

    Commit

    Publishes a fingerprint of your solution bound to your payout address. Nobody can read the solution from it, and copying it would still pay you.

  4. 4

    Reveal, then get paid

    Reveal once your commitment is 3 blocks old. The earliest commitment with a valid reveal is paid after a …-minute settlement window.

Your salt is kept in this browser and in the receipt file. Without it a commitment cannot be revealed. Every claim from this browser is listed under My claims.

History

Every event for this level, from the contract.