Sepolia · Record

dimension 208 near-SVP

Find a short nonzero vector z with A·z = 0 mod q. The hard problem under lattice signatures.

Open
Prize
Record level, no prize
Estimated cost
$3.1×10⁹ on CPU2⁸⁰·⁵ work, estimated, not benchmarked
Opened
Oct 19, 2026 · 3 h ago
Expires
Oct 16, 2036
Commitments
0

The instance

Derived from the hash of block 11,947,421. Anyone can recompute every value below from the spec and the chain.

Level id
0xfad2b4d3c3b8bec66fd3275668889fe3c63bd998d9b8b11effc6a39a4d2ba227
Seed
0x0ecf6634feffcc44f7bc5bb6e715a95d1fc5cdb6a15fe9ba5f25f8252760f6c0
Shape
A is 104 × 208 over Z_q
q
65521
Bound on ‖z‖²
879727
Matrix
coef(k) from keccak256("SHORLINE/v1/sis/A" ‖ seed ‖ u32(k/4)), spec 4.1
Contract
0x5D6322…C48277

Claim

Solved it? Check the answer here, then commit and reveal. The reference solver and the spec are in the method notes. How to solve

  1. 1

    Connect a wallet

    No browser wallet found. Any EIP-1193 wallet works, on Sepolia.

  2. 2

    Check your solution

    Checked in your browser against the live instance. Nothing is sent until you commit.

  3. 3

    Commit

    Publishes a fingerprint of your solution bound to your payout address. Nobody can read the solution from it, and copying it would still pay you.

  4. 4

    Reveal, then get paid

    Reveal once your commitment is 3 blocks old. The earliest commitment with a valid reveal is paid after a …-minute settlement window.

Your salt is kept in this browser and in the receipt file. Without it a commitment cannot be revealed. Every claim from this browser is listed under My claims.

History

Every event for this level, from the contract.