BNB testnet · Testnet demo · release 1

64-bit secp256k1-shaped

Find the secret scalar d with d·G = Q. Exactly what recovering a private key from its public key means.

Fell in 31 s
Prize
25 tUSD
Estimated cost
under $1 on CPU2³⁰·⁵ work, estimated, not benchmarked
Opened
Oct 14, 2026 · 5 days ago
Expires
Oct 14, 2027
Commitments
1

Fallen

Solved 31 s after it opened.

Committed Oct 14, 2026 by 0xc8F29e…0BA1Fa. Paid 25 tUSD.

verify the payout onchain

The instance

Derived from the hash of block 136,763,103. Anyone can recompute every value below from the spec and the chain.

Level id
0xfb12742c39cf771f7366d19c0e6504289f4a831b7efe31ea066848e5d17e6f51
Seed
0x44a01510a57fe46eb56e747a4c1b11b27095bf28abcc74cbadb23ace586c128c
Curve
y² = x³ + 7
p
9223372036854783571
n (order of G)
9223372034947717963
G
(2617508912950131665, 5997218944238621264)
Q
(8242614105725662877, 4454980521090262996)
Contract
0xceE960…faf856

Claim

Solved it? Check the answer here, then commit and reveal. The reference solver and the spec are in the method notes. How to solve

This level has fallen.

Its prize has been paid. The date and the solution stay on the chain.

History

Every event for this level, from the contract.