Bitcoin puzzle transaction ~32 BTC prize to who solves it

[The_Prof]

Here is a tiny list of subranges scanned to 100% competition. In case anyone was scanning them, don't bother.

7e0f0
7f0f0
6f0f0
6e0f0
5e0f0
5f0f0
4e0f0
4f0f0

Why did you scanned those? You lost a lot of time for nothing...the first 7 of key do not have double 0 or tripple 0
You will see when the key will be found )

A few months ago some poster swore up and down she randomly found the key but her computer crashed and she couldn't retrieve it in time. She said she caught a glimpse of the first few digits before the crash.

I offered to help her and just send over all of the btc if found. 

Turns out it wasn't true. Shocking.

Anyway, those were the keys and the variations of the beginning of the key she swore to God she found.

While it won't change much for me. I think thanks are seldom shown in this place. So thank you, I am sure you saved many people quite some time.

[analyticnomad]

While it won't change much for me. I think thanks are seldom shown in this place. So thank you, I am sure you saved many people quite some time.
[/quote]

Hey no worries. I figured however small, it could help people avoid those areas.

[puzzle_72_worker]

Why nobody took in count the length of the key? only 2-3 keys were with 33 length, and the rest are 34 length.
If you exclude the 33 length from puzzle 71, you have 20% less, so the difficulty decrease.

This is nothing more than a heuristic. It does not guarantee

I think you didn't do the math correct...if you remove them before calculating, you reduce the difficulty.
So 20% is quite a lot in speed.

[eggsylacer]

Why nobody took in count the length of the key? only 2-3 keys were with 33 length, and the rest are 34 length.
If you exclude the 33 length from puzzle 71, you have 20% less, so the difficulty decrease.

This is nothing more than a heuristic. It does not guarantee

I think you didn't do the math correct...if you remove them before calculating, you reduce the difficulty.
So 20% is quite a lot in speed.

You can subtract 2^n and check whether the key exists within a certain range, and this will result in the same reduction in complexity.
But once again, the range remains the same: from 2^k to 2^(k+1) - 1. Accordingly, the complexity will remain the same - these are all heuristics.

[cicada 3301]

So, what's been accomplished is over 18 program iterations, 14 physical and mathematical iterations. 17 patterns, 22 constants. I'll explain the essence of the problem: the k0 primary wallet, from which the k256 originates. Why did I say this is the same problem as the Einstein oscillator? The essence is that the k0 is not visible. The reason is parallax, and it's impossible to go to the side, beyond the angle of the gravitational lens. Therefore, there are only k256 wallets, only visible, 83 of which are open. If we transfer this to cosmology, these are Einstein arcs or the Einstein cross.
"At this point, I won't answer which option is here."
The essence of the task is to transfer and create a control analogue, but in the blockchain, since it is obvious that k0 is a specific point in space and time. And the task is simply to restore the primary wallet, and for this, we need to create a mathematical model, which is what I did. I'll tidy up the program today and start opening.
This is a game with topology, as well as functions.

[scamrevealer]

...

This has been posted already. Please use the search function.

[cicada 3301]

In the course of experiments, I even created my own kangoon gpu and kangoon cpu C11 invariants and Cobol as well as a calculator for operating numbers, up to 16k values container size. Working is 4k for a single number.

[detechs]

In the course of experiments, I even created my own kangoon gpu and kangoon cpu C11 invariants and Cobol as well as a calculator for operating numbers, up to 16k values container size. Working is 4k for a single number.

Your feeding the threads info into an ai. And it's telling you it can solve it and then you're coming here and tell us without actually solving it. How do I know? Cause I also scraped the forum and anylise everyone's posts, and yours shows obvious patterns lol. Have you closed the circle yet? Cause if not you'll be chasing your tail like everyone else

[fecell]

Cause if not you'll be chasing your tail like everyone else

not a tail but a noose.

[detechs]

Cause if not you'll be chasing your tail like everyone else

not a tail but a noose.

anyone only finding a noose as the answer to the puzzle deserves the karma they will receive from putting it on. there is no exit at the boundaries... or at the centre and you cannot open the exit yourself. its opened for you after you crack open the door, there is no lock on it. its only hidden from you until the moons light reflects off it

[mohamad_kabaha]

Hello saatoshi_rising,

I am contacting you regarding the original Bitcoin Puzzle challenge.

I have been conducting an independent reproducibility analysis of the puzzle using the recorded F01–F27 filter data and the recovered 18-key set.

Our current result identifies F27 as the unique surviving candidate among the 27 recorded filters.

Key results:

• Frozen F27 modulus: M = 200,560,490,131
• Number of keys: 18
• Observed F27 strength: approximately 8.975 × 10⁻¹¹
• Among the 27 recorded modulus/filter entries, F27 is the only one satisfying the observed threshold
• Observed ranking statistic: S = 1 / 27 = 3.7037%

The 18-key set was kept under a strict Discovery/Validation split:

Discovery:
65, 66, 67, 68, 69, 70, 75, 80, 85

Validation:
90, 95, 100, 105, 110, 115, 120, 125, 130

We also performed a 1,000,000-trial Monte-Carlo reproducibility audit. Two independently recorded results currently exist:

Historical/Provisional:
p_MC = 255 / 1,000,000 = 0.000255

Fresh explicit verification:
p_MC = 64 / 1,000,000 = 0.000064

We have deliberately not merged these two values or declared either one to be the final p-value, because the exact original RNG/random-sampling implementation has not yet been established.

I would greatly appreciate confirmation from you on one specific point:

Does the F27 construction with M = 200,560,490,131 correspond to the intended mechanism/design of the original puzzle?

If you can also confirm the original key-generation or RNG/sampling procedure used in creating/testing the puzzle, it would allow us to resolve the reproducibility discrepancy between 0.000255 and 0.000064.

I can provide the complete mathematical/computational audit and all intermediate results if you are interested.

Thank you for creating the puzzle and for any clarification you can provide.

Best regards,

[lovebirdtop]

Hey saatoshi_rising, I'd like to know the private key for 71. I just need a small change in my life; it's very necessary. Don't paste it here because there are super-fast users copying, pasting, and converting it to a WIF file!! lol!!!

Hey Mohamad Kabaha, if you get the info and solve all the puzzles... what are the rest of us supposed to do??? Let everything stay the same so we can continue having a good hobby to keep us entertained!!! That's the way to do it!!

Hey saatoshi_rising, don't give us any more clues. We'll figure everything out in due time. Thanks for giving us these million-dollar gifts!!

[GinnyBanzz]

People writing big messages to Satoshi Rising, thinking he's actually going to reply to them, or that he even monitors this thread 😂

[satashi_nokamato]

Seems like there is a demand for Satoshi's attention. Here is mine:

If it's possible for you to reveal the actual public keys of unsolved puzzles, 140, 145 etc. But on secQ256k1 curve with it's Gx= 0x1.
Let's tackle this beast from a new angle shall we?

Btw, 81 up to 159 with no exposed public keys will remain there for QC guys. Let them have it, we are here for scientific reasons.

[Pac_Man]

I think the only mistake saatoshi_rising made in the puzzle was removing 96 addresses from the puzzle without disclosing the private keys for those puzzles.

I believe there was indeed an initial structure for creating the puzzle, and by removing all those addresses, the entire structure was broken.

Some people focus solely on what saatoshi_rising said in his only known appearance here, but this appearance occurred more than two years after the creation of this puzzle. It's quite natural that after so much time he has forgotten or deliberately not revealed exactly how everything was actually created.

So far, considering all the private keys released, everything indicates that there was indeed a structure created for generating all the private keys.

The creator of the puzzle may not be monitoring this forum daily, but he certainly visits it from time to time. Or have you already forgotten that after so much time has passed since the creation of the puzzle without saying anything, he replied to a user and later made changes to the entire puzzle!

[fairmuffin]

I think the only mistake saatoshi_rising made in the puzzle was removing 96 addresses from the puzzle without disclosing the private keys for those puzzles.

I believe there was indeed an initial structure for creating the puzzle, and by removing all those addresses, the entire structure was broken.

Some people focus solely on what saatoshi_rising said in his only known appearance here, but this appearance occurred more than two years after the creation of this puzzle. It's quite natural that after so much time he has forgotten or deliberately not revealed exactly how everything was actually created.

So far, considering all the private keys released, everything indicates that there was indeed a structure created for generating all the private keys.

The creator of the puzzle may not be monitoring this forum daily, but he certainly visits it from time to time. Or have you already forgotten that after so much time has passed since the creation of the puzzle without saying anything, he replied to a user and later made changes to the entire puzzle!

I agree. The issue with this puzzle, is that we never had a full private key even for the solved ones. The 000000 masking removes the leading bits, which if analyzed completely may have shown a pattern (if there's any). I doubt that we'll get the private keys of the cancelled puzzle bits or even any hint, since the creator mentioned the puzzle being a crude measurement of the bruteforce capability/power of the community.

[satashi_nokamato]

   

Do you by any chance have a repo? If so kindly place a link somewhere on your profile, given of course you are willing to share open source tools.

[Cricktor]

There are no patterns in keys from deterministic BIP32 derivation. At least from what I understand about how BIP32 works and the assumption that saatoshi_rising didn't fool everybody here in this thread by playing an imposter and blatantly lying.

I get it: we've no reasons or proof to believe what user saatoshi_rising wrote is correct and the truth. Can we verify it? Not that I would know how.

Would some hidden structure or pattern make sense for the purpose of this Bitcoin challenge to measure and explore the key cracking abilities? I don't think so, actually, absolutely not.

If there were patterns, some cryptography functions would've been fundamentally broken. Have we seen evidence for the latter? I don't think so.

I'm not against brainstorming or coming up with new ideas, but unfortunately it looks more like a lot of nonsense than something actually worth exploring deeper.

[puzzle_72_worker]

Why the moderator was deleting the post about the length of the address? Why nobody skipped the 33 length and search only for 34 length?

The pattern is very clear for me, and starting to grow.

https://imgur.com/a/yZtpLZw

[satashi_nokamato]

Why the moderator was deleting the post about the length of the address? Why nobody skipped the 33 length and search only for 34 length?

The pattern is very clear for me, and starting to grow.

Complaining about moderators is pointless. Are you and other hunters here looking for mathematical relations between public keys, hash functions and the order of the 2 primes on ECC?  as you may know, addresses and their hashes are like the streets and city names, you can't simply find anyone you want by going to some specific locations. Trust me and ask satoshi ( the one person nobody, not even himself knows where he is at).

As a reminder Gx of secp256k1 is also a valid point on secQ256k1, maybe it would be better for the author to use that curve and generate Qs of puzzle exposed Qs and somehow share them. Let's try breaking the ECC before the machines do it for us.