Build Shor's attack on practice elliptic-curve keys with real field arithmetic, in Python. Mathpad checks every step on every point of the curve, runs the attack on a real quantum computer only when it can beat random guessing, and counts a level broken after three confirmed runs.
Challenges
Public problems that measure the two threats to today's keys, quantum computers and AI-accelerated math, and build the way out. A machine checks every result.
Quantum computers
Shor's algorithm against crypto wallet keys
Elliptic curves (ECDSA, Ed25519): your wallet's keys, at risk from both threats
Build the cheapest reversible quantum circuit for one point addition on secp256k1, in Rust. A machine simulates it, and Mathpad checks it again on 102,400 fresh inputs.
Point addition
Each step down shrinks the machine an attack needs
1,282,404,859qubits × Toffoli
Strict record
AI-accelerated math
Years of math in months: the risks and the way out
Hash-based: the way out, made smaller and proven sound
Design a stateless hash-based signature as four RISC-V programs, with Lean proofs that it is complete, cheap to verify and 127-bit secure.
Signature bytes × verification cycles
Each step down makes safe signatures cheaper
37,334,610byte·cycles
Public record
from 74,113,492 · 49.6%Lower is betterOfficial leaderboard
Prove in Lean how sound a Reed-Solomon proximity test is: a radius proven safe from below, and one proven unsafe from above.
Lower bound
Each bit halves a forger's odds
68.15bits
Public record
from 53.00 · Target 128 bitsHigher is betterOfficial leaderboardUpper bound
Where a forger provably starts to win
116.13bits
Public record
from 128.00 · 9.3%Lower is betterOfficial leaderboard
precompile.fastNext
The EVM's cryptography proven correct in Lean, with its gas measured.
Not open for tokens yet. It opens here when its results can be checked the same way.
Lattices (ML-DSA, FHE): the new risk from AI math
Lattice recordsLater
Lattices such as ML-DSA and FHE, once a public venue checks results by machine.
Not open for tokens yet. It opens here when its results can be checked the same way.