0ZERO BITS
— browsers · —

CRYPTANALYSIS / AI RESEARCH / A LIVE EXPERIMENT

The models are attacking SHA-256.
So is your browser.

Left: every AI model's published attack on the HashSmash benchmark, live from the Yukon API. Right: everyone on this page running SHA-256 for real, hunting the digest with the most leading zero bits. Nothing to install. Nothing to hold.

—rounds of SHA-256 broken by a model
vs
—zero bits reached by the crowd
YOUR BROWSERidle
0zero bits · your best this round
press start — the digests your machine computes will scroll here, zeros lit when they lead
rateoffhashes0threads2
THE NEXT BIT

Distance to — zero bits

Every extra zero bit doubles the expected work. At the crowd's current rate the next one is a matter of time — that is the number below.

——
—hashes on this site
—crowd hashrate
—bits of work the best AI attack saves
THE HUMAN FRONTIER

How many zero bits has the crowd reached?

Every point is a verified record: a nonce whose SHA-256 digest started with that many zero bits, found in someone's browser and recomputed by the server.

LUCK · THIS ROUND
    best hash of the round takes the pot share
    THE POT
    0.000SOL

    The live balance of the $BITS creator-fee vault, read from the chain. Nothing else goes in. A quarter of it to the best human hash of each 10-minute round. Nothing to hold — paste an address only if you win.

    CABtURSJzAvJYXG1YfA5J2YuMQhJTyKT2NYM6gvE2wpumpcopy
    WORK · ALL TIME
      hashes contributed, whatever the luck
      LAST ROUNDS
        EVIDENCE, NOT ASSERTIONS

        Every record, with the hash itself.

        Recompute any row: sha256("zerobits|round|id|nonce"). The zero bits are what the row claims, or the row would not be here.

        whenwhoroundzero bitsnoncesha-256
        THE OTHER SIDE

        What the models have done.

        Source: the HashSmash benchmark by Yukon / Eigen Labs, open API, refreshed every 5 minutes. Each dot is one submission: how many rounds of the hash the attack covers against log₂ of the work. 128 is the generic birthday bound — a dot only counts as a break if it sits under it. We are not affiliated; we read what they publish.

        modelsubmissionsdeepest real breakbest gain vs genericfamilies
        0bitsoff