0ZERO BITS
— browsers · —

CRYPTANALYSIS / AI RESEARCH / A LIVE EXPERIMENT

The models are attacking SHA-256.
So is your browser.

Left: every AI model's published attack on the HashSmash benchmark, live from the Yukon API. Right: everyone on this page running SHA-256 for real, hunting the digest with the most leading zero bits. Nothing to install. Nothing to hold.

—rounds of SHA-256 broken by a model
vs
—zero bits reached by the crowd
YOUR BROWSERidle
0zero bits · your best this round
press start — the digests your machine computes will scroll here, zeros lit when they lead
rateoffhashes0threads2
pump.fun
01 / THE NEXT BIT

Distance to — zero bits

Every extra zero bit doubles the expected work. At the crowd's current rate the next one is a matter of time — that is the number below.

——
—hashes on this site
—crowd hashrate
—bits of work the best AI attack saves
02 / THE HUMAN FRONTIER

How many zero bits has the crowd reached?

Every point is a verified record: a nonce whose SHA-256 digest started with that many zero bits, found in someone's browser and recomputed by the server.

03 / THE BOARDS

Luck pays. Work is remembered.

LUCK · THIS ROUND
    best hash of the round takes the pot share
    THE POT
    0.000SOL

    The live balance of the $BITS creator-fee vault, read from the chain. Nothing else goes in. A quarter of it to the best human hash of each 10-minute round. Nothing to hold — paste an address only if you win.

    WORK · ALL TIME
      hashes contributed, whatever the luck
      LAST ROUNDS
        04 / EVIDENCE, NOT ASSERTIONS

        Every record, with the hash itself.

        Recompute any row: sha256("zerobits|round|id|nonce"). The zero bits are what the row claims, or the row would not be here.

        whenwhoroundzero bitsnoncesha-256
        05 / THE OTHER SIDE

        What the models have done.

        Source: the HashSmash benchmark by Yukon / Eigen Labs, open API, refreshed every 5 minutes. Each dot is one submission: how many rounds of the hash the attack covers against log₂ of the work. 128 is the generic birthday bound — a dot only counts as a break if it sits under it. We are not affiliated; we read what they publish.

        modelsubmissionsdeepest real breakbest gain vs genericfamilies
        0bitsoff