The right tool depends on whether the puzzle's public key is known. Address-only puzzles require brute-force scanning. Puzzles with revealed public keys can be attacked with kangaroo/BSGS algorithms that are exponentially faster.
Address-only (brute force)
Scan every key in the range, compute the Bitcoin address, compare against the target. Puzzle N contains 2^(N-1) candidate keys, which is infeasible to enumerate above the lowest remaining ranges.
Best for: Puzzles 71–74 (lowest unsolved, no known public key)
Public key known (kangaroo/BSGS)
When the public key is revealed, Pollard's kangaroo and Baby-step Giant-step need roughly square-root work over a bounded interval. Puzzle #135 was spent in July 2026; five higher known-public-key targets remain.
Best for: Puzzles 140, 145, 150, 155, 160 (public keys known)
lotterypzl ours private
Conductor CLI and guided TUI for coordinated lottery-mode search. Claims bounded key ranges (tickets), logs to a shared ledger, supports detached GPU sessions.
Type: Orchestration
Engine: Wraps PZL-Roo and PZL-Hunter
Link: GitHub → (requires read-scoped token)
PZL-Roo ours private
Turbo-only CUDA kangaroo engine based on RCKangaroo v4 SOTA v2, with embedded verified cubins for sm_89/sm_120, strict GPU rejection, parser-safe output, and exact-state PZLCKPT2 resume.
Type: GPU kangaroo
Best for: Remaining known-public-key puzzles #140–#160
Verified: 3.124 GKeys/s median on RTX 4070 Laptop (sm_89); real sm_120 validation pending
Link: GitHub → (requires read-scoped token)
PZL-Hunter ours private
GPU scanner engine for address-only puzzles. Brute-force address matching with CUDA, designed for ledger-backed no-repeat coverage.
Type: GPU brute force
Best for: Puzzles 71–74 (no known public key)
Link: GitHub → (requires read-scoped token)
Keyhunt
CPU-based brute-force scanner and BSGS solver by AlbertoBSD. Supports compressed/uncompressed addresses, random and sequential modes, and BSGS for known public keys.
Type: CPU brute force + BSGS
Author: albertobsd
Link: GitHub →
Keyhunt-cuda
GPU port of Keyhunt by Wandering Philosopher. CUDA-accelerated brute-force and BSGS for NVIDIA GPUs. Significantly faster than CPU version.
Type: GPU brute force + BSGS
Author: Wandering Philosopher
Status: Archived (use for reference)
Link: GitHub →
Kangaroo
GPU Pollard's kangaroo implementation by JeanLucPons. A foundational reference for solving intervals with known public keys.
Type: GPU kangaroo
Author: JeanLucPons
Limit: Up to ~125-bit intervals
Link: GitHub →
Etayson Kangaroo
Modified kangaroo by Etayson for puzzles 130+. Includes GPU BSGS, fraction kangaroo, fraction BSGS, and server clients for distributed solving. Required for puzzles above 125-bit.
Type: GPU kangaroo (modified)
Author: Etayson
Best for: Puzzles 130–160
Link: GitHub →
BitCrack
GPU address-only scanner. Brute-forces private keys and checks against a target Bitcoin address. Supports multiple GPUs and is popular for puzzle 71 scanning.
Type: GPU brute force
Link: GitHub →
RCKangaroo reference
Fast NVIDIA ECDLP solver by RetiredC. Version 4 introduced SOTA v2 and published architecture-specific assembly/cubins; it is the audited upstream for the unified PZL-Roo engine. RetiredCoder self-attributed the #135 solve alongside the July 2026 update.
Type: GPU kangaroo (v4 SOTA v2)
Author: RetiredC
Historical solves: #120, #125, #130, and self-attributed #135
License: GPLv3
Link: GitHub →
ASICs don't work here. Bitcoin mining ASICs are optimized for SHA-256d, not elliptic curve
operations. They cannot scan private keys or run kangaroo algorithms. Don't waste money on ASICs for puzzle hunting.
Don't own GPUs? Rent them by the hour. These are the most popular platforms for puzzle hunters.
Vast.ai
GPU marketplace with hourly and spot listings. Prices are volatile: copy the current quote into LOTTERYPZL_USD_PER_GPU_HOUR instead of relying on a static table.
Best for: Cost-effective GPU rental, wide selection
Pay-per-hour: Yes, no commitment
Link: vast.ai →
Clore.ai
GPU rental platform with crypto-native payment. Supports SSH access, hourly billing, and automatic deployment. Popular in the puzzle hunting community.
Best for: Crypto payments, European hosting
Pay-per-hour: Yes, CLORE token or crypto
Link: clore.ai →
Security tip: When renting GPUs for puzzle hunting, use lotterypzl --detach to run
sessions that survive SSH disconnects. Never store private keys on rental instances — use
untrusted_computer mode if available. Wipe the instance after your session.