Ethereum / Uniswap v4 hook / q = 12289, xn + 1

Falcon-512 today reads: untouched.

Find a shorter vector. The hook checks it and pays you.

A permanent public lattice challenge in Falcon's own ring: random NTRU-shaped lattices with no planted key. The instances come from drand after launch, so nobody holds a key, the deployer included. Commit a vector inside a buy, reveal it a block later, and the hook checks it with keccak and integer arithmetic.

The sievefive meshes, one ringlive state
Each mesh is drawn from the true roots of xn + 1 mod 12289. Loose grains are caught by the mesh under them; nothing passes unless the chain holds a record. Each grain that passes a mesh is one real record on that rung, read from the hook's events.

How a record lands

No loop and no verifier on a plain buy.
01

Commit in a buy

Your buy carries a hash of your vector in its hookData. The hash names your payout address, so a copied commitment only registers your claim for you.

02

Reveal next block

From the next block anyone can relay the reveal: the pair (f, g) with f · h = g in the ring, plus two integer quotients k and t. Send it through a private RPC.

03

The hook checks

Five polynomials at one keccak point mod 2255 - 19, every coefficient width-capped so a match forces an exact identity. 434,452 gas at n = 1024, measured.

04

300 blocks, then pay

A record must cut the squared norm by 2%. After a 300-block window it finalizes and earns shares priced by the compute it implies, plus its take of the lump. Nothing below blocksize 60.

The dial, today

Records: 0. Open the board
RungRecord (norm)Implied blocksizeFloor modelVerifier gas M
Be much more paranoid on param sizes.
Vitalik Buterin, 7 Oct 2026. SIEVE is a dial for that paranoia.