boha

Crypto bounties, puzzles and challenges data library.

Installation

CLI

Arch Linux (AUR):

paru -S boha

From crates.io:

cargo install boha --features cli,balance

Library

[dependencies]
boha = "0.18"

With balance fetching:

[dependencies]
boha = { version = "0.18", features = ["balance"] }

Usage

CLI

# Statistics
boha stats

# List puzzles
boha list
boha list b1000
boha list b1000 --unsolved
boha list b1000 --with-pubkey

# Show puzzle details
boha show b1000/90
boha show gsmg
boha show hash_collision/sha256

# Show puzzle and open asset in browser
boha show zden/level_4 --open

# Show collection author
boha author b1000
boha author zden

# Get key range
boha range 90

# Check balance (requires --features balance)
boha balance b1000/71

# Verify private key derives correct address
boha verify b1000/66
boha verify --all
boha verify --all --quiet; echo $?

# Export full database (JSON/JSONL only)
boha export
boha export b1000 zden
boha export --unsolved
boha export -o jsonl | jq .
boha export --compact

# Output formats (default: table)
boha -o json stats
boha -o yaml show b1000/90
boha -o csv list b1000 > puzzles.csv
boha -o jsonl list b1000 --unsolved | jq .

Output formats

Note: export command supports JSON and JSONL only. Use list command for CSV/YAML output.

Library

use boha::{arweave, b1000, ballet, bitaps, gsmg, hash_collision, zden, Status};

let p90 = b1000::get(90).unwrap();
println!("Address: {}", p90.address.value);
println!("HASH160: {}", p90.address.hash160.unwrap());
println!("Funded: {}", p90.start_date.unwrap_or("unknown"));

let range = p90.key_range().unwrap();
println!("Range: 0x{:x} - 0x{:x}", range.start(), range.end());

if let Some(txid) = p90.claim_txid() {
    println!("Claimed in: {}", txid);
    println!("Explorer: {}", p90.chain.tx_explorer_url(txid));
}

let unsolved: Vec<_> = b1000::all()
    .filter(|p| p.status == Status::Unsolved)
    .filter(|p| p.pubkey.is_some())
    .collect();

let gsmg_puzzle = gsmg::get();
let sha256 = hash_collision::get("sha256").unwrap();
let level1 = zden::get("level_1").unwrap();

let puzzle = boha::get("b1000/90").unwrap();
let puzzle = boha::get("gsmg").unwrap();
let puzzle = boha::get("bitaps").unwrap();
let puzzle = boha::get("bitimage/kitten").unwrap();
let puzzle = boha::get("zden/level_1").unwrap();

// Access puzzle assets (images, hints)
if let Some(path) = puzzle.asset_path() {
    println!("Local: {}", path);
}
if let Some(url) = puzzle.asset_url() {
    println!("Remote: {}", url);
}

Balance fetching (async)

use boha::{b1000, balance};

#[tokio::main]
async fn main() {
    let puzzle = b1000::get(71).unwrap();
    let bal = balance::fetch(puzzle.address.value).await.unwrap();
    
    println!("Confirmed: {} sats", bal.confirmed);
    println!("Total: {:.8} BTC", bal.total_btc());
}

Features

Collections

b1000

Bitcoin Puzzle Transaction - 256 puzzles where each puzzle N has a private key in range [2^(N-1), 2^N - 1].

Solved (82): 1-70, 75, 80, 85, 90, 95, 100, 105, 110, 115, 120, 125, 130

Unsolved with public key (6): 135, 140, 145, 150, 155, 160

Unsolved (72): 71-74, 76-79, 81-84, 86-89, 91-94, 96-99, 101-104, 106-109, 111-114, 116-119, 121-124, 126-129, 131-134, 136-139, 141-144, 146-149, 151-154, 156-159

Empty - no funds (96): 161-256

gsmg

GSMG.IO 5 BTC Puzzle - Multi-phase cryptographic challenge with a single Bitcoin address.

Originally 5 BTC, prize halves with each Bitcoin halving.

hash_collision

Peter Todd's hash collision bounties - P2SH addresses that can be claimed by finding hash collisions.

zden

Zden's Visual Crypto Puzzles - Artistic puzzles where private keys are encoded in images, animations, and visual patterns.

Unsolved: Level 5, Level HALV

arweave

Tiamat's Arweave Bounties - Cryptographic puzzles on the Arweave blockchain, created by Tiamat (chronobot.io).

ballet

Bobby Lee's Ballet Crypto Puzzles - Physical Bitcoin notes (Ballet wallets) with BIP38-encrypted private keys. Solve by cracking the passphrase printed on the card.

bitaps

Bitaps Mnemonic Challenge - Shamir Secret Sharing Scheme (SSSS) puzzle where the original 12-word mnemonic was split into 5 shares using 3-of-5 threshold.

Two of three required shares are published. Goal: break the SSSS scheme or find implementation bugs.

bitimage

Bitimage puzzles - Bitcoin addresses derived from arbitrary files using SHA256(Base64(file)) as BIP39 entropy.

Both puzzles use the same source file (Antonopoulos kitten tweet). The passphrase puzzle requires an unknown BIP39 passphrase.

Data

All puzzle data is embedded at compile time from JSONC files in data/.

Each puzzle includes: address (with HASH160 and type), chain, status, prize, public key (if exposed), private key (if solved), key source, solve date (if solved), solve time, start date (when funded), transactions history, solver information, and assets (puzzle images, hints).

Assets

Visual puzzle collections (zden, gsmg, bitimage) include embedded assets in assets/ directory:

assets/
├── zden/           # 15 puzzle images
├── gsmg/           # puzzle.png, follow_the_white_rabbit.png
└── bitimage/       # kitten images

Access via library:

let puzzle = zden::get("level_4").unwrap();
println!("{}", puzzle.asset_path().unwrap());  // assets/zden/level_4/puzzle.png
println!("{}", puzzle.asset_url().unwrap());   // https://raw.githubusercontent.com/...

Agent Skills

This project includes agent skills that teach AI coding agents how to use boha.

Static skills

Curated by the project author:

npx skills add oritwoen/boha

Dynamic skills

Auto-generated from live docs, issues, and releases using skilld:

npx skilld add boha

Related Tools

License

MIT