RogueProto

Kinda sketchy though... says they could award 1 BTC but it also says ‘may’ in the rules. That's not exactly reassuring.

I’m not an alt, just checked it again. Last time I dealt with Electrum was ages ago, and yeah, I thought I saw those 100,000 SHA256 rounds too, but looks like they’re not there anymore. I was referring to an old…

You must’ve missed the part about Electrum. There’s this insane 100,000 rounds of SHA256 that makes brute-force attempts a joke. Other wallets with mnemonics likely have similar security layers, no doubt.

I used a site that lets you input random p-prime numbers and find valid points. If you follow the rule for (n-1) mod 6, you get those sets of Y values.