Quote

If your transaction txid starts with 6 or more zeros, you earn MHIN tokens - and the more zeros, the more you earn!

What about checking signature size instead? In this way, z-value of the transaction can be indirectly checked inside Script, by checking the size of s-value of the signature. More details: https://bitcointalk.org/index.php?topic=5551080.0

Quote

Don't mine blocks, mine transactions!

I think it should be possible to do both with Merged Mining, but I don't know exactly, how to connect transaction mining with block header mining. Because then, users could mine regular Bitcoin block headers, and also use some of their power, to move some satoshis from some outputs, if they would commit into them.

Quote

Nicest Hash: 000000000000...abe66394e843

It was beaten inside signatures by this example: https://bitcointalk.org/index.php?topic=5551080.msg65618511#msg65618511

Here, instead of grinding transaction hash, z-value of the signature was mined, which allowed using low s-value, and claim 55k sats as a reward:

Quote from: kTimesG on July 24, 2025, 06:25:13 PM

Lucky hit after less than 3 hours. It's even a 53 bit PoW lol.

Code:

[9845 s] nLT012 = 4818944; 18211.71 M/s
[+] Key ID: 13949
S = 00000000000005a2844f65e43e868b000e27f653d19722b3da630bb59a57e34d
Z = 80000000000002d14227b2b6a674ef3fdaca7c092b7a374f200d1e4abbe775e4
Found! nLockTime = 498af3fc

So, as you can see, real satoshis can be deposited into puzzles, which could be claimed by those, who will mine such outputs.

And of course, it should be possible to do both: claim some reward from my puzzle, and then grind transaction ID, and claim some MHIN coins. But it would require more hashing (first my puzzle, and then the whole transaction, with additional power).

Edit: It got better, now 58-bit s-value is present on-chain:

Quote from: kTimesG on August 04, 2025, 02:21:51 PM

yo\(~

57-bit DONE after 8 days!

The found S actually had 58 leading bits of 0 (57 were enough).

Code:

MSG = 020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001280bc5682e0cbe78108912437ab583daa49a8fe66e995001a22a44aec2a3ab06000000288201369f69210279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798acf0d20000000000003d74fbff045b0f32c7adb53ce93b424e7ba280a4328ef880b60058c771b3ef599f9e95840000000081000000
Z = ffffffffffffffedfe243987a5dfa917a1bba0978fd5ce30e6df1b23cf1d8fc4
S = 000000000000002403b78c79c2a4014f1ea49d7614fa4fc457cb59250f722a34