Cool I like that!
Solving the puzzle may require the same amount of effort as a brute force hack of the private key so it evens out.
Its a possibility

. You can also patch their code by replacing the HashWord function with SHA256 provided by Crypto-JS. There would be no hash collisions then. Just to give an idea on the difficulty, it took about <10 seconds to solve all addresses via a Java program running on a CPU.
Edit:
I bruteforced all possible hash collisions with hash 35431 over characters 48-123 (0-9, alphabet, + some extra) and none of them appear to be valid private keys. Are you sure its updated?
Let me test it again. I had some trouble with removing auto capitals and lowercase in css and javascript, but i think i got it fixed.
Maybe you forgot that it was a mini key? Make sure you are using the updated link ..