diff --git a/www/bend.html b/www/bend.html
index 8359109..b217727 100644
--- a/www/bend.html
+++ b/www/bend.html
@@ -78,7 +78,7 @@ make gpu-worker LUMBDA=asm                # smallest footprint</code></pre>
 
 <section id="ecdsa">
 <h2>Real workload &mdash; ecdsafail search</h2>
-<p>Beyond hash fan-out, bend now dispatches quantum-reversible circuit scoring for our secp256k1 point-addition challenge work at <a href="https://www.foxhop.net/ecdsa.html">foxhop.net/ecdsa</a>. Lumbda emits an upstream-format <code>ops.bin</code> from a Phase B Roetteler 12-step circuit, calls <code>(bend!-call '(cuda-sim-ops-bin path 141))</code>, &amp; receives Σ Clifford / Σ Toffoli totals back from a GPU worker over our binary wire &mdash; same cross-tier validation, same byte-identical portal contract the hash demo proves. Search loops on any host tier ship candidate scoring to whichever fleet node holds a warm CUDA context.</p>
+<p>Beyond hash fan-out, bend now dispatches quantum-reversible circuit scoring for a secp256k1 point-addition challenge attack (research artifact, internal repo). Lumbda emits an upstream-format <code>ops.bin</code> from a Phase B Roetteler 12-step circuit, calls <code>(bend!-call '(cuda-sim-ops-bin path 141))</code>, &amp; receives Σ Clifford / Σ Toffoli totals back from a GPU worker over our binary wire &mdash; same cross-tier validation, same byte-identical portal contract the hash demo proves. Search loops on any host tier ship candidate scoring to whichever fleet node holds a warm CUDA context.</p>
 <p>Measured on a 3090 against HEAD's 12.8 M-op kickmix <code>ops.bin</code> (716 MB):</p>
 <table>
   <thead><tr><th>n_batches</th><th>shots</th><th>wire-s</th><th>cpu-ms</th><th>gpu-ms</th><th>gpu/cpu</th></tr></thead>
diff --git a/www/index.html b/www/index.html
index 8551445..69fdaca 100644
--- a/www/index.html
+++ b/www/index.html
@@ -64,7 +64,7 @@ make test-all</code></pre>
 <p>Wrap any registered GPU-able form in <code>(bend …)</code> and lumbda decides per call whether to run it locally or ship it to a CUDA worker over our wire protocol. Tiny inputs stay local; heavy inputs bend to a worker that holds a warm CUDA context across requests.</p>
 <pre><code>(bend (cuda-shake-fanout one-million-inputs 32))   ; → 157 ms on a 3090
                                                    ;   12× faster than host hashlib</code></pre>
-<p>Real workloads from the catalog: SHAKE256 fan-out (12&times; over host hashlib at 1 M inputs), secp256k1 batched point-mul (6.5 Gkeys/s on a 4090, surveyed), tableau stabilizer sim (186&times; over Stim CPU, surveyed), and a quantum-reversible circuit simulator wired live to our ECDSA work at <a href="https://www.foxhop.net/ecdsa.html">foxhop.net/ecdsa</a>.</p>
+<p>Real workloads from the catalog: SHAKE256 fan-out (12&times; over host hashlib at 1 M inputs), secp256k1 batched point-mul (13.6 Mkeys/s on a 3090, ~309&times; coincurve CPU), tableau stabilizer sim (186&times; over Stim CPU, surveyed), and a quantum-reversible circuit simulator wired live to internal ECDSA research.</p>
 <p><a class="cta" href="bend.html">Read the full bend page &mdash; protocol, benchmarks, form catalog</a></p>
 </section>