2022.07.21 23:44:34 (1550235310482542592) from Daniel J. Bernstein:
https://eprint.iacr.org/2022/938 uses a square-root ECDL-in-intervals algorithm (baby-step-giant-step) for reconstructing truncated signatures. Better tradeoff between cost and truncation: https://cr.yp.to/papers.html#cuberoot (with @hyperelliptic) presents a cube-root ECDL-in-intervals algorithm.