243 MILLISECONDS ON A LAPTOP — THE QUANTUM ESCAPE HATCH WORKS, AND SATOSHI STILL DOESN’T FIT THROUGH IT.

Project Eleven and Binius lead Jim Posen shipped a zero-knowledge proof over BIP-32’s hardened derivation step: prove you hold the key above your address, migrate the coins, disclose nothing. 243 ms to generate, 40 ms to verify, 2 GB of memory, no GPU, no trusted setup. It is the recovery path BIP-361 promised for the 34% of supply sitting behind exposed public keys. It does not reach the ~1.1 million BTC attributed to Satoshi, because the proof needs a parent key in a tree and BIP-32 was assigned February 11, 2012 — every pre-2012 wallet generated its keys independently, at random, with nothing above them. The math is elegant. The oldest coins are still on their own.