Bitcoin‘s quantum problem gets a recovery tool, but not for Satoshi’s 1.1 million coins

Summary

• A new zero-knowledge proof system from Project Eleven offers a practical way to recover bitcoin locked under BIP-361‘s proposed freeze of quantum-vulnerable coins, including Satoshi Nakamoto’s holdings.
• The scheme exploits the fact that quantum computers can break elliptic curve signatures but not the one-way hashing used in modern wallet key derivation, allowing only true owners with seed material to prove control.
• Benchmarks show Project Elevens prototype is dramatically faster than prior work, but it remains unaudited, incomplete, and would require contentious changes to blockchain rules before it could protect any live coins.

The proposal to freeze bitcoin's quantum-vulnerable coins has always carried an asterisk.

BIP-361, published in April by Jameson Lopp and five co-authors, would block new deposits to vulnerable addresses after three years and freeze whatever remained after five, stranding coins in more than a third of bitcoin's supply, including the roughly 1.1 million BTC attributed to pseudonymous creator Satoshi Nakamoto.

A later step of that plan promised a recovery path using zero-knowledge proofs, a technology that lets someone prove to another person that they know a fact without ever revealing it.

Quantum research outfit Project Eleven says it has now built exactly that, and made it fast enough to use.

Q-Day is a theoretical point at which a quantum computer could derive a private key from a public key, allowing an attacker to sign transactions from any address whose public key has ever been exposed.

More than 34% of all bitcoin sits in that category, according to BIP-361. After Q-Day, a signature would prove nothing because the attacker can produce one as easily as the owner. The chain cannot tell them apart.