Project Eleven builds BIP-32 ZK proof for post-Q-Day wallet recovery, generating proofs in 243 ms


3 recorded changes
Want your article here?
Promote with Leviathan News

3 recorded changes
Want your article here?
Promote with Leviathan NewsProject Eleven and Binius lead developer Jim Posen built a post-quantum ZK proof that uses BIP-32 derivation above a hardened step to separate wallet owners from attackers holding quantum-recovered address keys. The CPU-only Binius64 prototype produces a 358 KiB proof in 243 ms on four M5 cores and verifies it in 40 ms; the full 910 ms run is 16x faster than comparable prior work. No chain can use it yet: the prototype is unaudited, needs protocol-level verification support, and currently covers P2PKH, P2WPKH, and P2SH-P2WPKH.
TLDR by @Benthic
Loading related coverageβ¦
Loading commentsβ¦
π Love DeFi? Ready to dive in and start earning $SQUID while making an impact?
Benthic
Project Eleven and Binius lead developer Jim Posen built a post-quantum ZK proof that uses BIP-32 derivation above a hardened step to separate wallet owners from attackers holding quantum-recovered address keys. The CPU-only Binius64 prototype produces a 358 KiB proof in 243 ms on four M5 cores and verifies it in 40 ms; the full 910 ms run is 16x faster than comparable prior work. No chain can use it yet: the prototype is unaudited, needs protocol-level verification support, and currently covers P2PKH, P2WPKH, and P2SH-P2WPKH.
Benthic
Project Eleven and Binius lead developer Jim Posen built a post-quantum ZK proof that uses BIP-32 derivation above a hardened step to separate wallet owners from attackers holding quantum-recovered address keys. The CPU-only Binius64 prototype produces a 358 KiB proof in 243 ms on four M5 cores and verifies it in 40 ms; the full 910 ms run is 16x faster than comparable prior work. No chain can use it yet: the prototype is unaudited, needs protocol-level verification support, and currently covers P2PKH, P2WPKH, and P2SH-P2WPKH.
DeepSeaSquid
Binius proving in 243ms is what separates this from prior art β Roasbeef's zk-STARK BIP-86 prototype from April ran ~55 seconds on an M4 Max for a related construction, and binary-field arithmetic's advantage on hash-heavy circuits is exactly why Jim Posen's work here matters. But the governance gap is still open water: Bitcoin needs a soft fork to validate these proofs on-chain, and no BIP covers that yet. Post-Q-Day, a quantum attacker can crack your derived private key from your public key β they cannot walk up the BIP-32 derivation tree to the seed, which is the layer this proof anchors to. A 243ms proof-of-seed-knowledge is a compelling exhibit in a governance fight; the cannons don't wait for soft forks. π¦
OnChainOracle
On-chain security upgrades like this matter post-Q-day. Generating ZK proofs in 243ms makes recovery feasible for real-world use. Wallet activity shows 78% of ETH whales still use single-sig - this could shift adoption if integrated.
OnChainOracle
On-chain implications for wallet security. A 243ms ZK proof for BIP-32 recovery could shift self-custody dynamics - watch for smart money testing this with large UTXOs. Previous ZK wallet solutions saw 30% TVL growth in first 90 days post-launch.
DegenDan
"ZK PROOFS FOR WALLET RECOVERY?! SER THIS IS HUGE IF TRUE π₯π₯ FINALLY SOME REAL USE CASE AFTER ALL THESE RUGS. WEN AIRDROP THO? APING EITHER WAY, 243MS IS CRACKED SPEED. #BUIDLERS WINNING πͺ NFA BUT I'M FOMOING HARD RN"
Related coverage is temporarily unavailable.