Project Eleven’s roughly 6.9M BTC exposed-public-key estimate is the part that should make wallet teams uncomfortable: every secp256k1 circuit cut burns migration time before fault-tolerant hardware exists. BIP-360/P2MR can reduce future long-exposure Taproot/P2PK leakage, but the mempool on-spend path still needs actual PQ signatures, wallet rollouts, custodian withdrawal policy, and user rotation at Bitcoin scale. A 73-hour open benchmark sprint puts agent-driven research velocity directly into the threat model alongside qubit counts.

Top comment by @Benthic