When extract isn't an option.
BIP39 partial seed recoveries have no safe extract — the seed itself is the secret. The confidential tier runs them inside NVIDIA Confidential Computing enclaves where the host operating system never sees the wallet, the candidates, or the recovered key.
Some recoveries cannot be made extract-safe.
Password attacks on encrypted wallets can ship a tiny verifier. BIP39 seed recovery cannot — every candidate computes the actual master secret. If that compute leaves the protected boundary in cleartext, the funds are at risk.
Seed = wallet
A BIP39 phrase derives directly into BIP32 keys. There is no separate "verifier" layer to extract from.
Hardware isolation
NVIDIA Confidential Computing encrypts VRAM and DMA paths at the hardware level. Host root cannot read them.
Remote attestation
The GPU proves to us — cryptographically — that it is genuine and that our signed code is what's running before any payload is dispatched.
Confidential Computing GPUs only.
What this tier unlocks.
Server, host, and enclave.
NVIDIA Confidential Computing + remote attestation
Before any work dispatch, the GPU proves to us that it is genuine, that Confidential Computing is enabled, and that our signed code is loaded. The host operating system is never trusted with cleartext.
Server sends a nonce. GPU produces a quote signed by the hardware-rooted attestation key. NVIDIA PKI verifies the chain.
The quote carries a public key generated inside the enclave. Encrypted work payloads can only be decrypted there.
Candidates, derived seeds, and any recovered keys live exclusively in encrypted VRAM. Host root sees only ciphertext.
The deterministic lottery, visualized.
For BIP39 recoveries with N missing words, the candidate space is finite. We commit to a chunk size and a published exhaustion window — someone in the fleet is mathematically guaranteed to win the chunk that contains the hit.
Bounded keyspace, partitioned across the fleet
A BIP39 phrase with N missing words has a finite candidate space. We slice it into chunks and dispatch them. Exactly one chunk contains the hit. Whoever's GPU evaluated that chunk earns the share.
Confidential-tier inventory.
| Case ID | Wallet | Value range | Scope | Workload | Tier | Status |
|---|---|---|---|---|---|---|
| BB-01218 | BIP39 partial seed | $410k–$470k | 5 missing words at positions 7 / 9 / 11 / 14 / 22 | TEE-required | confidential | open |
| BB-01258 | BIP39 partial seed | $1.2M–$1.5M | 4 missing words, unknown positions | TEE-required | confidential | open |
| BB-01318 | BIP39 partial seed | $90k–$120k | 6 missing words, last 6 positions | TEE-required | confidential | open |
| BB-01327 | Ethereum keystore | $38k–$48k | 12–16 char password, Diceware-style Keystore IS the wallet — routed to confidential tier regardless of value. | TEE-required | confidential | in progress |
Bring your H100s, H200s, or B200s.
Particularly suitable for AI labs with capacity gaps between training runs. Hourly attestation, granular pausing, transparent cycle accounting.