A proof-of-concept effort to run Bitcoin's real consensus code inside a zero-knowledge virtual machine has surfaced a striking tradeoff: verifying a block in as little as 27 milliseconds would require the equivalent of 17 GPU-years of compute power to produce the underlying proof...