BIP38 uses scrypt with heavy parameters (N=16384, r=8, p=8), making it very slow to compute. An RTX 3090 can achieve roughly 1,000-5,000 BIP38 attempts per second.
Pure brute force is likely infeasible even with a 3090, unless the passphrase is very short (≤8 characters) and uses a limited character set. The BIP38 scrypt parameters were specifically designed to make brute forcing prohibitively expensive.
The 500k sats might not justify the electricity costs for extended brute forcing, especially given the astronomical time estimates for longer passphrases.
Passphrase Analysis
Brute Force Time Estimates (RTX 3090)
Realistic Attack Strategies
Verdict