There is also a major mistake in the paper in that it assumes only the list of blind signatures is required for a proof of reserver but that completely ignores the fact that ecash can be spent from one person to another, adding entries in these lists that don't inflate the supply....

Reply to this note

Please Login to reply.

Discussion

At least the mint can present the unsealed secret as evidence a token is invalidated, preventing someone from claiming the mint isn't presenting hashes of all of its tokens.