Replying to b98e16ed...

Monero supply is auditable. Every time you make a transaction, you have to mathematically prove you have the amount you spent. All you have to do is verify every proofs.

Sure, the maths involved is more complex than a simple summation, but it's still maths at the end of the day. The robustness of bulletproof (the proving scheme used) has been proven mathematically, the likelyhood of crafting fake proofs is metaphorically the same as being able to mine bitcoin blocks without having to do proof of work.

(the metaphor is somewhat accurate, bulletproof literally relies on the robustness of hash functions to be safe)

With that knowledge, let's imagine how an inflation bug would look like. A bug means there's something wrong in the verification process. On bitcoin, the code would not detect an invalid transaction (because it's buggy) but anyone who knows how to sum numbers will spot that something wrong is going on.

On monero, the code would not detect it, but anyone who knows how to verify proofs will spot something wrong is going on. It's pretty much the same.

It's a bit scary because we all know how to sum stuffs (but really there isn't as many people who know how to write code that sums all UTXO), while we don't necessarily know how to verify these proofs, but there are multiple implementation of verifiers, audited and well tested.

If you're not scared of maths, I highly encourrage reading Zero To Monero, it's not that hard and really demystifies the protocol. It's not a magic black box, it's just good old maths.

And finally, I believe there's still plenty of stuffs to improve bitcoin privacy without having to go as far as obfuscating transaction amounts. If we manage to improve anonymity sets, amounts will be obfuscated by being distributed into multiple uncorrelable UTXOs (the uncorrelable is the hard part).

Do you have a link for zero to monero?

Also what do you think about pay joins and ecash/fedi?

Reply to this note

Please Login to reply.

Discussion

https://www.getmonero.org/library/

Ecash/fedimint are a great invention and used under the right circumstances they are a wonderful thing.

The community is about to finish a Nostr client and there is already a bounty to implement ecash on top of Monero.

Because from a pure privacy perfect ecash is a great extension (if also pairs with other privacy tech like i2p) where custody is already given up and is limited in reach and time.

Think gift cards, in conference/festival tokens to buy food and drinks, casinos,....