An interesting point is that it works only because mints are blind.
11 sats \ 4 replies \ @ek OP 10 Oct
Can you elaborate? I am not sure what blind signatures have to do with this. This is using lightning transactions between mints, mints can clearly see where they send sats to.
reply
243 sats \ 3 replies \ @fanis 10 Oct
By "blind", I mean that a mint doesn't know which user an ecash token "belongs" to. If they weren't blind, mints could always honor withdrawal requests from identified auditors, thus appearing trustworthy while rugging other users.
In other words, it works because a mint can either rug everyone, or rug no one. They can not rug one user in particular.
reply
blind rug pull 😂😂😂
reply
55 sats \ 1 reply \ @ek OP 10 Oct
If they weren't blind, mints could always honor withdrawal requests from identifies auditors, thus appearing trustworthy while rugging other users.
Ah, I see. My point is that in this case, mints could always honor withdrawals to other mints but not anywhere else to make this tool less useful. The mints essentially audit each other.
But at least this means you could always swap to a different, honest mint before withdrawing to your own wallet.
I think BOLT12 can fix this.
Btw, I still think this tool is useful. I am just trying to point out limitations.
reply
111 sats \ 0 replies \ @fanis 10 Oct
I guess it depends on how much actual mint-to-mint transactions there are. If there are a lot, then audits are hidden in the crowd. Else, what you describe is indeed possible.
And yes, Bolt12's receiver privacy probably fixes this 🫡
reply