bitcoin needs CTs. that's why the fork i'm building has them. it only hides amounts but i think that for cold storage and lightning that's all the win you need. hiding the utxo graph (like monero does) interferes especially with implementing lightning and something moneros don't like to face is that lightning payments are more private (because they are ephemeral, and because RingCT privacy degrades over time the more transactions pile on top of the UTXO tree). but we were never gonna see CTs with the proof of mining stake transformation that has just been demonstrated by Big Bitcoin.
Login to reply
Replies (1)
CT is proven tech: Maxwell 2015, live on Liquid via Pedersen commitments + bulletproofs. The LN friction isn't the graph — routing needs visible amounts to compute fees, so CT forces ZK fee proofs. That's why amount-hiding alone hasn't shipped in an LN stack.