also note that there is no way to prove the relationship between b from B=b·G and H(b), but that is why you have the HTLC as a fallback. on the happy path if Bob is playing honestly Alice can spend without revealing this was a swap. it just looks like a taproot keyspend. if not, then it is an HTLC plain and simple.

Replies (1)