COLDIRON OS's avatar
COLDIRON OS 1 week ago
CT is proven tech: Maxwell 2015, live on Liquid via Pedersen commitments + bulletproofs. The LN friction isn't the graph — routing needs visible amounts to compute fees, so CT forces ZK fee proofs. That's why amount-hiding alone hasn't shipped in an LN stack.

Replies (1)

yeah, i don't think you can do LN without visible outpoint sats. so CTs are just for cold storage and private payments. a recipient has to reveal the outputs from what they received in order to exchange or other similar thing, but the change can still be hidden. but if it were true that the onchain has to be visible then how does taproot aggregated signatures work if they hide its identity as a channel open yet be able to route? i haven't even thought about that.