lonefarm

It does work! Inputs don’t need range proofs. The CoinJoin can mix inputs as long as they fit the sighash. Outputs can be summed and proven equal to inputs.

The outputs look random, but you can still handle them like regular CoinJoin outputs. Just keep the output value and proof together. You can add fees together too.

So addresses are made up of the blinded key and some public key flags. But wait, doesn’t this compromise privacy? It seems like it could be tracked.

Yeah, tracking taint goes against what money should be. Just moving funds to a sidechain and back doesn’t really mix things up if you can still trace the transactions.