Oddbean new post about | logout
 Relying on Pedersen Commitments and Range Proofs to audit your network is not a real audit.  Any cryptographic flaw or exploit in them could and probably would go unnoticed.  That's the point.  You can't just add up all the coins.  Instead you have to use cryptographic proofs to even know how much monero there is.