Questions for author: 1. Why is CSV limited between 2h and 15 days? Is this a technical limit or a suggested limit for Custodians to offer. 2. Is/can there be an amount limit as well as or a combination of amount and time limits? So under 50,000 could be immediate, but over is 2h delay. (I guess no delay is somewhat gamable.) 3. Why in your taproot script is there A1 and B1 if these are supposed to be copies of A and B? 4. You mentions CS is optional, but does that then mean spending path 1 is impossible, leaving all spends to be 1 year delayed or does it just mean something else? 5. If you are notified of a spend that you did not authorize, what are your options? A+B are delayed for 1 year, if C is malicious, you are relying on trust to allow you to double spend and recover and even if not, don't you get stuck in a race to find who is willing to spend the highest fee? Define "malicious actor" as someone who found a copy of key A. You must trust the custodian to: 1. Enforce CSV in case of a malicious actor and send notifications. 2. Work with you to double spend the funds back to your control. So if the custodian and malicious actor work together, couldn't they just take your funds easily?

Replies (3)

Super Testnet's avatar
Super Testnet 2 months ago
I forwarded your questions to the author via telegram (I don't think he is on nostr) and if he replies I will try to remember to post his replies I will probably forget though