Another thing to keep in mind is that it *requires* using taproot, and (imo) that will continue to be under-adopted until it's in wide adoption on Lightning.
You can still get very large anon sets within taproot today, but for a typical user, having to switch infrastructure to taproot may (or may not) be a pain.
It's quite striking that while Binance uses sophisticated ZK techniques for the liabilities, for the assets they literally just publish all their addresses in a spreadsheet!
Login to reply
Replies (2)
I assume TR is required because of Schnorr?
It's just because the public key is public. If we used p2pk not p2pkh that would work too.