pull down to refresh
Yes that's my understanding.
using any torsion-carrying point on the curve would result in a proveably unspendable output. Subgroup membership was never a rule and afaict it was never made to be one, so it should still work today. it just requires an extra step in creating the transaction. Seems like a hassle to implement, since there's no library for constructing them and no implementation for finding and counting them (like for downvotes).
Although libsodium rejects them all so they're easy to find I guess.
Not quite clear how this relates to the 2017 inflation bug, I guess this is torsion in the destination point and not the spending proof (torsion in the key image?).
Which of course, there IS a consensus check to confirm since 2017. my guess anyway.
anyway. tbh, I only have the vaguest idea of what torsion on a curve point actually is.
Wait... there can be burn addresses in Monero, as in, cryptographically verifiable unspendable?
When I was designing downvotes in Stasher I initially had the idea to burn XMR to downvote. I had to go do some research on if burn addresses were possible and how to create one. I eventually scrapped the idea.
Can anyone generate these non-subgroup stealth addresses?