<p>Range proofs for CTs demonstrate that output amounts are positive and within an allowable range, and that no inflation is occuring in a non-coinbase transaction.</p>

<p>The range proofs (eg bulletproofs) are computationally binding. </p>

<p>If the discrete log is broken, range proofs can be generated for values outside the correct range without any way to detect this. This includes correctly validating proofs for a tx with inflation.</p>

CC BY-SA 4.0
2019-01-17T20:00:47.720Z
CTs necessarily obscure all transaction amounts.
James C.
CC BY-SA 4.0
2019-01-17T22:15:58.030Z
CT= ?  and I guess the coinbase transactions would be protected otherwise? Also How do range proofs work? (I guess I will google this)
Rene Pickhardt
CC BY-SA 4.0
2019-01-17T22:22:07.007Z
Confidential transactions. Inflation schedule is known. This is the best explanation for bulletproofs from Adam Gibson: https://raw.githubusercontent.com/AdamISZ/from0k2bp/master/from0k2bp.pdf
James C.
CC BY-SA 4.0
2019-01-17T19:58:43.827Z
2019-01-17T19:58:43.827Z
James C.
<p>Looking at the transactions within the block explorer I can't see any transaction amounts. How could an inflation bug be detected if all transactions are private? </p>

<protocol><mimblewimble><grin>
How could an inflation bug be spotted in grin?
Rene Pickhardt
# How could an inflation bug be spotted in grin?

(Asked by: username_0 on 2019-01-17)

Looking at the transactions within the block explorer I can't see any transaction amounts. How could an inflation bug be detected if all transactions are private?

**Tags:** protocol, mimblewimble, grin


---

## 1 answers

### Answer by username_1 on 2019-01-17. Score: 2 | Accepted answer

Range proofs for CTs demonstrate that output amounts are positive and within an allowable range, and that no inflation is occuring in a non-coinbase transaction.

The range proofs (eg bulletproofs) are computationally binding.

If the discrete log is broken, range proofs can be generated for values outside the correct range without any way to detect this. This includes correctly validating proofs for a tx with inflation.

> **Comments:**
> **username_1**: CTs necessarily obscure all transaction amounts.  
> **username_0**: CT= ?  and I guess the coinbase transactions would be protected otherwise? Also How do range proofs work? (I guess I will google this)  
> **username_1**: Confidential transactions. Inflation schedule is known. This is the best explanation for bulletproofs from Adam Gibson: https://raw.githubusercontent.com/AdamISZ/from0k2bp/master/from0k2bp.pdf  

---

