Layer 2, Dlc, Bitcoin.
satisfying Y=y⋅G. Funding transaction: Alice and Bob create a funding transaction together, locking 1 BTC each in a 2-of-2 multi-signature output (one public key X belongs to Alice, and the other Y to Bob). Contract Execution Transactions (CET): Alice and Bob create two CETs to spend the funding