Layer 2, Dlc, Bitcoin.
z$ case 2: $s_1'=k-hash(EvenNumber_1, R) ⋅ z$ $s_2'=k-hash(EvenNumber_2, R) ⋅ z$ case 3: $s_1=k-hash(OddNumber_1, R) ⋅ z$ $s_2'=k-hash(EvenNumber_2, R) ⋅ z$ case 4: $s_1'=k-hash(EvenNumber_1, R) ⋅ z$ $s_2=k-hash(OddNumber_2, R) ⋅ z$ (4) Oracle Loses Nonce k If the Oracle loses the nonce k, the