Hey man! Thank you. Yes, I followed those discussions, I think scheme is pretty solid. Most of the issues that came up are really implementation-based. Coding up the basic mechanics in a few days was a real trip!

What still fascinates me is that the equations for the blind signature scheme used in Cashu can be summarized in a couple of lines. Here is the gist that @rijndael was referring to: Link