pull down to refresh

I came to Bitcoin via the dark web, and of course Monero is now a popular token there.
Unlike most other privacy coin systems, Monero is auditable for supply. Except for this bug, at least, this was the only inflation bug confirmed to exist:
I'm not sure if RingCT really helps it that much, but it's easier to hide the path of coins with RingCT than to use coinjoins.
As the article mentions, but not nearly technically specific as I would like, the vulnerability had something to do with a weakness in Edwards curves.
secp256k1 is known to have a somewhat similar vulnerability, and SegWit was part of the solution to this. I recall the Steam blockchain, in late 2016/early 2017 also addressed this also in their protocol.
I did not know that Edwards curves also had any kind of issue like this, but here it is.
Edwards curves supposedly don't have a weakness that the bitcoin Koblitz curve has, in relation to a private key being cheaper to derive up the tree if a down-line private key is acquired.
I'm not a monero fan particularly, but it's interesting to note that Bitcoin and it's forks are not the only coins with the property of being commodities.
Doesn't change the fact that intentional rewriting of Bitcoin's blocks is the most improbable of all the PoW coins of course.
Nor does it change the fact that this feature greatly increased the complexity of the protocol, and complexity always increases risk of bugs.