ArcMint is a federated e-cash construction combining Chaumian cut-and-choose blind issuance with threshold Schnorr signatures instantiated via FROST over Ristretto255. The system enforces deterministic identity recovery upon double-spending through selective opening of Pedersen commitments, providing strong accountability guarantees. Issued and spent note registries are periodically anchored to Bitcoin via Merkle commitments embedded in OPRETURN outputs, enabling public auditability without requiring a separate consensus layer. We prove unforgeability via reduction to the discrete logarithm assumption and FROST EUF-CMA security, traceability via Pedersen commitment binding, spending correctness via algebraic verification, and tamper-resistance via Merkle tree and SHA-256 collision resistance. ArcMint is an accountability-first construction. It does not provide a formal privacy guarantee. In particular, blindness under adaptive corruption of up to t−1 participants remains an open problem.
Altug Tatlisu (Mon,) studied this question.