Peter Todd

IOTA is so batshit crazy they managed to turn a theoretical one-time-signature vulnerability into an actual, practical-to-exploit one.

Note how the Dash masternode scheme has the effect of artificially pumping dash... which would he really funny if anti-privacy spies are running masternodes, and thus propping up the price!

As for the coins associated with MaidSafe and Storj, there's no reason to think any of this instant confirmation, low-fee, no-mining stuff is Sybil resistant. Sure, it might work if we can rely on the majority of nodes being honest and you not being Sybil attacked, but at best that's certainly a lesser standard of security than Bitcoin offers; at worst it just won't work.

Dogecoin is merge-mined, so the marginal cost to attack it is zero; attacking Monero is much more expensive than that.

The Zcoin trusted setup is *really* clever: they reused a pubkey generated 25 years ago for the RSA Factoring Challenge.

The reality is bleeding-edge crypto is risky; the counterfeiting vulnerability is the second inflation bug that Zcash has had.

BTC has categorically worse privacy than ZEC on L1,, but the trade-off is a safer system re: total loss. Had this been exploited, it could have easily been a loss of hundreds of millions of dollars.

On BTC, an inflation bug is very likely to get caught quickly, even if exploited, because of the transparency. There might be a few days shutdown at worse: awful but survivable even in the worst case.