Quote from: CIYAM Open on February 16, 2014, 05:05:31 AM

The problem in the final block is once again the forger can check whether or not their own tx will be a winner and if not simply omit it. In fact you could even end up with the lottery being stuck as each forger might refuse to run that script unless their own tx can be inserted as the winner.

Ah, right! I forgot that some of the lottery players could actually control execution. Wow, crypto$ thinking is tricky...

Quote from: CIYAM Open on February 16, 2014, 05:05:31 AM

Effectively you need the block that marks where the payout applies from to be one that has already been forged *but* not knowable until a subsequent block and also not even approximately knowable in order to prevent gaming the system.

I thought about this as well, but figured it might cause players who missed out by 1 block to scream bloody murder. Even if you know intellectually and logically that the rule is "fair" for everyone, psychologically it still sucks. (But I'm thinking about how people respond to games ~~of chance~~ in RL; maybe I'm misunderstanding the mindsets of crypto$ dice rollers?)