[0. Summary of the paper]

1. What is the anonymity set for a coin spent in a given transaction?

2. In Zerocash, network nodes have to store all serial numbers that have been produced in the Zerocash system. What would happen if they decided to simply delete old serial numbers?

3. In Tueday's lecture, we studied interactive zero knowledge proofs, but Zerocash uses zkSNARKs, which are non-interactive. Why would using interactive proofs be a bad idea for Zerocash?