Mint contract

$X = (c m^{co in}, c m_{x}^{v a l u e}, c m_{y}^{v a l u e}, c m^{t o k e n}$

$W = (p k_{x}, p k_{y}, v a l u e, t o k e n, s n, s p e n d Hoo k, d a t a, b l in d^{v a l u e}, b l in d^{t o k e n})$

$L = {X : (X, W) \in R}$

Minting a coin

Public Input	Description
$c m^{co in}$	coin commitment as field element
$c m_{x}^{v a l u e}$	x coordinate of value point commitment
$c m_{y}^{v a l u e}$	y coordinate of value point commitment
$c m^{t o k e n}$	commitment of tokenId as field element

Witnesses	Description
$p k_{x}$	coin public key x coordinate
$p k_{y}$	coin public key y coordinate
value	burn value
token	tokenId
sn	coin serial number
spendHook	contract related contract
data	data read during spendHook execution
$b l in d^{v a l u e}$	blinding term for burn value commitment
$b l in d^{t o k e n}$	blinding term for tokenId commitment