原推:@BurnsPhone @jbaylina @gubsheep Actually, this kind of bit arithmetic range proof is a key component in proving balances are non-negative in privacy solutions, including those used in Zcash, Monero and Ethereum-based systems. It may have helped you already.
https://twitter.com/VitalikButerin/status/1575898703650430976