I'm way from an expert in this area, but for my learning, how can the Qora AT be sure that Alice has sent a valid key for Bob's Burst transaction, when it transfers the Qora to Alice and only then reveals the key to Bob. Can Bob's key fail? It must know this, I'm just not sure how.
What does the BitShares development team think of this news and what are the implications for Bitshares?