Add the invariant that no tokens should be lost