Formal Barriers to Longest-Chain Proof-of-Stake Protocols
The Miner's Dilemma