Formal Barriers to Longest-Chain Proof-of-Stake Protocols
On the Instability of Bitcoin Without the Block Reward