What happens if Bob keeps the Musig2 nonces used in the last multisig transaction? Can Bob use Alice’s disclosed nonces to steal monies from the second transaction?
I would say no since the second transaction would use different unspent inputs than the first transaction.










