From what I can see it requires storing the balances and miner rewards directly on the contract. That is, paying out always to it (it doesn't pay miners via miner outputs)

They also give half the block reward to the finding miner which will have the same long term profitability but for low hashrate miners effectively halve their earnings until... that long term hits

> Subsequently, all members try to mine a block in a PoW blockchain and instead of depositing the rewards from mining a block to the pool manager’s public key, the amount is deposited in the smart contract’s address

My only guess as how they get from BTC to the smart contract in eth in their example is tokenizing it and the pool manager providing some method/gateway for it

In monero's case that would be paying out to a contract address (???) which doesn't exist besides multisig, or trusting a pool manager

> which miners attempt to cause harm to other

miners or the pool manager, since this is also the case in centralized mining pools

I really can't find how it moves Bitcoin rewards onto the smart contract

If this was wanted to be done via Tari, an automated trustless Monero -> Tari wrapped token would need to exist, that allows payouts to be sent that way, and a way to get back out as well

A method to keep track of long term PPLNS reward balances (sidechain) might be interesting and force flushing these if there would be a block, however there's no way to "delay" they normal payouts so this flushing might end up happening each time a block is found with similar number of outputs, but these could be aggregated. Matching the precise

amounts could be an issue as well

Big miners could also just leave and basically never flush amounts for other small miners, effectively getting them stuck unless they keep effectively solo mining

Say the pool starts and 20 miners are there, a block is found, but some miners take the payout now and others want to coalesce it over time. Well the reward must be paid whole so... all miners get paid out