For example, if we want to prove that p0(x), p1(x) and p2(x) are not more than D degrees, we can generate 2 random coefficients from the Merkle root generated in number 3, and calculate the linear-polynomial l(x) as: k0 = hash(root + "0") k1 = hash(root + "1") l(x) = k0 * p0(x) + k1 * p1(x) + p2(x) If l(x) could be proved to be not more than D degree, then the chance that the degree of any 6. Total balance verification: firstly, we verify the low-degree proof generated in number 5.