Elgamel commitment is perfect binding (inflation proof) and computational hiding. Problem is the size of commitment is very large. Also, any bugs in the implementation will lead to hidden inflation. This last point is always an issue if amounts are hidden cryptographically.

read more