I fully understand how privacy coins like XMT audit their supply. They assume that Pedersen commitments r*G+v*H can only be openend in one way. Which is false if the discrete log of H w.r.t. G is known. I said "I think" because there might by privacy coins not based on Pedersen commitments that I'm just not aware of.