MicroMint (Rivest and Shamir)
Each coin is a pair S, T such that hash(S) = hash(T).
Given sufficient time (e.g., a month), easy for a financial agent to create lots of coins.
Expensive to create a single coin.
Easy to check a coin is legit.
Hard to protect against double-spending.