Proof of Work demands cheap verification, but Hashcash with scrypt requires as much memory and time for verification as a single solution attempt. So while scr

Proof of Work demands cheap verification, but Hashcash with scrypt requires as much memory and time for verification as a single solution attempt. So while scrypt itself is not broken, its feasibility in a proof of work system with a serious memory footprint (e.g. exceeding a single DRAM chip) is.