An anonymous token-based central bank digital currency (CBDC) would pose certain security risks to users. These risks arise from how balances are aggregated, from their transactional use and from the competition between suppliers of aggregation solutions.