http://startupboy.com/2014/03/09/the-bitcoin-model-for-crowdfunding/
Can we just use Bitcoin instead of Torcoin? Isn’t money supposed to be fungible to all use cases? Perhaps not – Bitcoin’s transaction speed is too slow for a dynamic network allocating bandwidth – 10 to 60 minutes is far too long to negotiate with a relay. And payments have to be anonymous. So a fast-clearing (Fastcoin can clear a block in 12 seconds), fully anonymous (likeZerocoin) variant is needed.
I can imagine exit nodes somehow generating coins by their 'proof of exit', and internal nodes by 'proof of onion'.