This reminds me of exch, hopefully we don't get disappointed
Noticed your service from the other forum and I'd like some clarification.
I understand the essence of the refund address but won't it be exploited
Like a user purposely sends below the minimum amount adds a refund destination
(which they hiddenly want to send the fund to)
And they are refunded which helps them meet the criteria of privacy
And at a cheaper rate.
Already answered you over there, so reposting it here for other to see... Noticed your service from the other forum and I'd like some clarification.
I understand the essence of the refund address but won't it be exploited
Like a user purposely sends below the minimum amount adds a refund destination
(which they hiddenly want to send the fund to)
And they are refunded which helps them meet the criteria of privacy
And at a cheaper rate.
The refund comes from the deposit address you sent the coins to, so you receive the exact same coins back (minus fees).
From my review:
-snip-
Playing with the refunds...
I created another session BTC -> LTC and sent 0.001 BTC.
After your system detected the transaction (but still with not confirmations), I asked for a refund. Just 1 minute later I received the refund on my wallet from the unconfirmed parent that I sent before that. Very quick and efficient, since this leaves to space for someone trying to abuse your system by asking for a refund just to double spend the deposit.
But what happens if I double spend the tx *before* asking for a refund? Well, I tested it out.
- Order created, 0.0006 BTC -> 51.78 USDT (TRC20).
- I sent the BTC, waited for blexch to detect.
- Then I double spent the tx.
- After the double spend tx was confirmed, I requested a refund and received the message "No funds available for refund"... no luck (and good job).
-snip-
Playing with the refunds...
I created another session BTC -> LTC and sent 0.001 BTC.
After your system detected the transaction (but still with not confirmations), I asked for a refund. Just 1 minute later I received the refund on my wallet from the unconfirmed parent that I sent before that. Very quick and efficient, since this leaves to space for someone trying to abuse your system by asking for a refund just to double spend the deposit.
But what happens if I double spend the tx *before* asking for a refund? Well, I tested it out.
- Order created, 0.0006 BTC -> 51.78 USDT (TRC20).
- I sent the BTC, waited for blexch to detect.
- Then I double spent the tx.
- After the double spend tx was confirmed, I requested a refund and received the message "No funds available for refund"... no luck (and good job).
-snip-
