Return-Path: Received: from smtp2.osuosl.org (smtp2.osuosl.org [IPv6:2605:bc80:3010::133]) by lists.linuxfoundation.org (Postfix) with ESMTP id 8BC07C002D for ; Sat, 3 Dec 2022 14:04:13 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp2.osuosl.org (Postfix) with ESMTP id 06FC64021C for ; Sat, 3 Dec 2022 14:04:13 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.11.0 smtp2.osuosl.org 06FC64021C Authentication-Results: smtp2.osuosl.org; dkim=pass (2048-bit key) header.d=gap600.com header.i=@gap600.com header.a=rsa-sha256 header.s=google header.b=ZWM0R+mW X-Virus-Scanned: amavisd-new at osuosl.org X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, LOTS_OF_MONEY=0.001, PDS_BTC_ID=0.499, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TRACKER_ID=0.1] autolearn=no autolearn_force=no Received: from smtp2.osuosl.org ([127.0.0.1]) by localhost (smtp2.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nq-3jRcQwlmQ for ; Sat, 3 Dec 2022 14:04:11 +0000 (UTC) X-Greylist: whitelisted by SQLgrey-1.8.0 DKIM-Filter: OpenDKIM Filter v2.11.0 smtp2.osuosl.org 7957C401B7 Received: from mail-io1-xd34.google.com (mail-io1-xd34.google.com [IPv6:2607:f8b0:4864:20::d34]) by smtp2.osuosl.org (Postfix) with ESMTPS id 7957C401B7 for ; Sat, 3 Dec 2022 14:04:11 +0000 (UTC) Received: by mail-io1-xd34.google.com with SMTP id g26so4769481iob.11 for ; Sat, 03 Dec 2022 06:04:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gap600.com; s=google; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=hIAhpS0jQfVucvX0IkdCISB9skqFRkqvNtYCybWc+8Y=; b=ZWM0R+mWevVM7E2mRiltbsNfNythFdp8yzKXEGI10EP2H5NMOjnevDVqIRCVtY1YIp Z+L6xAZNzBdO63pBycbv1/l1AQqhwDlJgYMMXQkQH04Qlu9ViwhKyYOPMFqHwtvQZtyc q9HlsynPOdP+/DxCA0LDqwGr85bgOoHB8t9u5xS46WoBfPql2IoFKyk7usuw19QkUKSE Kr0WtcbEI0l9KBpghU0waoPwN5BUV6UYamnCpV6br6dY1WBv7VIKjT28ct91ksdlDg96 AiCsgq7+2DnixIFApVNsFoMhL4XleXJ0AmXWq2+0thc+cgmr23L0cv2KZSVMM/QUQiFc lLIA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=hIAhpS0jQfVucvX0IkdCISB9skqFRkqvNtYCybWc+8Y=; b=eGif7i7DSyjP0Tmsp3o+1BUFj1YrAhXkLTGzEBILi316yWWUnvUKCuZgz6yy9j0Z51 pJVIVnPmvWFnsVfWWAs10wiqaL9/4ud6xEk1ToJYrX9OCx1/eTCLXHfNAAZpFV9B0kMK 2mbTScpYJ/w7x17t8v03VKozMWipU+e7Va/2QRVVDDymYfPfk7z+zqc4YDjOK/ULK8sL kxqBDDj1cI3aHrpM5iW2i3vLR2/BG6XfmH1jLBWu4Xrr1+PPI1LNaa3ZoVM4ve581d0d 8H9N+AS9iTlYFO5TuDEgv/pCuaw+mTjLPkjqTy31G5lUsM02kiwonqVsxCwb4HB/so+z kpQQ== X-Gm-Message-State: ANoB5pkZLLcPZ9u+oQSWTsG6KQD1jTRHhv90dd09z355Hio9b2gzpNVN hgNSQTCd80oJGiz4LOc6naxRIFF+wKsQVVQo1XfT0xvJNmJiug== X-Google-Smtp-Source: AA0mqf4UYBaGghHqTKy2O0hB/DEq52HVUhvVAUDM0rla2JVXbaoAaVYAnrzU7pxc+zc94N5UHnt1d0521LtQcAkotyE= X-Received: by 2002:a5d:8149:0:b0:6de:bd34:9787 with SMTP id f9-20020a5d8149000000b006debd349787mr28695224ioo.171.1670076250230; Sat, 03 Dec 2022 06:04:10 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Daniel Lipshitz Date: Sat, 3 Dec 2022 16:03:58 +0200 Message-ID: To: Peter Todd Content-Type: multipart/alternative; boundary="000000000000a4aa8105eeeceda8" X-Mailman-Approved-At: Sat, 03 Dec 2022 16:07:37 +0000 Cc: Bitcoin Protocol Discussion Subject: Re: [bitcoin-dev] [Opt-in full-RBF] Zero-conf apps in immediate danger X-BeenThere: bitcoin-dev@lists.linuxfoundation.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Bitcoin Protocol Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Dec 2022 14:04:13 -0000 --000000000000a4aa8105eeeceda8 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Just a further follow up here please see below feedback from Max CEO of Coinspaid - I asked him to send me a mail. Peter - I can understand why some of our statistics seems off, some of our clients when they have multiple outputs going to their cluster will query each trx hash with a separate output address as for them they need each trx or output deposit covered/guaranteed so we would count that trx hash each time it is queried with a different output address as a trxs - this would mean that value of our total processed is possibly a more reflective indicator. Apologies for this inclarity we are not used to communicating our statistics at all - its just not our nature. I would think looking at Nov 2022 Stats - 900k unique trx hashes queried, with 1.5m trxs on our count since trx hashes are queried with different output addresses. The actual value is USD 220M benefiting from zero conf acceptance. See Maxes email below - I will also forward the email as is to the list Hi Daniel, Hope you are doing fine. I know you are in discussions with Bitcoin Core team or RBF updates. With current email, wanted to confirm that we are running quite a big Bitcoin payment operation with over 300k incoming transactions, with 700+ inputs a month. Which is a fair percentage of overall BTC chain capacity and we do enjoy zero conf flows that you offer. Our clients do like to give instant experience to their end customers, I would not want to disappoint them with news that =E2=80=9Cwaiting for confirmations=E2=80=9D is on a tab= le again, after all these years of smooth experience. 2 main production clusters are rotating around: 3JodN7GmkHdPgKj9G7HCkn9NDLhrcWCjVN 3QKCocNhzAgtgFLsD5qUZcG6e4TkfRf421 Kind regards, Max Krupyshev Founder & Leader coinspaid.com // cryptoprocessing.com Berlin, Germany telegram: mkrupyshev ________________________________ Daniel Lipshitz GAP600| www.gap600.com Phone: +44 113 4900 117 Skype: daniellipshitz123 Twitter: @daniellipshitz On Sat, Dec 3, 2022 at 3:17 PM Daniel Lipshitz wrote: > The statistics that I have stated are based on trxs that rely on our tool= . > They are not overstated, this is a reflection of the 0conf market on BTC. > > They are trxs which our clients query via the API and which I clients pay > subscription for. > > There is no point for clients to send us trxs they don=E2=80=99t want or = need our > response from. We are a B2b provider so we are not sure how and who the e= nd > users and applications are. > > Coinify definitely doesn=E2=80=99t send us all their traffic, as I would = think > some of our other clients. > > Here is some external confirmation a bit old though but still- > https://blog.coinpayments.net/news-features/gap600 > You can also see our video of Coinspaid using our service on our site - > all our Marcom is a bit old. > > We service primarily payment processors and liquidity providers and not > end merchants so I can=E2=80=99t say how and to who end clients implement= it. > > If AML/KYC was enough to prevent double spends all exchanges would offer > 0conf. > > I don=E2=80=99t know the split with our clients as it=E2=80=99s non of ou= r business but > definitely a significant amount of end users are not Kyced for the trxs. > > Best would be to try and talk to some of our major clients - ie > Coinpayments, Coinspaid and Coinify. > > > > On Sat, 3 Dec 2022 at 14:12 Peter Todd wrote: > >> On Sat, Dec 03, 2022 at 01:01:16PM +0200, Daniel Lipshitz wrote: >> > Shapeshift used to be clients in fact one of our first when we started >> in >> > 2016. >> > >> > They no longer use our service but from time to time use us for fee >> > recommendations. So we actually should remove their logo as a current >> > client. >> >> Yes you should. When did ShapeShift stop using your service? Did they >> explain >> why? >> >> > If you wish to test it out try find a merchant using Coinpayments or >> > Coinspaid. >> > >> > Also some of our non custodial liquidity providers offer service no >> > custodial wallets. I am not sure which. >> >> I see that you also advertise that Gap600 is "Trusted by" Coindirect and >> Coinify, both AML/KYC crypto exchanges. Obviously, with full AML/KYC >> double-spends are not much of a concern. And it's not even clear that >> either accepts zeroconf anyway, as I'll explain later. >> >> On this list you claimed that: >> >> > 1. As of end of Nov 2022 - GAP600 has processed i.e responded to circ= a >> > 15M transactions >> > 2. These transactions have a cumulative value of 2.3B USD value. >> > 3. We currently are seeing circa 1.5M transactions queired per month. >> >> What's the value and number of transactions that *actually* rely on your >> unconfirmed transaction tools? The only category that would apply for is >> goods >> provided immediately and irrovocably, without AML/KYC. Because it sounds >> like >> these figures may be significantly overstated. >> >> >> Re: CoinsPaid, what you say here makes it also sound like it relies on >> AML/KYC: >> >> > CoinsPaid applies a special software tool across its solutions to >> conduct >> > stringent KYC procedures and a risk-based approach to CDD that verify >> user >> > identities to mitigate fraud, money laundering and other activities >> linked to >> > criminality and terrorism. >> https://www.gap600.com/uncategorized/coinspaid/ >> >> Re: Coindirect, the documentation I can find appears to say that >> confirmations >> are required before you can use coins deposited into Coindirect: >> >> > Digital currency transactions must be confirmed on the relevant networ= k >> block >> > before they are considered valid. Only once confirmed, will you be abl= e >> to >> > use the coins deposited in your Coindirect wallet. >> >> https://help.coindirect.com/hc/en-us/articles/115002441974-How-quickly-c= an-I-use-coins-deposited-into-my-Coindirect-wallet- >> >> This is repeated here as well: >> https://help.coindirect.com/hc/en-us/articles/4409120006546--Deposits- >> >> Re: Coinify, the API docs don't give any indication of risk scoring or a= ny >> other Gap600 integration: >> >> https://merchant.coinify.com/docs/api/#payment-object >> >> -- >> https://petertodd.org 'peter'[:-1]@petertodd.org >> > -- > ________________________________ > Daniel Lipshitz > GAP600 > www.Gap600.com > > > --000000000000a4aa8105eeeceda8 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Just a further follow up here please see below feedback fr= om Max CEO of Coinspaid - I asked him to send me a mail.

Peter - I can understand why some of our statistics seems off, some of our= clients when they have multiple outputs going to their cluster will query = each trx hash with a separate=C2=A0output address as for them they need eac= h trx or output deposit covered/guaranteed so we would count that trx hash = each time it is queried with a different output address as a trxs - this wo= uld mean that value of our total processed is possibly a more reflective=C2= =A0indicator. Apologies for this inclarity we are not used to communicating= our statistics at all - its just not our nature.

= I would think looking at Nov 2022 Stats - 900k unique trx hashes=C2=A0queri= ed, with 1.5m trxs on our count since trx hashes are queried with different= output addresses. The actual value is USD 220M benefiting from zero conf a= cceptance.=C2=A0

See Maxes email below - I will al= so forward the email as is to the list


Hi Daniel,

Ho= pe you are doing fine. I know you are in discussions with Bitcoin Core team= or RBF updates.
With current email, wanted to confirm that we ar= e running quite a big Bitcoin payment operation with over 300k incoming tra= nsactions, with 700+ inputs a month. Which is a fair percentage of overall = BTC chain capacity and we do enjoy zero conf flows that you offer. Our clie= nts do like to give instant experience to their end customers, I would not = want to disappoint them with news that =E2=80=9Cwaiting for confirmations= =E2=80=9D is on a table again, after all these years of smooth experience.<= /div>

2 main production clusters are rotating around:
3JodN7GmkHdPgKj9G7HCkn9NDLhrcWCjVN
3QKCocNhzAgtgFLsD5qUZcG6e4TkfRf421
Kind regards,
Max Krupyshev
Founder & Leader
coinspaid.com=C2=A0//=C2= =A0cryptoprocess= ing.com=C2=A0
Berlin, Germany
telegram: mkrupyshev
<= div style=3D"font-size:12.8px">________________________________

Daniel Lipshitz
GAP600|=C2= =A0www.gap600.com<= /font>
Phone:=C2=A0+44 113 4900 117
Skype: dani= ellipshitz123
= Twitter: @daniellipshitz


On Sat, Dec 3, 2022 at 3:17 PM Daniel L= ipshitz <daniel@gap600.com> = wrote:
The statistics that I have stated are based on trxs that rely on = our tool. They are not overstated, this is a reflection of the 0conf market= on BTC.

They are trxs w= hich our clients query via the API and which I clients pay subscription for= .

There is no point for = clients to send us trxs they don=E2=80=99t want or need our response from. = We are a B2b provider so we are not sure how and who the end users and appl= ications=C2=A0are.

Coini= fy definitely doesn=E2=80=99t send us all their traffic, as I would think s= ome of our other clients.

Here is some external confirmation a bit old though but still-=C2=A0
You can also see our video of Coinspaid us= ing our service on our site - all our Marcom is a bit old.

We service primarily payment proce= ssors and liquidity providers and not end merchants so I can=E2=80=99t say = how and to who end clients implement it.

<= div dir=3D"auto">If AML/KYC was enough to prevent double spends all exchang= es would offer 0conf.=C2=A0

I don=E2=80=99t know the split with our clients as it=E2=80=99s non of = our business but definitely a significant amount of end users are not Kyced= for the trxs.=C2=A0

Bes= t would be to try and talk to some of our major clients - ie Coinpayments, = Coinspaid and Coinify.

<= br>

On Sat, 3 Dec 2022 at 14:12 Peter Todd <pete@petertodd.org> wrote:
=
On Sat, Dec 03, 2022 at 0= 1:01:16PM +0200, Daniel Lipshitz wrote:
> Shapeshift used to be clients in fact one of our first when we started= in
> 2016.
>
> They no longer use our service but from time to time use us for fee > recommendations. So we actually should remove their logo as a current<= br> > client.

Yes you should. When did ShapeShift stop using your service? Did they expla= in
why?

> If you wish to test it out try find a merchant using Coinpayments or > Coinspaid.
>
> Also some of our non custodial liquidity providers offer service no > custodial wallets. I am not sure which.

I see that you also advertise that Gap600 is "Trusted by" Coindir= ect and
Coinify, both AML/KYC crypto exchanges. Obviously, with full AML/KYC
double-spends are not much of a concern. And it's not even clear that either accepts zeroconf anyway, as I'll explain later.

On this list you claimed that:

>=C2=A0 1. As of end of Nov 2022 - GAP600 has processed i.e responded to= circa
>=C2=A0 15M transactions
>=C2=A0 2. These transactions have a cumulative value of 2.3B USD value.=
>=C2=A0 3. We currently are seeing circa 1.5M transactions queired per m= onth.

What's the value and number of transactions that *actually* rely on you= r
unconfirmed transaction tools? The only category that would apply for is go= ods
provided immediately and irrovocably, without AML/KYC. Because it sounds li= ke
these figures may be significantly overstated.


Re: CoinsPaid, what you say here makes it also sound like it relies on AML/= KYC:

> CoinsPaid applies a special software tool across its solutions to cond= uct
> stringent KYC procedures and a risk-based approach to CDD that verify = user
> identities to mitigate fraud, money laundering and other activities li= nked to
> criminality and terrorism.
https://www.gap600.com/uncategorized/coinspaid/
Re: Coindirect, the documentation I can find appears to say that confirmati= ons
are required before you can use coins deposited into Coindirect:

> Digital currency transactions must be confirmed on the relevant networ= k block
> before they are considered valid. Only once confirmed, will you be abl= e to
> use the coins deposited in your Coindirect wallet.
https://help.coindirect.com/hc/en-us/articles/115002= 441974-How-quickly-can-I-use-coins-deposited-into-my-Coindirect-wallet-=

This is repeated here as well: https://help.coindirect.com/hc/en-us/articles/4409120006546--Deposits-=

Re: Coinify, the API docs don't give any indication of risk scoring or = any
other Gap600 integration:

https://merchant.coinify.com/docs/api/#payment-= object

--
http= s://petertodd.org 'peter'[:-1]@petertodd.org
--
__________________________= ______
Daniel Lipshitz
GAP600
www.Gap600.com


--000000000000a4aa8105eeeceda8--