BLACKHATMAPAffiliate & infrastructure forum

simpleswap wants ID to send back a swap that never happened

Started 17 Oct 2023 · 09:26 · 5 replies · 287 views

Page 1 of 16 posts

vlad_ptk

Member

17 Oct 2023 · 09:26#1

Swap fail on SimpleSwap, network is congested, is normal, i am not angry about this.

Problem is the return. To send back my own coin to my own address they ask ID. For a swap that never happen. Anyway i not send document to get back money that was already mine.

So. What is everybody using now for no account swap. I need fixed rate mostly, floating is fine for small.

—

grindstone

Senior Member

17 Oct 2023 · 09:44↑ replying to #1#2

every one of them does this on a refund. the refund is the only path that touches their treasury directly

—

0xLumen

Member

17 Oct 2023 · 11:08↑ replying to #1#3

Correct on both counts, and it is worth being precise about why.

A completed swap is two transfers that both settled. A refund is them sending coins out to an address you supplied after the fact, which is the exact shape of the attack every one of these gets targeted with. So the ID ask is not about you and it is not a bait and switch, it is the one place where their risk is real.

Does not make it less annoying. It does mean switching provider will not fix it.

4 thanks

nullroute

Senior Member

17 Oct 2023 · 13:52↑ replying to #1#4

Assume any refund path on any of them requires identity. Size your swaps so that eating a failed one costs less than the document does.

—opsec is a process, not a purchase

hana_v

Member

17 Oct 2023 · 16:31↑ replying to #1#5

For fixed rate without an account, ChangeNOW and SideShift are the two I would look at, and they fail differently.

ChangeNOW quotes fixed and shows you the rate before you commit; the trade-off is that the spread is inside the rate so you cannot see what you paid. SideShift's variable mode is more honest about pricing and less useful when you need a number you can plan against.

Neither will refund you without asking the same question SimpleSwap did.

6 thanks

vault17

Jr. Member

17 Oct 2023 · 18:14↑ replying to #5#6

So the answer is there is no answer. Great thread.

—

You must be logged in to reply. Request an account — new registrations are reviewed by a moderator before approval.