[bisq-network/bisq] Add option to make trade 'reason' less obvious (#2869)

Jul3k notifications at github.com
Sun Feb 7 13:47:36 CET 2021


I believe the decision to remove the trade ID as reason for payment actually reduced the security of the Bisq trade protocol. Let me explain a possible scenario that scammers performed on multiple platforms before and Bisq just became more vulnerable to:

1. A scammer accepts your BTC sell offer
2. He uses your banking information to place another sell offer with the same price on the internet. The sold goods can be completely different, a ring for example on Ebay.
3. The scammers offer is accepted from a second victim which performs the payment to your initial offer.
4. You receive the payment and confirm the release of bitcoin. The bitcoin are send to the scammer.
5. The second victim files a complaint. Contacts the police and sues you. In my jurisdiction (Germany). Your lawer might tell you, you received a payment with reason for payment ring. Since you did not deliver a ring, you will have to refund the victim. So you become the final victim.

To my opinion the person placing the offer should have the decision on how much risk he is willing to take. With the current implementation the buyer can accept the offer before he agrees with the seller on the specification of a trade id. The change makes the protocol less secure for the sellers.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/bisq-network/bisq/issues/2869#issuecomment-774668875
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bisq.network/pipermail/bisq-github/attachments/20210207/f0f0aff6/attachment.htm>


More information about the bisq-github mailing list