PayFair P2P Exchange Hacked: Difference between revisions

From Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository
Jump to navigation Jump to search
No edit summary
(Another 30 minutes complete. Additional sources merged in. New image for the case.)
 
(One intermediate revision by the same user not shown)
Line 1: Line 1:
{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/payfairp2pexchangehacked.php}}
{{Case Study Under Construction}}
 
[[File:Payfairp2p.jpg|thumb|Payfair P2P Exchange Homepage]]
[[File:Pbs.twimg.com/profile_images/945093368647892992/QIQVnmG4.jpg|thumb|Payfair P2P Exchange]]Ethereum is tricky to set up as a proper multi-signature wallet, since the functionality is not built-in and must instead be done through a smart contract. Smart contracts often have exploitable vulnerabilities. But more importantly, it does not make sense to trust an unknown entity in an unidentified country with your funds, regardless of whether the exchange claims to be “P2P” or not. The same issues with centralized exchanges apply to any escrow service as well.
Ethereum is tricky to set up as a proper multi-signature wallet, since the functionality is not built-in and must instead be done through a smart contract. Smart contracts often have exploitable vulnerabilities. But more importantly, it does not make sense to trust an unknown entity in an unidentified country with your funds, regardless of whether the exchange claims to be “P2P” or not. The same issues with centralized exchanges apply to any escrow service as well.
 
The country for this case study is not yet known.
 


== About Payfair P2P Exchange ==
== About Payfair P2P Exchange ==
“On October 2, PayFair—a decentralized escrow and P2P exchange—closed its website because one of its main cold wallets was emptied, leading many to speculate about a possible exit scam. On September 29, Payfair disclosed on its Telegram channel that the private key to one of its cold wallets was compromised, which led to a hack. Their team says it is still unsure of how the private key was compromised but is conducting an internal investigation into the matter. While user funds have since been transferred to backup wallets, part of the ETH that was stolen has not been recovered. Despite announcing that the platform would only be down “until the end of the week,” the PayFair.io website still appears to be down and they have not updated their social media since July 29.”
PayFair describes itself as a "decentralized Escrow platform".<blockquote>PAYFAIR is a decentralized Escrow platform and p2p exchange which ensures the paramount security of all cryptocurrency transactions made between two parties.
 
The country for this case study is not yet known.


The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.
We provide low fees for all transactions in a safe, private and decentralized environment.</blockquote>Homepage:<ref>[https://web.archive.org/web/20180818083856/https://payfair.io/ PayFair Homepage Archive August 18th, 2018 2:38:56 AM MDT] (Nov 29, 2023)</ref><ref name=":0">[https://web.archive.org/web/20220825001014/payfair.io Payfair Homepage Archive August 24th, 2022 6:10:14 PM MDT] (Nov 29, 2023)</ref><ref>[https://payfair.io/ Payfair Homepage] (Nov 29, 2023)</ref>


Include:
Reddit:<ref>https://beta.reddit.com/r/Payfair/ ()</ref><ref>https://www.reddit.com/r/Payfair/</ref><ref>https://twitter.com/payfairio</ref>
 
* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.
 
Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.


== The Reality ==
== The Reality ==
Line 37: Line 19:


== What Happened ==
== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
“On September 29, Payfair disclosed on its Telegram channel that the private key to one of its cold wallets was compromised, which led to a hack. On October 2, PayFair—a decentralized escrow and P2P exchange—closed its website because one of its main cold wallets was emptied, leading many to speculate about a possible exit scam."
{| class="wikitable"
{| class="wikitable"
|+Key Event Timeline - PayFair P2P Exchange Hacked
|+Key Event Timeline - PayFair P2P Exchange Hacked
Line 44: Line 26:
!Description
!Description
|-
|-
|October 1st, 2019 12:01:29 AM
|September 29th, 2019
|Main Event
|Wallet Breach Disclosed
|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
|Payfair discloses on their Telegram channel that their main cold wallet had been breached and emptied.
|-
|-
|
|October 2nd, 2019
|
|Website Reportedly Closed
|
|The Payfair website is reportedly closed.
|-
|September 24th, 2021 4:16:35 AM MDT
|Purchase Guide Published
|Crypto Guides publishes a guide on "How And Where To Buy Payfair (PFR) – Step By Step Guide"<ref>[https://web.archive.org/web/20211105091149/https://cryptooguide.com/how-to-buy-payfair-pfr/ How And Where To Buy Payfair (PFR) – Step By Step Guide - Crypto Guides Archive November 5th, 2021 3:11:49 AM MDT] (Nov 29, 2023)</ref>.
|-
|August 24th, 2022 6:10:14 PM MDT
|Bitcoin Revolution Redirect
|The Payfair.io website presently redirects to the Bitcoin Revolution homepage<ref name=":0" />.
|}
|}
== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?
"Their team says it is still unsure of how the private key was compromised but is conducting an internal investigation into the matter."


== Total Amount Lost ==
== Total Amount Lost ==
The total amount lost is unknown.
The total amount lost is unknown.
How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?


== Immediate Reactions ==
== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?
“On September 29, Payfair disclosed on its Telegram channel that the private key to one of its cold wallets was compromised, which led to a hack. On October 2, PayFair—a decentralized escrow and P2P exchange—closed its website because one of its main cold wallets was emptied, leading many to speculate about a possible exit scam."


== Ultimate Outcome ==
== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?
"Their team says it is still unsure of how the private key was compromised but is conducting an internal investigation into the matter. While user funds have since been transferred to backup wallets, part of the ETH that was stolen has not been recovered. Despite announcing that the platform would only be down “until the end of the week,” the PayFair.io website still appears to be down and they have not updated their social media since July 29.”
<ref>https://www.reddit.com/r/Payfair/comments/tccbsg/payfair_update_12032022/</ref><ref>https://www.reddit.com/r/Payfair/comments/ea2fas/payfair_update_13122019/</ref>
=== Redirect To Bitcoin Revolution ===
The Payfair website appears to redirect to the "bitcoin revolution" homepage, a likely ponzi scheme.


== Total Amount Recovered ==
== Total Amount Recovered ==
Line 71: Line 73:
== Ongoing Developments ==
== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
What parts of this case are still remaining to be concluded?
== General Prevention Policies ==
Let this be a reminder that claiming to be "decentralized" doesn't always mean that there is no custody of any funds. The proper storage of funds offline in a multi-signature wallet with keys held by multiple reputable people has never been breached.
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}
{{Prevention:Individuals:End}}


== Prevention Policies ==
== Platform Prevention Policies ==
Let this be a reminder that claiming to be "decentralized" doesn't always mean that there is no custody of any funds. The proper storage of funds offline in a multi-signature wallet with keys held by multiple reputable people has never been breached.
{{Prevention:Platforms:Placeholder}}
 
{{Prevention:Platforms:End}}
 
== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}
 
{{Prevention:Regulators:End}}


== References ==
== References ==
<references></references>
<references></references>

Latest revision as of 12:12, 29 November 2023

Notice: This page is a new case study and some aspects have not been fully researched. Some sections may be incomplete or reflect inaccuracies present in initial sources. Please check the References at the bottom for further information and perform your own additional assessment. Please feel free to contribute by adding any missing information or sources you come across. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

Payfair P2P Exchange Homepage

Ethereum is tricky to set up as a proper multi-signature wallet, since the functionality is not built-in and must instead be done through a smart contract. Smart contracts often have exploitable vulnerabilities. But more importantly, it does not make sense to trust an unknown entity in an unidentified country with your funds, regardless of whether the exchange claims to be “P2P” or not. The same issues with centralized exchanges apply to any escrow service as well.

About Payfair P2P Exchange

PayFair describes itself as a "decentralized Escrow platform".

PAYFAIR is a decentralized Escrow platform and p2p exchange which ensures the paramount security of all cryptocurrency transactions made between two parties. We provide low fees for all transactions in a safe, private and decentralized environment.

Homepage:[1][2][3]

Reddit:[4][5][6]

The Reality

This sections is included if a case involved deception or information that was unknown at the time. Examples include:

  • When the service was actually started (if different than the "official story").
  • Who actually ran a service and their own personal history.
  • How the service was structured behind the scenes. (For example, there was no "trading bot".)
  • Details of what audits reported and how vulnerabilities were missed during auditing.

What Happened

“On September 29, Payfair disclosed on its Telegram channel that the private key to one of its cold wallets was compromised, which led to a hack. On October 2, PayFair—a decentralized escrow and P2P exchange—closed its website because one of its main cold wallets was emptied, leading many to speculate about a possible exit scam."

Key Event Timeline - PayFair P2P Exchange Hacked
Date Event Description
September 29th, 2019 Wallet Breach Disclosed Payfair discloses on their Telegram channel that their main cold wallet had been breached and emptied.
October 2nd, 2019 Website Reportedly Closed The Payfair website is reportedly closed.
September 24th, 2021 4:16:35 AM MDT Purchase Guide Published Crypto Guides publishes a guide on "How And Where To Buy Payfair (PFR) – Step By Step Guide"[7].
August 24th, 2022 6:10:14 PM MDT Bitcoin Revolution Redirect The Payfair.io website presently redirects to the Bitcoin Revolution homepage[2].

Technical Details

This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

"Their team says it is still unsure of how the private key was compromised but is conducting an internal investigation into the matter."

Total Amount Lost

The total amount lost is unknown.

Immediate Reactions

How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

“On September 29, Payfair disclosed on its Telegram channel that the private key to one of its cold wallets was compromised, which led to a hack. On October 2, PayFair—a decentralized escrow and P2P exchange—closed its website because one of its main cold wallets was emptied, leading many to speculate about a possible exit scam."

Ultimate Outcome

What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

"Their team says it is still unsure of how the private key was compromised but is conducting an internal investigation into the matter. While user funds have since been transferred to backup wallets, part of the ETH that was stolen has not been recovered. Despite announcing that the platform would only be down “until the end of the week,” the PayFair.io website still appears to be down and they have not updated their social media since July 29.”

[8][9]

Redirect To Bitcoin Revolution

The Payfair website appears to redirect to the "bitcoin revolution" homepage, a likely ponzi scheme.

Total Amount Recovered

There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

Ongoing Developments

What parts of this case are still remaining to be concluded?

General Prevention Policies

Let this be a reminder that claiming to be "decentralized" doesn't always mean that there is no custody of any funds. The proper storage of funds offline in a multi-signature wallet with keys held by multiple reputable people has never been breached.

Individual Prevention Policies

No specific policies for individual prevention have yet been identified in this case.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

Policies for platforms to take to prevent this situation have not yet been selected in this case.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

No specific regulatory policies have yet been identified in this case.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.

References

  1. ↑ PayFair Homepage Archive August 18th, 2018 2:38:56 AM MDT (Nov 29, 2023)
  2. ↑ 2.0 2.1 Payfair Homepage Archive August 24th, 2022 6:10:14 PM MDT (Nov 29, 2023)
  3. ↑ Payfair Homepage (Nov 29, 2023)
  4. ↑ https://beta.reddit.com/r/Payfair/ ()
  5. ↑ https://www.reddit.com/r/Payfair/
  6. ↑ https://twitter.com/payfairio
  7. ↑ How And Where To Buy Payfair (PFR) – Step By Step Guide - Crypto Guides Archive November 5th, 2021 3:11:49 AM MDT (Nov 29, 2023)
  8. ↑ https://www.reddit.com/r/Payfair/comments/tccbsg/payfair_update_12032022/
  9. ↑ https://www.reddit.com/r/Payfair/comments/ea2fas/payfair_update_13122019/
Retrieved from "https://quadrigainitiative.com/cryptocurrencyhackscamfraudwiki/index.php?title=PayFair_P2P_Exchange_Hacked&oldid=5243"