Skip to content

Hacking a Crypto Payment Gateway

Pearson and Honigwachs

Hacking a Crypto Payment Gateway

Summary

### Security Auditing of Cryptocurrency Payment Processors At 00:00, Devin Pearson and Honigwachs deliver a vulnerability analysis of cryptocurrency payment gateways, examining integration risks at physical point-of-sale (PoS) terminals.

### Integrating Digital Currencies into Retail Infrastructure At 02:00, Pearson discusses the mission of GloBee, an open payment platform designed to bridge Bitcoin and Monero transactions into brick-and-mortar retail systems and automated vending machines.

### Hardware Interfacing and Multi-Drop Bus (MDB) Protocols At 04:03 and 06:00, the presenters examine physical hardware constraints. Integrating crypto payments into legacy vending machines requires interfacing with the internal Multi-Drop Bus (MDB) protocol, translating low-level hardware controller commands into modern payment requests.

### Single-Use Settlement Addresses and Price Locks At 08:03, the session explores payment gateway architectures. The system generates unique, single-use public addresses for each transaction, tracking mempool broadcasts while enforcing time-limited exchange rate locks to protect merchants from market volatility.

### Double-Spend Risks and Payment Verification Security Concluding between 10:00 and 12:04, the speakers evaluate offensive attack vectors against retail gateways. They discuss zero-confirmation double-spend attacks, payment notification spoofing, and the critical necessity of cryptographically authenticating server webhooks before vending merchandise.

(AI summary — Gemini Flash)

Related talks