New Anonymous Instant Crypto Exchange -> SwapFast.io

[swapfast.io]

Hello everyone,  

We would like to introduce ourselves to the Bitcointalk community!

We’re a new and upcoming instant crypto exchange named: SwapFast

SwapFast aims for hassle-free crypto swaps. Our clients can exchange their coins without account registration or sharing their personal details. Fully anonymous, no KYC or AML and no data logs being stored. We offer 24/7 support and only charge a small commission fee of 0.5% to fund our platform.

We now support over 50 coins like: BTC, ETH, XMR, XRP, BCH, ADA, BNB and will continue to grow the list of coins every day!

Give our platform a shot and we’re happy to hear your opinion!  

Support: support@swapfast.io

Website link: https://swapfast.io/
Trustpilot link: https://www.trustpilot.com/review/swapfast.io/
Instagram: swapfast.io

[Potato Chips]

So how is this fully anonymous when there's Cloudflare? you guys have no control over their hoarded data.

and partners with these exchanges? hmmm...how is that possible with your exchange having no KYC and maximum limit? Most importantly, I can't find anything that supports the statement as there should be.

SwapFast system tracks rates in real time from established exchange platforms such as: Binance, Poloniex, Bittrex and many other official partners.

[swapfast.io]

So how is this fully anonymous when there's Cloudflare? you guys have no control over their hoarded data.

and partners with these exchanges? hmmm...how is that possible with your exchange having no KYC and maximum limit? Most importantly, I can't find anything that supports the statement as there should be.

SwapFast system tracks rates in real time from established exchange platforms such as: Binance, Poloniex, Bittrex and many other official partners.

Hello and thank you for your reply,

We hold private investors funds for larger transactions.
Cloudflare does not collect our data and is just to ensure DDoS protection.

[joniboini]

We hold private investors funds for larger transactions.

What does this mean? You mean you'll hold user funds if they transact with a huge amount?

Are you using the same strategy as Coinswitch to get your rates and exchange the funds?

[Baofeng]

Every government agencies around the world are working together to curb out crypto's anonymity. So I think you need to take that into considerations as you don't want your services to be targeted in the future. You can read everything here, https://static.coindesk.com/wp-content/uploads/2019/06/Embargo-Public-Statement-on-Virtual-Assets-and-Related-Providers.pdf

[Narcissistic]

Hello everyone,  

We would like to introduce ourselves to the Bitcointalk community!

We’re a new and upcoming instant crypto exchange named: SwapFast

SwapFast aims for hassle-free crypto swaps. Our clients can exchange their coins without account registration or sharing their personal details. Fully anonymous, no KYC or AML and no data logs being stored. We offer 24/7 support and only charge a small commission fee of 0.5% to fund our platform.

We now support over 50 coins like: BTC, ETH, XMR, XRP, BCH, ADA, BNB and will continue to grow the list of coins every day!

Give our platform a shot and we’re happy to hear your opinion!  

Support: support@swapfast.io

Website link: https://swapfast.io/
Trustpilot link: https://www.trustpilot.com/review/swapfast.io/
Instagram: swapfast.io

Do you have a paid bug bounty program? I'd like to submit a number of bugs/vulns.

[swapfast.io]

We hold private investors funds for larger transactions.

What does this mean? You mean you'll hold user funds if they transact with a huge amount?

Are you using the same strategy as Coinswitch to get your rates and exchange the funds?

For large transcations we hold a private reserve for such cases.
We are implemented within multiple platforms where we also get our exchange rates from.
We seek the best rate during any exchange made!

[Narcissistic]

We hold private investors funds for larger transactions.

What does this mean? You mean you'll hold user funds if they transact with a huge amount?

Are you using the same strategy as Coinswitch to get your rates and exchange the funds?

For large transcations we hold a private reserve for such cases.
We are implemented within multiple platforms where we also get our exchange rates from.
We seek the best rate during any exchange made!

Care to respond to my earlier email? The first sign of trustworthiness (for me at least) in an exchange, is their responsiveness with security related issues and how they handle the process for bug submissions from start to finish. No one even responded to my submission (after the staff requested for me to send them over, whilst simultaneously informing me there is no paid bounty program in place...) - trust me, with how vulnerable your platform is, (WordPress  ) you're going to want to treat people like me who are submitting them, well, before some ass comes along and exploits them for their own financial gain.

[milewilda]

It loads like forever.Opening this on chrome with having 25mbps of internet.

[Narcissistic]

It loads like forever.Opening this on chrome with having 25mbps of internet.

Most likely because they have CloudFlare's UAM (Under attack mode) enabled. Which is misconfigured (horribly) as it wasn't effective at all against any penetration test that was happening on their site hours ago.

[swapfast.io]

It loads like forever.Opening this on chrome with having 25mbps of internet.
https://i.imgur.com/CrwER1i.png

We were updating the site. It is accessible again!

[baco4]

I didn't get the exchange done

I'm referring to exchange SF_VneoQVZ6vkR06Wzc

I contacted them ,but no reply moreover they deleted the exchange page !!!

Please refund me

[1Referee]

So how is this fully anonymous when there's Cloudflare?

It's an extremely bold claim. Even if Cloudflare itself isn't a direct threat to people's privacy, the exchange itself still is or can be, so there is no way that the service they provide to people is fully anonymous. Mixers don't even pretend to be fully anonymous, because they know it simply isn't possible because there is a middleman involved.

For large transcations we hold a private reserve for such cases.

In case someone initiated a large transaction that requires you to tap into your own reserve at a certain price, what's your policy when the price drops and you are in a disadvantageous position if you proceed with the transaction? Will you just cancel the trade directly or allow some time for the price to recover and cancel afterwards if the price doesn't recover?

[swapfast.io]

So how is this fully anonymous when there's Cloudflare?

It's an extremely bold claim. Even if Cloudflare itself isn't a direct threat to people's privacy, the exchange itself still is or can be, so there is no way that the service they provide to people is fully anonymous. Mixers don't even pretend to be fully anonymous, because they know it simply isn't possible because there is a middleman involved.

For large transcations we hold a private reserve for such cases.

In case someone initiated a large transaction that requires you to tap into your own reserve at a certain price, what's your policy when the price drops and you are in a disadvantageous position if you proceed with the transaction? Will you just cancel the trade directly or allow some time for the price to recover and cancel afterwards if the price doesn't recover?

SwapFast does not store data nor does CloudFlare. We only activate CloudFlare once a DDoS attack is imminent.
As for large transactions everything is done automatically from our private investors funds according the exchange rate at that time. We take the risk of volatility during the exchange.

[magneto]

I'm just wondering whether or not you guys are actually firm on the anonymity.

Because we've seen what other instant exchangers have done. Exchanges like changenow have initially used their anonymity as a marketing point, but later on they started withholding transactions for the apparent purpose of KYC and started to identify users on a random basis.

So are you guys potentially going to go down to that path as well? If yes, then you should let everyone know, because stating that you are anonymous when you are not fully so can be construed as misleading advertising.

[Narcissistic]

Their website is ridiculously vulnerable, use with absolute caution. Be ware of their claims for private funds, however large they claim to have when they can't even pay for bug submissions that can and will lead to their database being dumped lol

They use an outlook.com email address for support emails too.

[TryNinja]

SwapFast does not store data nor does CloudFlare. We only activate CloudFlare once a DDoS attack is imminent.
As for large transactions everything is done automatically from our private investors funds according the exchange rate at that time. We take the risk of volatility during the exchange.

How can you affirm that CloudFlare does not store any data?

And you don't just "activate CloudFlare once a DDoS attack is imminent". You are using their name servers. You just don't have their "protection mode" activated all the time. But ALL your data is passing through CloudFlare ALL the time.

You don't seem to know that, which makes me doubt your capacity of running a website like this that claims to be " fully anonymous".

Btw, are you related to https://instaex.io/ ? Because you copy-pasted their entire Terms of Service. Actually, the entire website is similar.

Original: https://instaex.io/terms

[swapfast.io]

SwapFast does not store data nor does CloudFlare. We only activate CloudFlare once a DDoS attack is imminent.
As for large transactions everything is done automatically from our private investors funds according the exchange rate at that time. We take the risk of volatility during the exchange.

How can you affirm that CloudFlare does not store any data?

And you don't just "activate CloudFlare once a DDoS attack is imminent". You are using their name servers. You just don't have their "protection mode" activated all the time. But ALL your data is passing through CloudFlare ALL the time.

You don't seem to know that, which makes me doubt your capacity of running a website like this that claims to be " fully anonymous".

Btw, are you related to https://instaex.io/ ? Because you copy-pasted their entire Terms of Service. Actually, the entire website is similar.

Original: https://instaex.io/terms

Hi,

We have build the website from the ground up. CloudFlare helps us protect against DDoS attacks. The terms and service are similar that of ours so yes we it did took the same.

[TryNinja]

Hi,

We have build the website from the ground up. CloudFlare helps us protect against DDoS attacks. The terms and service are similar that of ours so yes we it did took the same.

Yes, it helps you protect against DDoS and also sniffs everything it's happening in the customer <> website range, including their IP addresses and most likely addresses.

Go to your website and check which SSL certificate you are using. Tip: "sni.cloudflaressl.com"

0% privacy and an plagiarized terms of use. Hmm...

[hugeblack]

How do you plan to gain trust as you run a new platform and repeat the same answers to the questions asked? Fully anonymous, no KYC or AML and no data logs being stored, Cloudflare for DDoS attacks. Will you send coins to test the platform?

The exchange has been built from the ground up by blockchain developers who had many years of experience in the field of crypto and blockchain technology

Who are these developers? How can we verify this information? Since you rely on Cloudflare for DDos, why do you consider it a feature of the developer team?