Security
The main protection is the design: we do not hold funds, so they cannot be stolen from us. Everything else is layers of checks around it.
Funds are never with us
Every invoice is its own smart contract that can only forward what it receives to the merchant’s wallet. The recipient is baked into the invoice address: changing it means a different address.
No admin keys
The contracts have no owner, no admin or upgrade functions. We cannot change them, pause them or take funds — even if we wanted to or were hacked.
Independent watchdog
A separate server at another provider recomputes every new invoice address and checks wallets. Any mismatch raises an alarm and stops issuing invoices automatically.
Stop button
Issuing new invoices can be stopped in seconds. Already issued invoices keep working — buyers’ funds never get stuck.
Your wallet is protected
Your own wallet is verified by signature. Changing it takes 24–48 hours, with a notification and an “It wasn’t me” button.
Screening
Merchant wallets are checked against Tether and Circle blacklists, payments against the OFAC sanctions list. Large payments are confirmed by a second independent node.
Infrastructure
Encrypted backups on a separate server, TLS 1.2+, strict security headers, no third-party scripts or cookies on payment pages.
What’s next
An external contract audit and a penetration test before the public launch. We will publish the results.
Found a vulnerability?
Email security@ethpaid.com — we reply within a day. Please don’t publish details until we fix it.