davout/bitcoin-central

Bitcoin Central

bitcoin-central's Issues

add support for testnet btc

Would be nice to be able to trade testnet bitcoins for mainnet bitcoins on bitcoin-central. :)

Add a spinner while creating a new address

Display addresses as QR codes

Allow users to cash out via PayPal

Add JavaScript calculations on the trade order creation page

Session time-outs

Show time out before auto-logout (see Liberty Reserve)
Decide and implement a default time out.

Allow users to forbid sessions to remember them after the browser is closed.

Prevent DOS by massive address generation

Notify if a user keeps creating addresses in short intervals ?

Require captcha if more than X addresses are generated each day for an user ?

Market orders

Make trade order re-activation available in the interface

Model code is already available, just need a pretty couple of buttons

Order book should be sorted in some way

Order book overflows from the page when it gets bigger

Ticker JSON data is messed up

Thoroughly validate that transactions actually rollback

Creating a trade order, if the trade is performed, but fails, it seems like the trade order is still there.

Option to freeze an account

So it can not be logged into unless a proper unlock request is made

Trade orders get disabled when they really shouldn't be when they get executed

Truncate LR withdrawals precision to 2 decimal places

It seems that people withdrew X.XXYYY getting only XX.XX sent to them and 0.00YYY being lost in limbo.

Needs some more investigation, but there might be a little problem here.

Doesn't look like a vulnerability though.

json trades data is gone?

there used to be json trade data available at https://bitcoin-central.net/trades/all_trades.json but now it is gone. gribble used it to report bc trades...
what happened?

Allow to create order with unconfirmed balance

And activate order when balance will be confirmed.

This helps a lot when you just want to transfer funds & create order. Now you have to wait long time between actions...

Whitelist parameters on sensitive actions

Notify users on trades

Wallet backup

Allow users to download an encrypted wallet backup, in case of server failure any user can send his latest backup.

Rake task + cron job for periodic wallet backup to email, FTP etc.

The keypool should be massively increased in order to account for increased address generation due to shared wallet.

Shopping cart interface

Implement real-time push trading API

Discussion on rounding

[23:53] #bitcoin-otc> it quacks? it's a fucking duck
[23:54]  Round actual btc amount bought down then if it is a buy, and currency up if it is a sale?
[23:54] #bitcoin-otc> sturles: then people will complain i'm stealing them
[23:54] #bitcoin-otc> i'm curious to find a cheating use case
[23:54] #bitcoin-otc> evan: wtf are you talking about?
[23:54]  But you are not -- it is just to the other partys advantage, so it is impossible to cheat on rounding.
[23:55]  davout: nothing
[23:55] #bitcoin-otc> yea, but won't some people end up getting charged more than they actually have on their account ?
[23:56]  I don't think anyone will complain about the fifth decimal.  Perhaps when one BTC is worth USD 100, if that ever happens.
[23:56] #bitcoin-otc> hmm
[23:56] #bitcoin-otc> evan: elaborate
[23:57]  Not i you round down the amount they are getting.  If A bought 0.00001 BTC and have 0 USD on the account, the user should get 0 BTC.
[23:58] #bitcoin-otc> sturles: that can't happen
[23:58] #bitcoin-otc> trade orders are checked before getting executed, you can't enter an order that goes over your buying power at the given ppc
[23:58] #bitcoin-otc> you have 10 lrusd
[23:58] #bitcoin-otc> you can enter
[23:59] #bitcoin-otc> buy 100 btc @ 0.1
[23:59] #bitcoin-otc> but not 100 btc @ 0.100000001
[23:59] #bitcoin-otc> it won't let you
[23:59]  If A has any amount of LR, he can buy 0.00001 BTC at 0.299999 and pay nothing.  For nothing he should get 0 BTC.
[00:00]  arbitrage trading between mtgox and bitcoin-central promises to be fun, if we need 10 minutes to get tx confirmations
[00:01] #bitcoin-otc> you need 3 confirmations before being able to use your funds on BC
[00:01]  And he can buy 1.00001 BTC for 0.299999, and get the 0.00001 BTC for free.
[00:01] #bitcoin-otc> have fun doing arbitrage :)
[00:01] #bitcoin-otc> sturles: that's interesting
[00:02] #bitcoin-otc> sturles: i'm going to copypaste your last bits, stuff it all in a github issue and look at it when my brain is not on screensaver :)

Check that transaction confirmations keep increasing

If they stop that means they got reversed.
Stop monitoring after 2k confirmations would be a good default.

Implement automated checks

• Check that the bitcoin client balance is >= to the sum of all bitcoin balances
• Same for Liberty Reserve
• Check that BC balances are equal to those reported by the bitcoin client

Always display balances

Somehow, balances should be displayed in a general way so they are always visible

Functional logs

Implement a functional log level :
Account XXX : Added X LREUR

etc

Message about pending confirmations appear on outbound BTC transfers

Hovering on stuff on the transfer history page

Pop-up upon successful transfer

Somehow transfer notifications should be pushed to the client in order to display a pop-up when an incoming transfer is detected server-side

Donation accounts

Allow accounts to have an auto market sell for incoming BTC transfers.

Allow auto-forward to an address.

Hide balances when they are zero

On site messaging

Merge all transfers controllers together

Skinny controller + fat model ftw

Privacy in Liberty Reserve transfer

Allow users to get funds transferred to them with a private LR transfer

Make Liberty Reserve withdrawals transactional

Dark pool orders

Allow users to send any currency amongst themselves

Bitcoins are already managed auto-magically

There is no way to reset a password other than manually

Require more confirmations for larger transfers

The amount of required confirmations could depend on the amount that is being transferred.

add support for pecunix currency

Pecunix is a gold-backed hard currency, and would be a good option for trading for btc.

Liberty Reserve withdrawal will remove funds from account even if it fails

Because the provided payee LR account number is wrong for example.

Paginate account history

Login without solving captcha

i can login to the site without solving captcha. Looks like this is a bug...

Somehow display bitcoin addresses for outgoing transfers

Flash error and notice together after being redirected after sign-up

Split trade orders if necessary

Right now, orders are inactivated if the user has insufficient balance to complete them.
Instead, orders should be splitted in a part that can be honored with the current balance and an inactivated one.

Devise does not show flash[:error] properly after first failed authentication attempt

If a user tries to log in with a wrong password, the flash[:error] is only shown after the second attempt

OTC style trading

Allow IP restrictions on public interfaces