Pymstr (@pymstr_) header
Pymstr (@pymstr_) profile picture

Your payment processor holds your money. We don't. Non-custodial stablecoin payments straight to your wallet.

Joined April 2026
Interchange on a $100 card transaction: about $2.40. Interchange on a $100 stablecoin transaction: $0.00. The rest of the card fee is markup, reserve, and float.
1
The buyer never buys ETH, POL or BNB. Network gas is paid in the stablecoin itself, through an ERC-20 paymaster. A first-time stablecoin user pays in USDC, signs once, done. No native token to buy before the first payment. pymstr.com
16
The next $1B custodial hack won't be a DeFi exploit. It will be a payment processor holding customer funds it never needed to hold. CoinsPaid was the rehearsal. Alphapo was the warm-up. Bybit was the intermission.
2
3
115
Cantor Fitzgerald manages Tether's reserves. A Wall Street primary dealer backs the largest stablecoin on earth. TradFi isn't circling the category. It's already inside it.
2
46
If your webhook endpoint accepts unsigned POSTs, someone can forge payment confirmations. (thread) ↓
1
1
33
6/ Merchant side: recompute the HMAC on the raw body BEFORE parsing JSON. A middleware rewrite otherwise breaks the check.
1
Your compliance team is fighting the 2020 war. Back then "crypto" meant unregistered exchanges and mixers. Today it means MiCA-licensed issuers, tokenized deposits, and JPMorgan on-chain. The threat model expired.
26
Signup to first accepted payment on PYMSTR: 5 minutes. Traditional high-risk processor onboarding: 2 to 8 weeks of underwriting. Same-day acceptance vs weeks of paperwork.
17
Card processors are running a covered call on your settlement timing. They hold your money. They earn the float. You bear the reversal risk. Priced correctly, that option would cost 4-6%. You pay for it in the "processing fee".
14
Ethena's USDe: $6B TVL. A synthetic dollar hedged with crypto derivatives. The stablecoin category isn't one thing anymore.
17
$97M was stolen from two crypto processors in 2023. Both hacks had the same root cause. (thread) ↓
2
38
6/ Non-custodial removes the pool. Funds route buyer to merchant directly. There is no hot wallet to breach.
1
5