Blesta nonmerchant gateway (MIT-licensed). Extends <code>NonmerchantGateway</code> — buildProcess, validate, success callbacks all standard.
/components/gateways/nonmerchant/orbchain/.Module visiblerefund() routes via OrbChain payout.LIVEevent_id dedup on transaction.LIVEFlat 0.4% per settled invoice. No monthly fee, no per-coin markup, no chargeback fee. Deducted at payout time.
No. OrbChain is non-custodial — every invoice settles directly to the wallet address you configured. We never touch the coin.
No merchant KYC. Sign up with email, generate an API key, and you're live. Your customers don't KYC either.
Every webhook carries an HMAC header computed with HMAC-SHA512 over the raw body using your webhook secret. Plugin calls hash_equals for constant-time comparison — timing-attack safe.
We retry for 24h with exponential backoff. event_id is stable across retries; the plugin dedup keys on it so double-delivery is a no-op.
No KYC. No custody. Flat 0.4% fee. HMAC-signed webhooks. MIT-clean code.