You depend on Twitter:

1. Staying up.

2. Not doing this themselves and leveraging their advantage of being able to take payments private (like direct messages). What's the play if they do that, sue for abuse of monopoly?

Also, twitter has zero security. Just one quick scenario: Set up a search for twitpay, bag a list of usernames, start bruteforcing passwords, dump to an account, and cash out...