It turns out my business liability insurance won't cover this site and it risks me losing my insurance across the board. Because of that, I won't be developing bidfast any further.
Quick post-mortem: Never took a single BTC from anyone, and paid out all outstanding debts. I will delete all personal information from the database. For me, ~$100 and ~ a week's work was an acceptable cost to run an experiment to test the viability of a site like this.
If anyone would like to purchase the code and/or domain behind the site, please PM me.
On to find something else, I suppose.