Just for further reference i have found the solution. Hope it will help to someone else.
Here is my web.php has to be post
Route::post('/payment/update/{icoslug}', 'CallbackController@update');
VerifyCsrfToken.php has to be like this for this route
<?php
namespace App\Http\Middleware;
use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken as Middleware;
class VerifyCsrfToken extends Middleware
{
/**
* The URIs that should be excluded from CSRF verification.
*
* @var array
*/
protected $except = [
'/payment/update/*',
];
}
Now the callback woks as expected
here is the contoroller
<?php
namespace App\Http\Controllers;
use Illuminate\Support\Facades\Cache;
use Illuminate\Http\Request;
use App\User;
use App\Payment;
use DB;
class CallbackController extends Controller
{
public function update(Request $request, $icoslug)
{
$payment = Payment::whereIcoslug($icoslug)->firstOrFail();
$user = User::where('slug', $icoslug)->firstOrFail();
$invoicementett = $payment->invoice;
$data = file_get_contents('php://input');
if ($data) {
$params = json_decode($data);
$invoice = $params->invoice;
if ($invoicementett = $invoice) {
$payment->update();
$payment->amount = 'fizetve';
$payment->save();
$user->update();
$user->activated = 'actve';
$user->save();
return $invoice;
}
}
die("waiting for confirmations");
}
}