Public ledger of every directory change — grade bumps, KYC re-tests, sponsorship activations, incident updates. We log it so visitors can verify our claim that the editorial firewall holds.
The list is the product; this is the receipt of how it changes.
xmr.club
{
"also_listed_at": {
"web3privacy": true,
"monerica": true
}
}2026-07-15 exploit incident closed after 14-day observation window. Grade A- held throughout. Daily poll retired — event-triggered re-open only. Loss figure unchanged 0.66 BTC.
Day 14 re-check: 8 consecutive quiet days, incident settled, grade A- held. Loss figure unchanged 0.66 BTC.
Day 13 re-check: no new release since v0.17.5 (164h quiet), surface stable, no OrangeFren follow-up, grade held A-. 7 consecutive daily quiet-cycles — incident objectively settled.
Day 12 re-check: no new release since v0.17.5 (140h quiet), surface stable, no OrangeFren follow-up, grade held at A-. Loss figure unchanged 0.66 BTC.
Day 11 re-check: no new release since v0.17.5 (116h quiet), surface stable, no OrangeFren follow-up, grade held at A-. Loss figure unchanged 0.66 BTC.
Day 10 re-check: no new release since v0.17.5 (91h quiet), surface up, no OrangeFren follow-up, grade held at A-. Loss figure unchanged 0.66 BTC.
BasicSwap +192h re-check. No new release since v0.17.5 — ~67h quiet, 3rd consecutive quiet-cycle probe. Audit-sweep durably settled. No post-mortem, loss figure unchanged, OrangeFren no follow-up. Grade held at A-. Reschedule +24h.
BasicSwap +168h re-check. No new release since v0.17.5 (2026-07-20 20:47Z) — ~44h quiet. Audit-sweep cadence settled. No post-mortem, loss figure unchanged, OrangeFren no follow-up. Grade held at A-. Reschedule +24h.
BasicSwap +120h re-check. No new release since v0.17.4 — ~78h of release quiet (2nd consecutive quiet-cycle probe). Audit sweep confirmed wound down. No post-mortem doc, loss figure unchanged, OrangeFren no follow-up. Grade held at A-. Reschedule +24h.
BasicSwap +96h re-check. No new release since v0.17.4 (2026-07-16 21:55Z) — ~54h of release quiet, first sustained pause since incident opened. Audit-sweep cadence settling. No post-mortem doc, loss figure unchanged, OrangeFren no follow-up. Grade held at A-. Reschedule +24h.
BasicSwap +72h re-check. NEW: v0.17.4 published 2026-07-16 21:55Z (~20h after v0.17.3). Particl blind swap lock-tx-spend expected-address invariant + Electrum Merkle verification + reliability fixes + CI matrix expansion. Comprehensive audit sweep pattern continues. No post-mortem doc; loss figure unchanged. Grade held at A-. Reschedule +24h.
BasicSwap +48h re-check. NEW: v0.17.3 published 2026-07-16 01:27Z (~14h after v0.17.2). Contents: defense-in-depth on adaptor-sig swap bid-state message validation (tighter than v0.17.2 fix) + Web UI Host-allowlist / CSRF / WebSocket Origin hardening. Operator running a comprehensive audit sweep. No post-mortem or updated loss figure today. Grade held at A-. Reschedule +24h.
BasicSwap +24h re-check. GitHub release cadence now on record: v0.17.0 2026-07-09, v0.17.1 2026-07-12 (security hardening), v0.17.2 2026-07-14 11:36Z (exploit fix). v0.17.2 was published ~13h BEFORE OrangeFren public tweet 2026-07-15 00:49Z — operator disclosed + patched in the same window, OrangeFren picked up later. Root cause: adaptor-sig lock-refund key-share race (releases follower key share if refund spend published while refund tx unconfirmed). Loss figure unchanged at 0.66 BTC ($42k) per public sources. Grade held at A-. Reschedule +24h.
Grade A → A- on curator sign-off. Reason: 2026-07-15 swap-security exploit (0.66 BTC/~$42k reported by OrangeFren) offset by rapid + responsible operator response — @BasicSwapDEX acknowledged within ~12h, shipped v0.17.2 hardening fix ~9h after acknowledgement, 21h end-to-end from public report to shipped patch. Mirrors Haveno post-2026-06 demotion pattern. A- reflects the real losses tempered by the model incident response.
Refreshed incident on operator responsive-response evidence: @BasicSwapDEX acknowledged within ~12h and shipped v0.17.2 hardening release ~9h after that. Turnaround OrangeFren-report → shipped fix is ~21h end-to-end. Warning-lead paragraph in review body rewritten from ACTIVE INCIDENT to INCIDENT — patch released. Timeline now has 3 entries (open / acknowledged / hardening shipped). Grade recommendation revised A → A- (mirrors Haveno post-2026-06 demotion pattern with same-week fix); pending user pick.
Opened active-exploit incident based on OrangeFren.com verified-X post 2026-07-15 00:49Z: 0.66 BTC (~$42k) losses confirmed. basicswapdex.com surface still up, no incident banner from operator visible yet. Grade A HELD pending user pick on recommended demotion to B. Review body now leads with active-exploit warning so Grade A badge does not mislead readers hitting the page while operator response is pending. Follow-up wake +24h.
{
"also_listed_at": {
"web3privacy": true
}
}{
"also_listed_at": {
"web3privacy": true
}
}{"provider":{"id":"basicswap","category":"mixers","subcategory":"Atomic Swap","name":"BasicSwap DEX","tagline":"Particl-led atomic-swap DEX. XMR ↔ BTC / LTC / PART / DASH cross-chain without bridges or wrapped tokens.","review":"Open-source desktop GUI for cross-chain atomic swaps. No custody, no bridge tokens, no liquidity pools — just adaptor-signature swaps coordinated peer-to-peer over Tor. Smaller order book than centralised swaps but the trust model is unmatched. Native XMR↔BTC support is the headline use case.","kyc_tags":["anonymous_signup"],"feature_tags":["non_custodial","open_source","tor_supported","atomic_swap"],"rating":{"stars":null,"count":0,"grade":"A"},"fees":{"summary":"Swap-fee only · adaptor sigs · Particl + Tor coordinator"},"links":{"web":"https://basicswapdex.com","outbound_slug":"basicswap","twitter":"https://x.com/BasicSwapDEX","telegram":"https://t.me/basicswapdex","matrix":"https://matrix.to/#/basicswap:matrix.org"},"highlight_tags":["P2P","ATOMIC-SWAP","XMR{
"also_listed_at": {
"web3privacy": true
}
}{"provider":{"id":"basicswap","category":"mixers","subcategory":"Atomic Swap","name":"BasicSwap DEX","tagline":"Particl-led atomic-swap DEX. XMR ↔ BTC / LTC / PART / DASH cross-chain without bridges or wrapped tokens.","review":"Open-source desktop GUI for cross-chain atomic swaps. No custody, no bridge tokens, no liquidity pools — just adaptor-signature swaps coordinated peer-to-peer over Tor. Smaller order book than centralised swaps but the trust model is unmatched. Native XMR↔BTC support is the headline use case.","kyc_tags":["anonymous_signup"],"feature_tags":["non_custodial","open_source","tor_supported","atomic_swap"],"rating":{"stars":null,"count":0,"grade":"A"},"fees":{"summary":"Swap-fee only · adaptor sigs · Particl + Tor coordinator"},"links":{"web":"https://basicswapdex.com","outbound_slug":"basicswap","twitter":"https://x.com/BasicSwapDEX","telegram":"https://t.me/basicswapdex","matrix":"https://matrix.to/#/basicswap:matrix.org"},"highlight_tags":["P2P","ATOMIC-SWAP","XMR{
"also_listed_at": {
"web3privacy": true
}
}