Ledger público de cada cambio del directorio — para que cualquiera pueda verificar que el cortafuegos editorial se sostiene.
La lista es el producto; esta es la factura de cómo cambia.
xmr.club
{
"window": "7d",
"ends_at": "2026-10-05T23:58:32Z",
"emailed": true,
"recipient": "Support@SageSwap.io"
}{"provider":{"id":"shadowswap","category":"exchanges","subcategory":"Instant Swaps","name":"ShadowSwap","tagline":"No-KYC/no-AML instant swap (BTC, ETH, USDT, BNB, WBTC, XMR) with floating or fixed rates, a Tor mirror, and PGP-signed support. Clean-pool payouts and 24h log deletion are claimed. Grade C is a tenure floor: the domain is ~3 weeks old with no track record and no reputable peer-directory listing yet.","review":"**Brand-new RU-market no-KYC swap — clean shape, zero track record.** ShadowSwap exchanges BTC, ETH, USDT, BNB, WBTC and XMR with no account and no AML checks, offering both floating and fixed rates. It gets the privacy fundamentals right on paper: a published PGP fingerprint (`6E81 4027 DF18 5878 7E39 C0BD B7FD 3B9C 998D A746`) for signed support, a working Tor mirror, and claims that the send and receive legs are unlinked with logs deleted 24 hours after an exchange.\n\nWhat it doesn't have is history. The domain was registered in September 2026 — about three weeks{
"status": "rejected"
}{
"status": "approved"
}{
"reply": "set (52 chars)"
}B- to B. Re-verified after operator flagged grade publicly: Neir now publishes an Ed25519 PGP key+fingerprint (A1E7 25BF…DFAC) and its warrant canary is dated (2026-09-01, monthly renew cadence) — the two accountability gaps that had held it at B-. Corrected stale rationale (no-PGP / blank-undated-canary) across EN/ES/RU/ZH; fixed mis-titled Grade-C section. Remaining gap to A: tenure + independent audit + named legal entity. Inline canary signature not visibly rendered (date-attested, not signature-verified).
{
"status": "approved"
}{
"parsed_rows": 23,
"updated_providers": 7
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 25,
"updated_providers": 8
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 23,
"updated_providers": 6
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"also_listed_at": {
"kycnot": true
}
}{
"parsed_rows": 23,
"updated_providers": 6
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"status": "approved"
}{
"parsed_rows": 24,
"updated_providers": 7
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}Correction ticket #7752693291: added onion to links (Tor button now renders; PGP parity on record fp 947028CC…9BE1D7DE); added NULL_ROUTE/cetoc.org to peer-dirs (verified via listings.json); removed stale "not on any peer directory" line contradicting the review body; refreshed age ~6→~7wk across EN/es/ru/zh. Grade unchanged (C, tenure floor); Monerica claim unconfirmed (not on /exchanges/instant-swaps), swaprate unverifiable (JS-gated).
{
"parsed_rows": 23,
"updated_providers": 6
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 23,
"updated_providers": 6
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 23,
"updated_providers": 6
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}Delisted: service pivoted from a no-KYC swap to a tweet-roundup news site; no longer an exchange. Reported via submission #120, verified via live render 2026-09-27.
Listed at Grade C (tenure floor). New RU-market no-KYC instant swap, domain reg 2026-09-07 (~3 weeks), PGP + Tor mirror, no reputable peer-dir presence, not test-swapped. Submission #122.
{
"parsed_rows": 23,
"updated_providers": 6
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 23,
"updated_providers": 6
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 23,
"updated_providers": 6
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 23,
"updated_providers": 6
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 23,
"updated_providers": 6
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 25,
"updated_providers": 8
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 25,
"updated_providers": 8
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 25,
"updated_providers": 8
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 25,
"updated_providers": 8
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 25,
"updated_providers": 8
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 25,
"updated_providers": 8
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 25,
"updated_providers": 8
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 25,
"updated_providers": 8
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 25,
"updated_providers": 8
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 25,
"updated_providers": 8
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 25,
"updated_providers": 8
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"name": "Swapter",
"category": "exchanges"
}{
"subject": "Re: Correction request for Cambio listing"
}Operator accuracy correction (founder John, email 2026-09-24, verified via cambio.one/about): Cambio now runs its OWN non-custodial swap execution, not just aggregating ChangeNow/SimpleSwap/FixedFloat (still compares alt routes when useful). Rewrote what-it-is + fixed the stale doesnt-settle-itself/partner-custodies line + subcategory Aggregators->Instant Swaps, 4-locale. Grade C UNCHANGED (operator asked for accuracy only, not a re-grade).
Corrected the onion address (operator, 2026-09-24): the X-screenshot value was truncated; full v3 onion is aefvno77q6d5v6sbzjgqnpfzxvxfu64tub6txr4cohwmqu4vpzyoayad.onion (56 chars, valid). JS-app so not curl-renderable. Held unchanged.
Rejected coordinated RU review burst (#116 67-tax 5star / #117 baltex 2star / #118 bitania 1star): 27-min window 2026-09-23, 3 unrelated exchanges, templated machine-translated swap-experience bodies, varied ratings for cover, 3 throwaway names/IPs, none verified-order. Injection pattern (moderation-probe or camouflaged targeting of bitania/baltex).
Operator-flagged corrections (2026-09-24, @sullycodesstuff public reply): (1) disambiguated held-visibility phrasing (direct-URL = OUR unranked placement, not wxmr access model); (2) added accurate access model — permissionless Solana contract + open-source self-hostable UI (verified) + operator-provided Tor onion (unconfirmed-live). Status stays HELD; custodial + privacy-defeat reasons + bridge-not-hold takeaway unchanged.
{
"also_listed_at": {
"kycnot": true,
"monerica": true
}
}{
"also_listed_at": {
"kycnot": true,
"monerica": true
}
}Weekly incident-scan 2026-09-23: no new loss/development on the May GG20/TSS exploit (incident already documented + resolved 2026-06-23; last timeline entry 2026-08-28 v3.20). Grade A unchanged, last_verified refreshed.
{"provider":{"id":"moneroswap","category":"exchanges","subcategory":"Instant Swaps","name":"MoneroSwap","tagline":"Non-custodial, no-account Monero swaps — funds route straight to the settlement address and the site never holds them. No KYC, no logs, open-source frontend, works over Tor with JS off, auto-registered refund address. Grade C is a tenure floor: brand-new (~3 months), not a knock on the product.","review":"**Non-custodial, no-account way in and out of Monero.** MoneroSwap swaps BTC/ETH/USDT/USDC ⇄ XMR (plus a new ZEC→XMR route) without an account, email, or KYC. It's genuinely non-custodial by design: **your funds go straight to the deposit address that settles the swap — the site never parks them in a balance it controls**, so there's nothing to freeze or seize. The frontend is open source, it works over **Tor with JavaScript off**, min is ~$25, and swaps usually finish in 15–20 minutes. You supply a **refund address** (optional but auto-registered) so a swap that can't co+30d incident follow-up (2026-09-22): F HELD. No retraction basis — OrangeFren still delisted, Monerica still SCAM-tagged, kycnot warning stands; NO operator statement, NO verifiable refund, no new independent report, no new on-chain evidence. Original $30k non-delivery + fake-partner-logos findings unchanged. Cadence stays +30d.
Added practical held-page note (2026-09-22): use-as-bridge-dont-hold-the-IOU. Revenue-vs-float asymmetry (~2500 XMR float, ~3 XMR/mo fee revenue), PoR is a snapshot, open-source/reserves credited. Operator (@12g8ge) publicly agreed it is an exposure bridge, not a native replacement. Status stays HELD (custodial + privacy-defeating on Solana); no grade.
Re-checked held status 2026-09-21: still a custodial wrapped-XMR bridge on Solana (~2,515 XMR circulating), still defeats Monero privacy at the destination (transparent SPL token). Held reasons are architectural/unchanged; HELD status kept, not graded/ranked.
Operator-flagged accuracy fix (2026-09-21): Bitania retired its P2P escrow marketplace and pivoted to a single instant NON-CUSTODIAL swap (all subdomains serve it; No AML, refund-on-fail). Rewrote review + tagline, moved subcategory P2P -> Instant Swaps. Grade B HELD (non-custodial, Panama legal surface, established; external-liquidity delivery caveat keeps B not A). 4-locale.
Restored B- -> B (2026-09-21): operator clarified publicly the ToS OFAC/sanctions + disclosure language is legal boilerplate, NOT an operational change — still no identity docs, no KYC holds, no new screening/data-sharing. Credible (boilerplate + non-custodial). Grade behaviour not boilerplate; on watch, re-cut if ever exercised. Review documents both change + clarification, 4-locale.
{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 26,
"updated_providers": 9
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 26,
"updated_providers": 9
}{
"count": 13,
"provider_ids": [
"cypher-esim",
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"field": "privacy",
"summary": "Privacy page now contains a real policy (prev was just the landing/homepage): new disclosures on non-collection of IP/KYC, order records, Telegram user ID, payment processor, eSIM provisioning partner",
"url_source": "discovered_footer"
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 12,
"provider_ids": [
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 12,
"provider_ids": [
"eagleswap",
"0trace",
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"field": "privacy",
"summary": "Privacy policy updated (18 Sep 2026): now explicitly collects and processes IP addresses and Telegram IDs (added to section 1 data categories). Rest otherwise unchanged.",
"url_source": "discovered_footer"
}{
"field": "tos",
"summary": "Curr footer drops the \"never freeze your funds\" commitment, now reading only \"will never ask for KYC and never keep logs\" — a change in the freeze/seizure posture. Rest of visible ToS text unchanged.",
"url_source": "curated"
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 10,
"provider_ids": [
"neir",
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"openrouter",
"ollama"
]
}{
"field": "privacy",
"summary": "Privacy Policy rewritten (updated 18 Sep 2026): adds backups (encrypted/offsite R2, deleted data persists), anonymous analytics/referral tallies, Telegram on-call alerts, attachment encryption to PGP ",
"url_source": "discovered_footer"
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 10,
"provider_ids": [
"privatemode",
"venice-ai",
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"field": "fees_page",
"summary": "Fee schedule changed: new model tier GLM-5.3-Flash added at €0.77 in / €3.87 out / €0.08 cached per 1M tokens, listed in both price table and model comparison. Existing prices unchanged.",
"url_source": "discovered_conventional"
}{
"field": "fees_page",
"summary": "Fee schedule changed: \"API Pricing\" blurb replaced with \"API Plans\" introducing pay-as-you-go model rates and Pro Plus $75 / Max $225 monthly API spend with banking; plan tiers/credit amounts otherwis",
"url_source": "discovered_conventional"
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 26,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}Grade B -> B- (policy shift verified 2026-09-20): ToS added OFAC/sanctions + prohibited-jurisdictions + refusal/enforcement rights; privacy added §7 case-by-case disclosure to authorities/partners. Eroded no-share posture for a no-KYC aggregator; B- not lower (non-custodial, limited data). Review note added 4-locale.
Privacy policy expanded (verified 2026-09-20): added browser fingerprinting (device/server IDs) + header/IP collection + retention change. Privacy regression but in-character for a compliance-heavy fiat gateway already at B; grade HELD at B, note added 4-locale.
Policy update (verified 2026-09-20): privacy now discloses plaintext-at-rest support tickets (not OpenPGP); ToS added age requirement + Pro subscription (Heleket prepaid, non-refundable). Honest disclosure; grade HELD B-, note added 4-locale.
Policy update (verified 2026-09-20): privacy added an Exchange-providers disclosure of aggregator data flow (sends corridor+amount downstream; provider gets destination+deposit addresses). Transparency improvement, not a new leak; grade HELD C, note added 4-locale.
{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 27,
"updated_providers": 9
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}Added measured liquidity caveat (public /api/markets 2026-09-19): 55/67 pairs zero 24h volume, whole-exchange turnover <~3k USD/day, XMR/USDT ~435 USD — near-empty order book. Grade C held (consistent with new low-usage exchange, per user call), framed honestly for readers.
Corrected misleading tenure: domain reg 2017 but current tested/ranked directory is a 2026 relaunch (Wayback: only a thin affiliate link-list since ~2019; RDAP last-changed 2026-08-31). Removed mature-domain credit + set operating_since 2026. Grade C unchanged.
Noted the new /proof-of-reserves page (2026-09-18) accurately as SELF-REPORTED — team-reported balances, no on-chain addresses / no Merkle liabilities / no third-party audit, not verifiable PoR. Refined the path-to-B condition (a) to require a VERIFIABLE PoR. Grade C unchanged.
+14d frozen-funds monitor: STILL single-source, and context clarified — the Trustpilot frozen-deposit complaint is from a launderer (bought XMR with fraud proceeds, sought a Romanian KYC doc to unlock); BitcoinVN froze it working WITH law enforcement to return funds to the victim. Freeze = AML-directed at illicit funds (already reflected in kycnot Automated Swap Holds tag), not legit-user misbehavior. No 2nd independent report, no on-chain evidence. Grade B held; cadence stays +14d.
{
"subject": "xmr.club - wagering category sponsor slot + payment"
}C -> B- after operator correction (#108): verified published Absolute Zero-Logs policy (/en/policy) + Finland/EU servers with no Russian legal entity, rebutting the initial jurisdiction inference (drawn from RU-language UI). B- held by OpenVPN-only + operator-stated jurisdiction + modest tenure.
{
"also_listed_at": {
"monerica": true
}
}{
"status": "approved"
}Grade A→D + critical incident: July 2026 Coldcard firmware seed-entropy exploit (~1,816 BTC/~$116M, remote key derivation via 2021 PRNG bug). Core-security failure; D not F given Coinkite responsible response. Prior verification predated the exploit.
{
"parsed_rows": 23,
"updated_providers": 8
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 23,
"updated_providers": 8
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 22,
"updated_providers": 8
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"parsed_rows": 23,
"updated_providers": 8
}{
"count": 8,
"provider_ids": [
"cambio",
"bitcoinvn",
"cyphergoat",
"cyphergoat",
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"field": "privacy",
"summary": "Privacy Policy adds a new \"Exchange providers\" disclosure (aggregator sends corridor/amount, provider receives destination and deposit addresses); other sections appear unchanged.",
"url_source": "discovered_footer"
}{
"field": "privacy",
"summary": "Privacy Policy significantly expanded: new browser fingerprinting (device/server identifiers), detailed collection of headers/IP, retention rules for guest orders (no auto-deletion, canceled orders de",
"url_source": "discovered_footer"
}{
"field": "tos",
"summary": "ToS fully rewritten: new prohibited-jurisdictions list, sanctions/OFAC restrictions, prohibited uses, enforcement/refusal rights, law-enforcement cooperation, geographic restrictions, new obligations ",
"url_source": "discovered_footer"
}{
"field": "privacy",
"summary": "Privacy Policy substantively rewritten: new §7 on disclosure to authorities/partners with case-by-case sharing, retention wording changed (data retained 14 days then anonymized), added compliance cont",
"url_source": "discovered_footer"
}{
"parsed_rows": 23,
"updated_providers": 8
}{
"count": 4,
"provider_ids": [
"neir",
"neir",
"openrouter",
"ollama"
]
}{
"field": "tos",
"summary": "Major ToS revision: added age requirement (16+/digital-consent 13+), Pro subscription terms (prepaid crypto via Heleket, non-refundable, reverts to Free quota), disclaimer/liability limits, Swedish go",
"url_source": "discovered_footer"
}{
"field": "privacy",
"summary": "Privacy policy expanded: added disclosure that dashboard support tickets are stored as plain readable text (not OpenPGP-at-rest), first-party promotional placements, and ticket-handling details in pro",
"url_source": "discovered_footer"
}{
"parsed_rows": 22,
"updated_providers": 8
}{
"count": 2,
"provider_ids": [
"openrouter",
"ollama"
]
}{
"field": "fees_page",
"summary": "New 'Business' plan tier added to fee schedule: 8% platform fee, EU/US in-region routing, workspace limits, DPA, no rate limits on paid models, new FAQ on Business fees; headline and nav also updated.",
"url_source": "discovered_conventional"
}{
"field": "fees_page",
"summary": "Fee schedule expanded: new model 'deepseek-v4.1-flash' added ($0.15/$0.003/$0.60 per 1M, peak $0.30/$0.006/$1.20), and FAQ reworded from 'add extra credits' to 'buy usage credits' (credit-purchase mod",
"url_source": "discovered_conventional"
}{
"parsed_rows": 23,
"updated_providers": 8
}{
"parsed_rows": 23,
"updated_providers": 8
}{
"parsed_rows": 23,
"updated_providers": 8
}{
"parsed_rows": 23,
"updated_providers": 8
}{
"parsed_rows": 23,
"updated_providers": 8
}{
"parsed_rows": 20,
"updated_providers": 5
}{
"parsed_rows": 20,
"updated_providers": 5
}{
"parsed_rows": 20,
"updated_providers": 5
}{
"parsed_rows": 20,
"updated_providers": 5
}{
"parsed_rows": 20,
"updated_providers": 5
}{
"parsed_rows": 20,
"updated_providers": 5
}{
"parsed_rows": 23,
"updated_providers": 8
}{
"parsed_rows": 23,
"updated_providers": 8
}{
"parsed_rows": 23,
"updated_providers": 8
}{
"parsed_rows": 23,
"updated_providers": 8
}{
"parsed_rows": 23,
"updated_providers": 8
}{
"parsed_rows": 23,
"updated_providers": 8
}{
"also_listed_at": {
"monerica": true
}
}{
"also_listed_at": {
"kycnot": true
}
}buyukesim 5★ generic self-praise, unverified — suspected operator self-review; rejected pending real customer signal
{"provider":{"id":"ephemere-chat","category":"email","subcategory":"Encrypted Messaging","name":"Ephemere Chat","tagline":"Non-federated, Hardened-Tor E2E messaging (Matrix-based) built for ephemeral use — automatic 12h message redaction, ~48h metadata purge, disabled backups, and a live user-verifiable redaction panel. No-KYC, pay in XMR. New.","review":"**Ephemeral, non-federated encrypted messaging for high-discretion use.** Ephemere is an E2E-encrypted chat service on a **hardened, non-federated Matrix server** (Tor onion + clearweb options). \"Non-federated\" is the key design choice: unlike most Matrix homeservers — which sync data across the federation per each server's retention rules — Ephemere keeps everything on its own server, so your messages and social graph never leave it. It's built for people who need communication *without* a persistent record: activists, sources, high-risk groups.\n\n**The ephemerality is enforced, and shown live.** Messages are auto-**redacted at 12{"provider":{"id":"dexsport","category":"wagering","subcategory":"casinos","name":"Dexsport","tagline":"Web3 crypto sportsbook + casino since 2021, No-KYC, accepts XMR (+38 coins). Read first: documented cancelled-winnings / account-freeze / withdrawal complaints + casino.guru Safety Index 4.4 (Low). Provably-fair contracts ≠ guaranteed payout.","review":"**Read this first — documented withdrawal complaints.** Dexsport is a real, long-running crypto casino + sportsbook, but its reputation is polarized in the way that matters most for a gambling site: alongside praise for fast payouts, there's a documented pattern of **cancelled winnings, account freezes, and withdrawal errors after betting**. Casino-review authority casino.guru gives it a **Low Safety Index of 4.4**. Treat any balance you can't afford to lose as genuinely at risk of being frozen or clawed back — that risk, not game fairness, is why this sits at C.\n\n**What it is.** A web3 crypto sportsbook + casino operating since 202{
"also_listed_at": {
"monerica": true
}
}Stale 2026-07-07 critical incident CLOSED. Recovered same day + ~2mo clean; verified via public API (9366 completed/40 failed, XMR bridge enabled, 100% rate-integrity/30d). Operator correction #5263979311; grade unchanged A-.
{
"subject": "You're now listed on xmr.club — Ephemere Chat"
}{
"subject": "You're now listed on xmr.club — Ephemere Chat"
}{
"also_listed_at": {
"monerica": true,
"kycnot": true
}
}{
"also_listed_at": {
"kycnot": true,
"monerica": true
}
}{
"also_listed_at": {
"monerica": true
}
}Incident updated: third reported victim added (79.55 ETH, order B29A7FF4). Corroborating evidence held privately at the reporter's request.
{
"subject": "Your xmr.club submission — what we need before listing Ephemere Chat"
}{
"subject": "Re: your El Capo report — can you send the Letter of Guarantee?"
}Restored to B on re-review — silent Nevis->Costa Rica move (2026-06-14) was opacity-softening, not harm; ~3mo clean, no new flags, peers re-listing. Per bitcoinvn precedent. Downgrade archived to resolved_downgrades.
Restored to A on re-review — silent Nevis->Costa Rica move (2026-06-14) was opacity-softening, not harm; ~3mo clean, no new flags, peers re-listing. Per bitcoinvn precedent. Downgrade archived to resolved_downgrades.