Glosario · xmr.club

Grados

Grado A: Mejor nivel de evidencia. Probado de punta a punta por el curador de xmr.club. Postura sin KYC verificada a volumen minorista.
Grado A-: B-shape positive signal at A grade — solid posture and likely A, but one element of the A bar (typically operating tenure or a fresh test-trade) is not yet on file.
Grado B: Elección sólida. Verificado y funcional pero con un caveat real.
Grado B-: B-shape signal but tenure has not yet validated the publishable claims under stress. Used for high-loss-asymmetric categories (exchanges, casinos, custodial mixers) where the operator surface looks B-grade but the service has been operating < 12 months. Drops to C if tenure does not accumulate; promotes to B once it does.
Grado C: Aceptable con reservas. La postura se mantiene pero la evidencia es más vieja o más ligera.
Grado C-: C-shape but with notable concerns — listed for completeness or comparison, but readers should consider stronger alternatives where available.
Grado D: Listado por completitud o como advertencia.

Postura KYC

no kyc no_kyc: El proveedor no exige verificación con documento de identidad en ningún momento.
anonymous signup anonymous_signup: No requiere crear cuenta, o la cuenta es sólo email / sin datos personales.
light kyc light_kyc: El alta solicita algo de información personal pero no documento de identidad.
heavy kyc heavy_kyc: KYC completo: documento de identidad, a veces selfie + comprobante de domicilio.

Etiquetas de feature

xmr native xmr_native: El proveedor liquida nativamente en Monero, no vía bridge o token envuelto.
tor mirror tor_mirror: El proveedor publica un espejo .onion funcional (cross-check diario contra el header Onion-Location).
no js supported no_js_supported: Functional UI without JavaScript enabled. Tested with Tor Browser at Safest level. Critical for hardened threat models.
open source open_source: Código fuente publicado bajo licencia aprobada por OSI.
cash accepted cash_accepted: Cash is an accepted payment / payout method, in-person or by mail. Common for P2P trading, prepaid cards, and select OTC desks.
lightning native lightning_native: Soporte nativo de Bitcoin Lightning Network.
audited audited: El proveedor ha publicado una auditoría de seguridad de terceros.
non custodial non_custodial: Provider never holds user funds — escrow, multisig, or atomic-swap-based settlement.
self hosted self_hosted: Can be installed and operated on infrastructure the user controls. Eliminates trust in the listed operator at the cost of operational complexity.
i2p mirror i2p_mirror: Provider publishes a working .b32.i2p mirror — the I2P-native counterpart to .onion. Common in the Monero remote-node ecosystem.
atomic swap atomic_swap: Trustless cross-chain exchange via hash-time-locked contracts. No custodian holds either side mid-trade; the swap either completes atomically or refunds.
pgp supported pgp_supported: Provider lists a PGP key and accepts PGP-signed support requests / disclosures.
transparent fees transparent_fees: La cotización mostrada antes del depósito equivale a lo que recibe el usuario (menos las tarifas de red del destino, surfaceadas por separado). Sin spreads ocultos, sin ajustes post-depósito. Tarifas altas están bien siempre que se muestren upfront.
hidden fees hidden_fees: La cotización visible subestima lo que el proveedor realmente se queda. Patrones típicos: spread oculto en el rate, markup en la tarifa de retiro más allá del costo de red real, slippage del partner absorbido y no reembolsado. Falla transparent_fees; grado auto-limitado a C o menor.
no account no_account: No user account required. No registration step, no email, no phone, no Web2 PII at all.
no logs no_logs: Operator does not retain identifying logs against the swap — no IP retention, no user-agent fingerprinting, no behavioural analytics. Per published policy.
no pii no_pii: Operator does not collect or retain personally-identifying information (name, address, government ID, biometrics) at any stage of the flow.
custodial custodial: Provider holds user funds at some point during the flow (escrow, partner-routed CEX leg, intermediate balance). Use is contractually time-bounded but funds are temporarily under operator control.
closed source closed_source: Provider runs proprietary closed-source code; users cannot independently audit the backend logic.
web3 signin web3_signin: Account / session is bound to a Web3 wallet signature (MetaMask, Phantom etc.). Pseudonymous: avoids Web2 PII but exposes a persistent public address as identifier.
country blocks country_blocks: Provider enforces hardcoded country blocks (typically a sanctions list — BY/CU/IR/RU/SY etc.). Anti-aligns with the strict "no-KYC regardless of jurisdiction" posture.
cli supported cli_supported: Provider ships or supports a command-line / API client for headless use, beyond just a web UI.
aggregator aggregator: Aggregator: routes user orders through multiple upstream providers and surfaces the best quote — not a primary execution venue itself.