Exolix

Exolix is the long-running no-KYC instant-swap aggregator with a fixed-rate guarantee that holds across small-to-mid trade sizes and a $4,000 OrangeFren user-recourse guarantee backing the operator's reliability. Listed at Grade A because the fixed-rate quote is one of the more consistently honoured in the no-KYC swap space — when the operator says "swap 1 BTC for X XMR," the X XMR is what arrives, even when the upstream market moves during the routing window.

Background. Exolix has been operating as an anonymous instant-swap aggregator since the late-2010s, predating most current-cohort competitors. Routes through upstream exchanges, non-custodial in the steady state, no signup required. Multi-language UI, API available for integrators, listed in multiple peer directories (KYCnot, Monerica, web3privacy, OrangeFren). Cross-referenced by OrangeFren's $4,000 guarantee pool — if Exolix mishandles a swap (goes rogue, freezes funds, fails to deliver), OrangeFren makes the user whole up to the posted amount. That's the third-party recourse signal that's hard to fake.

What you trust. Non-custodial routing in normal operation — wallet sends crypto in, operator routes through upstream exchanges, wallet receives swap output. Custody window: short routing-leg only, similar pattern to LetsExchange / Trocador / FixedFloat. What's distinctive: the OrangeFren guarantee ($4,000 backing) sits underneath every Exolix swap — if the operator breaks the implicit "complete the swap" contract, the user has external recourse. The guarantee isn't infinite, it isn't insurance against upstream-exchange screening, but it does change the trust math: a $200 swap on Exolix is effectively backed up to $4,000 of operator-misbehaviour exposure. AML screening: applied at the upstream exchange layer; Exolix's stated policy is no extra screening on the aggregator side beyond what the upstream applies.

Operational specs. Coin coverage: hundreds of major and mid-cap cryptocurrencies including XMR, BTC, BCH, ETH, USDT (multiple chains), USDC, LTC, plus a long tail of altcoins. Rate model: floating-rate (best available, not locked) + fixed-rate option (locked-in amount, small premium, guaranteed delivery quantity). Trade size range: small to mid (typically $20 to ~$50k; very large trades may hit upstream-liquidity constraints). API: published REST API used by partner integrations + this directory's swap aggregator. Confirmations: standard Monero confirmation count (~10 blocks) for XMR receives; faster on the BTC side using upstream-exchange conventions. Trustpilot: positive long-term rating across thousands of reviews.

Philosophy. Exolix's editorial differentiator is the fixed-rate-honoured-at-scale model. Many aggregators offer a fixed-rate option but quietly cancel-and-refund when the upstream market moves; Exolix's fixed-rate reputation in the community is that the quoted rate actually fills, even when the operator takes a small loss on the routing. Combined with the OrangeFren guarantee, the practical user experience is "quote → deposit → receive exactly the quoted amount" with high reliability. The trade-off: not the lowest spread in the category (you pay a small premium for fixed-rate certainty); not the most coin coverage (LetsExchange has more); not the most operationally transparent (Trocador shows the upstream).

Grade rationale. Grade A reflects: long-running operational continuity (5+ years); OrangeFren $4,000 user-recourse guarantee (external trust signal, hard to game); fixed-rate quote consistently honoured in community testing; cross-listed in KYCnot / Monerica / web3privacy / OrangeFren peer directories; published REST API; multi-language UI; absence of major refund-dispute or fund-freeze threads in community discussion. Last verified 2026-05-12.

Useful when. You want a fixed-rate swap where the quoted amount is the amount that lands (vs floating-rate uncertainty during the routing window). You're swapping retail amounts ($20-$50k) where Exolix's liquidity routing is comfortable. You want the OrangeFren guarantee backing the swap — useful for users who've been burned by aggregators that vanish or freeze mid-swap. You want a long-running aggregator with established community recognition (KYCnot, Monerica, web3privacy peer-listing concurrence). You're using this directory's aggregator UI — Exolix is one of the engines we route through.

Caveats. Custody during routing — short window, but it's not zero; treat as "trust the operator for the routing minutes, not long-term." Upstream AML applies regardless — Exolix doesn't add screening, but the upstream exchange filling the swap may apply its own; if your funds are flagged at the upstream layer, the swap may be refunded or held even though Exolix's policy is non-blocking. No Tor mirror operator-published — clearnet only at the time of this review; route through a Tor bridge yourself if you need .onion access. Very large trades may not fix-rate cleanly — the fixed-rate guarantee depends on upstream liquidity depth at the quote time; for >$50k trades, expect spread widening or fallback to floating-rate. OrangeFren guarantee is capped at $4,000 — if your trade is larger than that, the recourse is partial relative to the amount at risk. Useful for retail-scale users; less useful for institutional volumes. Closed-source routing engine — like most aggregators in the category; community recognition + OrangeFren guarantee substitute for code-level auditability.

Grade adjusted A → A- (2026-05-31). Per the RasterSec disclosure (May 28 2026, https://www.rastersec.com/blog/exolix-swapper-dump): partner-API JWT keys embedded in public Edge / Exodus / Monerujo / BTCPay / Temple Wallet / EGToken repos and Android APKs allowed full read access to all partner swap records — ~355k swaps / $39.5M / Jan 2025 → May 2026 of user transaction metadata (deposit + withdrawal addresses, both on-chain tx hashes, amounts, timestamps, user identifiers).

Swap product itself is unaffected — vulnerability was in partner-integration access control, now patched via Cloudflare WAF. We're flagging because (a) ~15 months of historical user swap records were exposed and likely fully archived by third parties — permanent on-chain trail damage that no patch can undo; (b) Exolix's initial framing of the issue as "a feature" rather than a vuln is a privacy-mindset concern that warrants a half-grade signal. New swaps via Exolix work as advertised; consider this when routing sensitive flows.