kyc.rip / ghost

First-party. Single-flow product for the chain-analysis threat model: you send any supported asset, the system routes it through native Monero to break the deterministic on-chain link, then settles to the destination asset of your choice. Useful when you cannot rely on the source and destination chains both being XMR — e.g. rotating tainted USDT/USDC away from a flagged address, or paying onchain BTC from a stables balance without a direct exchange trail. No account, no email. Each hop runs against a different upstream engine where possible to limit any single operator's view of the full flow. Listed separately from the kyc.rip aggregator because the routing semantics are different — aggregator picks the best single-hop quote, ghost forces the XMR detour.

First-party firewall note: held at B (not A) — we grade our own fund-routing products conservatively. kyc.rip routing exposed real backend risk when a routed desk (El Capo) failed to deliver a large order and was downgraded to F (Sept 2026). An aggregator is only as safe as the desks it routes to. Grade lifts once the announced per-order PGP receipts + provider bonds ship.

Every Ghost order comes with a signed receipt from kyc.rip for the whole route, plus the payout swap's own letter of guarantee when it issues one, so you can prove the order existed even if a swap denies it.