# Haveno, RetoSwap, and XMRBazaar: graded LocalMonero replacements (2026) > Compare Haveno networks (incl. RetoSwap), XMRBazaar, and related P2P options with xmr.club grades, escrow models, and post-exploit caveats. Markdown twin of https://xmr.club/guides/haveno-retoswap-xmrbazaar-localmonero-replacements. CC-BY-4.0. Attribute "xmr.club". ## At a glance - Canonical: https://xmr.club/guides/haveno-retoswap-xmrbazaar-localmonero-replacements - Slug: haveno-retoswap-xmrbazaar-localmonero-replacements - Title: Haveno, RetoSwap, and XMRBazaar: graded LocalMonero replacements (2026) - Description: Compare Haveno networks (incl. RetoSwap), XMRBazaar, and related P2P options with xmr.club grades, escrow models, and post-exploit caveats. - Published: 2026-09-09 - Last reviewed: 2026-09-09 ## Intro When LocalMonero and AgoraDesk shut down in 2024, they left a vacuum in the fiat-to-Monero economy. In 2026, no single clone replaced them. Instead, traders split between decentralized 2-of-3 multisig DEXes and web classifieds. Here is how they stack up under xmr.club's independent audit rubric. ## Body ## What LocalMonero actually did (and why clones fail) For seven years, LocalMonero (and its sister platform AgoraDesk) performed a specific, critical job in the privacy economy: it paired peer-to-peer fiat payment rails (SEPA, cash by mail, national bank wires, in-person cash) with centralized web custodial escrow and a persistent web reputation system. When the platform voluntarily wound down operations in May 2024 to avoid escalating regulatory chokeholds, newcomers expected an identical drop-in website to take its place. That did not happen, and for good structural reasons. A centralized web service that holds customer cryptocurrency in hosted custodial wallets while facilitating fiat trades is a prime target for FinCEN registration demands, European MiCA enforcement, and law enforcement subpoenas. Any web service operating a centralized escrow ledger in 2026 will eventually face a binary choice: enforce mandatory passport KYC on all participants, or face seizure. As a consequence, the post-LocalMonero P2P ecosystem split into two fundamentally divergent architectures: 1. **Decentralized desktop DEX networks:** Built on the open-source Haveno codebase (a fork of Bisq redesigned from the ground up for Monero). They eliminate centralized servers, run entirely over Tor hidden services, and hold funds in on-chain 2-of-3 multisig escrow contracts. 2. **Web-based classified boards:** Services like XMRBazaar that operate as notice boards where buyers and sellers post advertisements. Platform operators do not hold custodial deposits by default, shifting counterparty risk entirely to the traders or optional multi-signature arrangements. Understanding this architectural divide is essential before wiring fiat or mailing physical envelopes of cash. --- ## Three replacement models compared To navigate the fiat-to-XMR market today, you must separate **protocol architecture** from **operator reputation**. ``` [ Fiat ↔ Monero P2P Rails ] | --------------------------------------------- | | [ Haveno-Family DEX ] [ Web Classifieds ] • RetoSwap / Haveno instances • XMRBazaar / Notice boards • Desktop app over Tor • Standard web browser • Mandatory 2-of-3 multisig escrow • Zero platform fees • Required security deposits • Optional escrow / Counterparty risk • Cryptographic arbitration • Direct peer-to-peer contact ``` ### 1. The Haveno ecosystem (RetoSwap and independent operators) The first critical distinction to grasp: **Haveno is an open-source software project, not a single operating exchange.** The upstream Haveno core developers write the protocol, build the desktop client, and release source code. They do not operate a centralized exchange, they do not collect trading fees, and they are emphatically **not affiliated with the official Monero Project**. Trading actually takes place on independent **network instances**. Each network instance deploys its own seed nodes, maintains its own order book over Tor, and designates a pool of trusted human arbitrators who hold the third key in 2-of-3 multisig escrow contracts. - **[RetoSwap](/exchanges/retoswap) (Haveno-Reto):** The most established and widely used Haveno instance. Specializes in fiat↔XMR pairs across Europe, North America, and international corridors. Operates active arbitration desks and maintains high order-book density for SEPA, Revolut, Wise, and cash-by-mail. Graded **A** on xmr.club. - **[Haveno](/exchanges/haveno) (Mainnet & community instances):** Alternative network deployments sharing the same core codebase. Users connect by pointing their Haveno desktop client to the operator's specific onion seed nodes. #### How Haveno escrow works: 1. Both the buyer and seller lock a security deposit (typically 15% to 30% of the trade value) plus the trade amount into an on-chain 2-of-3 Monero multisig wallet. 2. The buyer sends fiat via the agreed off-chain payment method (e.g. SEPA bank transfer or physical cash). 3. The seller verifies receipt of the fiat and cryptographically signs the multisig transaction to release the XMR and both security deposits to the buyer. 4. If a dispute arises (e.g. the buyer claims payment was sent but the seller denies receipt), an arbitrator is summoned. The arbitrator reviews off-chain payment receipts and signs with either party to release the funds. ### 2. XMRBazaar: The zero-fee classifieds model XMRBazaar approaches the problem from the opposite direction: minimizing technical friction. Rather than forcing users to download a Java-based desktop client, configure local Monero nodes, and lock up expensive security deposits, XMRBazaar operates as a lightweight web directory. Traders post advertisements to buy or sell Monero using cash, gift cards, mail, or bank transfers. - **The advantage:** Instant accessibility from any browser (including mobile devices), zero protocol download overhead, and typically zero platform fees. - **The danger:** Counterparty risk. Unless both parties agree to use a trusted third-party escrow agent, transactions are executed on an honor system. A malicious seller can receive your cash and vanish without recourse. - **Curator recommendation:** XMRBazaar is viable for small, community-vetted trades or face-to-face meetups in public areas, but should never be used for high-value remote transactions without cryptographic escrow. ### 3. Bisq (Classic): The fiat-to-BTC bridge route While [Bisq](/exchanges/bisq) primarily trades Bitcoin, it remains the deepest, most resilient decentralized P2P fiat market in existence. For traders in jurisdictions where Haveno liquidity is thin, the optimal privacy path is often a two-step maneuver: 1. Buy Bitcoin on Bisq using cash, SEPA, or domestic bank transfer (2-of-2 multisig escrow, no KYC). 2. Swap the newly acquired Bitcoin into native Monero via an instant aggregator like [Trocador](/exchanges/trocador) or [kyc.rip](/exchanges/kyc-rip-aggregator), or via a trustless atomic swap. --- ## Graded comparison matrix (Live directory data) All entries are audited against our public [methodology](/methodology). | Platform / Network | Category & Grade | Escrow Architecture | Required Deposit | Tor Native? | Supported Payment Rails | Primary Trade-off | | :--- | :--- | :--- | :--- | :--- | :--- | :--- | | **[RetoSwap](/exchanges/retoswap)** | Exchanges · **Grade A** | 2-of-3 On-Chain Multisig | Yes (~15-30%) | **Yes (100% Tor)** | SEPA, Revolut, Cash-by-Mail, Domestic Wire | Desktop app friction; requires initial XMR for security deposit | | **[Haveno](/exchanges/haveno)** | Exchanges · **Grade A** | 2-of-3 On-Chain Multisig | Yes (~15-30%) | **Yes (100% Tor)** | Global fiat, Cash, Altcoins | Liquidity varies by independent operator instance | | **[Bisq (classic)](/exchanges/bisq)** | Exchanges · **Grade A** | 2-of-2 Multisig + Timelock | Yes (BTC deposit) | **Yes (100% Tor)** | SEPA, National Bank, F2F Cash, US Zelle | Trades BTC, not native XMR (requires secondary swap hop) | | **XMRBazaar** | Classifieds · **Ungraded** | None / Optional External | No | Web / Onion optional | Cash by mail, F2F, P2P Apps | High counterparty risk; no automated dispute enforcement | --- ## Incident literacy for P2P traders: The 2026 exploits Trusting a decentralized protocol does not mean assuming code is flawless. In mid-2026, the Monero P2P ecosystem experienced its first major trial by fire. ### The May 2026 Haveno protocol exploit On May 20, 2026, security researchers and network operators detected an active vulnerability across Haveno network instances: - **The flaw:** A flaw in trade message validation permitted an attacker to inject forged arbitrator acknowledgement messages (`fake-arbitrator-ACK`), allowing active trade offers to be drained without legitimate arbitrator signatures. - **The loss:** Approximately 7,000 XMR (~$2.7M) was drained from open, active offers across various operators before the exploit was contained. - **The response:** Lead developer `woodser` and the Haveno operator coalition immediately broadcasted emergency advisories. Operators (including RetoSwap) acted decisively: they blocked malicious onion peers, deployed hotfix client releases, and instituted a mandatory minimum-client-version gate. ### Protocol bugs vs. exit scams It is crucial for privacy traders to distinguish between a **protocol software vulnerability** and an **operator exit scam**: - In a centralized exchange collapse (e.g. FTX or historical darknet exit scams), operators intentionally steal customer deposits and disappear. - In the Haveno incident, the independent operators' infrastructure was not breached, no private keys were leaked, and the development community published open post-mortems and patches within hours. Existing wallet balances held locally by users remained completely uncompromised. **The lesson:** Always verify PGP signatures on desktop client downloads, and never ignore minimum-version upgrade notices from your operator. --- ## OPSEC for Cash-by-Mail and Face-to-Face (F2F) Cash remains the gold standard for no-KYC fiat on-ramps. Bank transfers (even on decentralized DEXes) leave an unavoidable banking paper trail showing money moving between individuals. Cash by mail and face-to-face trades sever the banking surveillance nexus. When transacting via cash on RetoSwap or local classifieds, adhere strictly to these basic operational security rules: ### Cash-by-Mail rules 1. **Never send coins without active multisig escrow:** Never send cash through the mail based on a chat message promise. Only mail currency after the counterparty's Monero is verifiably locked in a 2-of-3 multisig contract. 2. **Concealment and physical packaging:** Use opaque security envelopes (carbon-lined or thick cardboard). Wrap fiat banknotes in foil or heavy printer paper so bills are invisible under intense light. Never write "Monero," "crypto," or the trader's username on the exterior. 3. **Tracking numbers:** Use prepaid tracking labels purchased with cash. Send the tracking code to the seller exclusively through the encrypted trade chat inside the desktop client. 4. **Return address tradecraft:** Do not use your real residential address as the sender. Use a valid, plausible local address or designated postal forwarding locker. ### Face-to-Face (F2F) rules 1. **Neutral public venues only:** Meet exclusively in busy, well-lit commercial spaces with public Wi-Fi (busy cafes, hotel lobbies, transit hubs). Never meet in private residences, secluded parking lots, or inside vehicles. 2. **Bring your own connectivity:** Never rely on the counterparty's mobile hotspot. Use your own secondary phone or laptop running over a trusted mobile data connection or VPN. 3. **Wait for full confirmations:** Never hand over physical cash until the Monero transaction appears in your wallet with at least 10 on-chain confirmations (~20 minutes). If the seller refuses to wait for confirmation, abort the trade. --- ## Decision framework: Which path matches your threat model? ``` [ Your Fiat Capital ] | Are you willing to install a desktop app and hold initial XMR for a security deposit? / \ YES NO / \ Do you need native XMR Are you meeting in person or is BTC acceptable? or mailing cash? / \ / \ Native XMR BTC In-Person Remote Mail / \ / \ RetoSwap / Bisq XMRBazaar Do NOT proceed Haveno Instance Classic (Public only) without Escrow ``` 1. **For maximum privacy and routine trades:** Download [RetoSwap](/exchanges/retoswap). Complete trades via SEPA or cash-by-mail using native 2-of-3 multisig escrow. 2. **For large fiat amounts without initial XMR:** Use [Bisq](/exchanges/bisq) to convert bank fiat into Bitcoin, then execute an instant no-KYC swap into Monero via an aggregator such as [Trocador](/exchanges/trocador) or [kyc.rip](/exchanges/kyc-rip-aggregator). For large amounts, prefer an aggregator with a recourse/guarantee pool. 3. **For casual classified browsing:** Use XMRBazaar only for low-value trades or community bartering, and insist on escrow for any transaction you cannot afford to lose. --- ## Frequently Asked Questions ### Can I run Haveno or RetoSwap on my smartphone? No. Haveno and its current production forks are built on Java and designed exclusively as desktop software for Linux, macOS, and Windows. While experimental mobile wrappers and companion nodes are under active development, production trades requiring multisig arbitration must be conducted on a desktop computer. ### How do I get my first Monero if Haveno requires a security deposit? Haveno requires both buyer and seller to lock up an on-chain security deposit in Monero to disincentivize fraud. If you have zero Monero, you face a "chicken-and-egg" dilemma. Solutions: - Use a small instant swap on an aggregator such as [Trocador](/exchanges/trocador) or [kyc.rip](/exchanges/kyc-rip-aggregator) to buy just enough XMR to fund your deposit. - Use Bisq Easy (which does not require cryptocurrency deposits for initial small trades). - Engage a trusted peer on community forums to execute an initial micro-trade. ### Is Haveno illegal to use? Haveno is free, open-source peer-to-peer software. In most democratic jurisdictions, writing, publishing, or running peer-to-peer open-source software is constitutionally protected speech. However, domestic tax reporting laws and regulations governing commercial money transmission vary by country. Users are personally responsible for understanding the legal landscape of their home jurisdiction. ### What happens if an arbitrator goes rogue? Haveno uses 2-of-3 multisig contracts. The arbitrator holds only one of the three keys and can never move funds unilaterally. An arbitrator cannot steal your deposit without the cooperative cryptographic signature of either the buyer or the seller. ## Picks - [Haveno](https://xmr.club/exchanges/haveno) — Grade A decentralized P2P Monero protocol. On-chain 2-of-3 multisig escrow over Tor with zero centralized custody. - [RetoSwap](https://xmr.club/exchanges/retoswap) — Grade A independent Haveno network instance specialized in fiat↔XMR (SEPA, Cash-by-mail, Revolut) with active arbitrator pools. - [Bisq (classic)](https://xmr.club/exchanges/bisq) — Grade A desktop P2P network. Deepest fiat liquidity for BTC, providing a clean first hop into trustless atomic swaps. ## How to cite Source: xmr.club, "Haveno, RetoSwap, and XMRBazaar: graded LocalMonero replacements (2026)". https://xmr.club/guides/haveno-retoswap-xmrbazaar-localmonero-replacements (CC-BY-4.0). ## Related - https://xmr.club/guides — full guides index (59 guides) - https://xmr.club/methodology — how the directory grades providers referenced in this guide - https://xmr.club/transparency — funding model + editorial firewall - https://xmr.club/data.json — full provider dataset (CC-BY-4.0) ## License CC-BY-4.0. Attribute "xmr.club".