# EigenWallet

Category: wallets · Atomic Swap
Grade: B
KYC: anonymous_signup
Highlights: ATOMIC SWAP, GPL, TOR
Features: non_custodial, open_source, xmr_native, tor_mirror, atomic_swap, self_hosted
Fees: Per-swap maker spread (set by each market-maker) + on-chain BTC/XMR network fees. No platform commission — the protocol is permissionless and the eigenwallet team takes nothing per trade.
Web: https://eigenwallet.org
Last verified: 2026-05-27

## INCIDENT (2026-05-25, severity: high)
Maintainers advised market-makers in the eigenwallet-makers Matrix room to shut down their ASB (Atomic Swap Backend) immediately due to a vulnerability that may be actively exploited. As of 2026-05-27 no public CVE, post-mortem, or fixed release (latest is 4.6.5, 2026-05-26) has been published — operator advisory was Matrix-only.

Curator advice: Don't run an ASB / market-maker right now. Taker-side swaps may still be possible against makers who are online, but trade volume has dried up while operators wait for the patch. We'll update this entry the moment a fixed release ships or the maintainers publish a post-mortem. Track github.com/eigenwallet/core/releases and the Matrix room linked from eigenwallet.org.
Source: https://github.com/eigenwallet/core/releases

> Atomic-swap BTC ↔ XMR DEX wallet — non-custodial, GPL, Tor-aware. Fork of UnstoppableSwap / xmr-btc-swap.

## Review

**Battle-tested Monero ↔ Bitcoin atomic-swap DEX wallet** — non-custodial, GPL-3.0, Tor-aware, with a desktop GUI (Tauri) and a CLI/server pair for running your own market-making node. Formerly known as **UnstoppableSwap**, forked from the original `comit-network/xmr-btc-swap` reference implementation, eigenwallet has been live for ~3 years and ships under the `eigenwallet/core` repo. Listed at **Grade B** because the underlying atomic-swap protocol is the canonical no-third-party path between BTC and XMR — fully self-custodial, no operator on the data path, no account anywhere — but the operator surface is sparse (single-page landing on GitHub Pages with no separate /about, /privacy, or /terms page) and there is an **active maker-side vulnerability advisory as of 2026-05-25** (see incident banner above).

**What it is.** EigenWallet is a desktop wallet + atomic-swap DEX in one binary. You hold BTC and XMR keys locally; when you want to swap, the wallet pairs you peer-to-peer with a **market-maker** running an ASB (Atomic Swap Backend) over Tor, executes the trustless cross-chain protocol on-chain, and settles directly between your wallets. There is no order book on eigenwallet's servers, no custody intermediate, no KYC layer, and no recoverable counterparty risk — if the maker disappears mid-swap, the protocol's refund timelocks return your funds. **GUI** ships for Linux / macOS / Windows; mobile is on the roadmap. The CLI + ASB are how a maker provides liquidity and earns a spread on every fill.

**Background.** Forked in 2023 from `comit-network/xmr-btc-swap` (the original Bitcoin ↔ Monero atomic-swap reference written by Coblox / CoinSwap researchers) and shipped as **UnstoppableSwap** by an independent maintainer team. **Rebranded to eigenwallet in 2025** with an explicit founder statement; the rebrand kept the codebase, the Matrix room, and the maker community intact. ~118 releases shipped, 3,750+ commits, Rust + TypeScript stack. Funding came partly from **Monero Community Crowdfunding (CCS)** proposals for protocol-maturity work.

**What you trust.**

- **Self-custody.** Your seed never leaves your machine. The wallet uses standard `monero-wallet-rpc` and Bitcoin libraries; you can verify balances against your own monerod / Bitcoin Core if desired.
- **GPL-3.0 source.** Codebase at `github.com/eigenwallet/core` is fully auditable. Forkable under the GPL if the project ever stops being maintained.
- **No account at any stage.** Download binary → verify signatures → run. No eigenwallet account exists.
- **Tor-integrated.** Both the GUI and the ASB speak Tor natively; makers expose ASB onion services and takers connect via Tor by default. This is the only Bitcoin ↔ Monero direct swap path that's Tor-native end-to-end.
- **No platform commission.** Eigenwallet itself takes nothing per swap. The only spread is what each market-maker quotes; you can compare makers in-wallet and pick the tightest.
- **Signed releases.** Binaries published on GitHub Releases with maintainer signatures.

**Operational specs.**

- **Install.** Download from `eigenwallet.org/download` (Linux / macOS / Windows), verify the signature, run. Mobile is on the roadmap. Source build: `git clone github.com/eigenwallet/core && cargo build --release`.
- **Coin coverage.** Bitcoin ↔ Monero only. No other pairs supported — the protocol is BTC ↔ XMR-specific.
- **Maker side (ASB).** Separate CLI binary (`asb`) that takers connect to. Run on a VPS with Tor; takes funds from your BTC and XMR wallets, sets a spread, fills incoming requests. **Currently advised to shut down — see incident.**
- **SEPA on-ramp.** EU users can buy XMR via a SEPA fiat path linked from the landing page (EU only).
- **Repositories.** `github.com/eigenwallet/core` (main monorepo: swap binaries, GUI, libraries). `docs.eigenwallet.org` for user + maker documentation (work-in-progress).
- **Community.** Matrix room linked from the homepage; a separate `eigenwallet-makers` Matrix room coordinates ASB operators (this is where the 2026-05-25 vulnerability advisory was posted).
- **Updates.** Manual — pull a new release from GitHub, replace the binary, restart. Currently shipping ~weekly during active development.

**Operator philosophy.** The project framing on `eigenwallet.org` is uncompromising: *"Swap Bitcoin → Monero with protocol-guaranteed safety (no frozen funds, no fraud, no scams, no KYC ever)."* The rebrand statement on the GitHub org positions eigenwallet as a **maintained continuation of the BTC ↔ XMR atomic-swap effort** — distinct from the original `comit-network` repo (which is no longer actively maintained) and from the wider Haveno / Bisq P2P-trade lineage (which use different protocols and have had their own 2026 exploits — see the haveno + bisq incident entries). The team treats the **ASB ecosystem as a first-class citizen** rather than just shipping a taker GUI: every release tests maker workflows, and the maintainers actively coordinate operator-side communication via Matrix.

**Grade rationale.** Listed at **Grade B** rather than A because: (1) the operator surface is sparse — eigenwallet.org is a single GitHub Pages landing with no separate privacy policy, terms, or contact page; the documentation lives elsewhere (docs.eigenwallet.org, work-in-progress); (2) there is an **active maker-side vulnerability advisory** as of 2026-05-25; (3) reproducible builds are not yet documented (binaries are signed but build determinism is unverified). The grade ceiling here is held by **operator transparency**, not the protocol — the underlying atomic-swap mechanism is mathematically trustless and the codebase is GPL-auditable. If the maintainers ship a post-mortem + patched release + clean reproducible-build pipeline + a public privacy/contact page, this is an A candidate.

**Useful when:**

- You want to swap BTC → XMR (or XMR → BTC) **without any intermediary** ever holding your funds — no custodial exchange, no swap aggregator, no KYC.
- You're a Monero or Bitcoin holder who prefers **on-chain settlement with cryptographic safety guarantees** over the speed of a custodial swap.
- You run a VPS and want to **earn a spread as a market-maker** on the BTC ↔ XMR pair (currently advised to halt — see incident).
- You're operationally Tor-first and want the only **end-to-end Tor-native** BTC ↔ XMR atomic-swap stack.
- You're an EU user who wants a direct **SEPA → XMR** path inside a self-custodial wallet (no exchange account needed).
- You're researching atomic-swap protocols and want a **production-grade Rust reference implementation** to study.

**Caveats:**

- **Active vulnerability advisory (2026-05-25).** See incident banner. Don't run an ASB until a patched release ships. Taker-side use is technically possible but maker liquidity has thinned out — verify the maker you pair with is on a current build.
- **Operator surface is sparse.** Single-page landing on GitHub Pages, no separate privacy policy, terms, contact page, or AML statement. Documentation is split between the homepage, `docs.eigenwallet.org` (work-in-progress), and the GitHub README.
- **Reproducible builds not documented.** Binaries are signed but build determinism (per the standard Monero / Bitcoin Core Guix pattern) is not yet established. For high-threat-model use, build from source.
- **BTC ↔ XMR only.** No other pairs. If you need XMR → fiat or XMR → another altcoin, you'll need a separate path (see exchanges).
- **Speed and minimum trade size depend on the maker.** The protocol takes one BTC confirmation + XMR finality to settle; expect ~30-60 min end-to-end. Makers set their own minimums (typically 0.001+ BTC).
- **Mobile not yet shipped.** Roadmap item; for now this is a desktop-only experience.
- **Project history.** Forked + rebranded twice (comit-network → UnstoppableSwap → eigenwallet) — the codebase is the same lineage but the brand continuity is worth knowing if you're auditing historical commits.
- **Single maintainer team.** Like the broader xmr-btc-swap lineage, eigenwallet has a small (~5-10) active contributor base. If the team loses interest, the protocol still works (anyone can run the binaries) but feature development would slow.

Source: https://xmr.club/wallets/eigenwallet