Публичный реестр каждого изменения — чтобы любой мог проверить, что редакционный firewall работает.
Список — это продукт; здесь — чек о том, как он меняется.
xmr.club
{
"status": "approved"
}C → B restored after 14-day watch period elapsed clean. Original 2026-07-30 downgrade was on silent Vietnam → Panama entity migration; operator publicly explained on X + @BV_Insights within hours as regulatory-driven restructure with same founding team. Post-watch checks: no new bitcoinvn submissions in D1; no fresh @bitcoinvn_io concerning activity; kycnot.me still Verified 6/10 with Panama entity captured (Listing edits 14); monerica.com still Verified with Panama location + Last Updated 2026-08-06. Downgrade block preserved in data.resolved_downgrades for audit trail.
{"provider":{"id":"xmr2cex","name":"xmr2cex","category":"exchanges","subcategory":"Instant Swaps","tagline":"XMR-in, CEX-sourced-clean-coins-out — specialty offramp that sends you the output from a T1 exchange reserve (Binance / Gate / etc.) rather than routing chain-to-chain. No account, no email, no ID; 3.4% avg fee, 1 XMR minimum, 5,000 XMR maximum. Fresh listing (2026) with unusually explicit no-KYC ToS (\"no exceptions\" clause covers size, asset, jurisdiction).","review":"**Specialty XMR-in offramp — the output is clean CEX-sourced coins.** Not a general chain-to-chain swap engine. You send XMR, receive BTC / ETH / SOL / LTC / TRX / USDT (TRC / ERC / ARB) that comes out of an operator-held reserve topped up from a T1 exchange (Binance, Gate, or another top CEX per operator statement). The value proposition is chain-history: your output coins trace back to a large-CEX withdrawal rather than to a Tor mixer or a small-liquidity swap engine — useful when your downstream counterparty Anti-leak filters applied to EN + zh/es/ru reviews; status draft → active.
Anti-leak filters applied to EN + zh/es/ru reviews; status draft → active.
Drafted from submission #68. Category=exchanges/Instant Swaps grade=C. Tenure sweep + full anti-leak + i18n (zh-TW/es/ru) applied at draft time.
Drafted from submission #67. Category=exchanges/Instant Swaps grade=C. Tenure sweep + full anti-leak + i18n (zh-TW/es/ru) applied at draft time.
Re-submission of already-rejected operator (original rejection 2026-07-11). Per Hellex-re-submission rule: auto-reject same-day when a previously-rejected operator re-submits without addressing the specific rejection reasons (SendSwap-class composite: dormant-X-handle laundering + fresh domain + false non-custodial framing).
Duplicate of #65 — same submitter, same domain, submitted 37 seconds later. Same re-submission rule applies.
{
"also_listed_at": {
"web3privacy": true,
"monerica": true
}
}Revised earlier 2026-08-12 C→D drop after applying the day-one counterfactual lens: if the newly-disclosed items (plaintext SMTP ingest + 14-day IP logs + opt-in tracking pixels + anti-abuse signup proof) had been visible from day one, day-one grade would have been B-. Operator was improving disclosure honesty, not degrading service. Revised to D → B-. Removed downgrade + incident blocks. Kept feature-tag corrections (e2e_bodies + no_pii off, since operator disclosure now confirms neither was ever fully accurate). Corresponding X post reframed from grade-drop to disclosure-improvement.
Revised earlier 2026-08-12 C→D drop after applying the day-one counterfactual: if the newly-disclosed items (fees admitting spread, as-is refunds, PostHog session-replay) had been visible from day one, day-one grade would have been C. Two of the three shifts are honesty improvements (fees) or standard boilerplate (as-is). PostHog is a genuine caveat, folded into review body. Revised to D → C (net no change from original). Removed downgrade + incident blocks. Corresponding X post reframed.
C → D. Own privacy policy disclosed server-side plaintext mail processing + 14-day IP logs + optional open-tracking pixels; contradicts previously-marketed browser-side-OpenPGP framing. Removed misleading e2e_bodies + no_pii tags. Related ToS change adds mandatory anti-abuse crypto-proof signup step. Grade drop on honesty gap, not observed incident.
C → D. Coordinated three-way policy regression in single 2026-08-09 monitor sweep: /fees admitted previously-hidden spread; /tos added as-is + no-refund-guarantee; /privacy added PostHog session-replay + weakened retention. Same pattern as shell-shift downgrade rule applied to policy content.
Second-pass bulk ack — the earlier unclear-only ack missed cosmetic + null-classification rows that still surfaced in the admin queue (xmrvcc / ollama / continue-dev / privatemode / etc.). This pass acks every unacked non-material row: cosmetic + unclear + null classification. Material 5 (uswap × 3 + neir × 2) preserved for audit.
Bulk-acked all pending unclear-classification policy changes (44 rows across ~15 providers as of 2026-08-11). Curator judgment: unclear queue is signal noise; changes that later re-fire as material get re-chipped anyway.
Acked privacy change (material): Page changed from a maintenance placeholder ('we'll be back soon') to a full Privacy and Cookie Policy: new disclosures on data collection, sharing with exchange providers, KYC/AMLAcked tos change (material): Page changed from a maintenance placeholder to a full Terms of Use: new rules on 60-minute rate fixation, refund policy (incl. cases where KYC/source-of-funds may be requested for
Acked tos change (material): Page changed from an error/blocked page (bot-check message) to the full Terms of Service document, including KYC/AML, refund, and prohibited-jurisdiction terms now visible to users
Acked tos change (material): Page changelog documents a July 2026 compliance update with material terms changes: refund section rewritten as statutory right of withdrawal, blanket non-refundability removed, li
Converted zh review + tagline from Simplified to Traditional Chinese (Taiwan) via OpenCC s2twp. site zh locale is zh-TW; earlier drafts were mis-authored in Simplified.
Converted zh review + tagline from Simplified to Traditional Chinese (Taiwan) via OpenCC s2twp. site zh locale is zh-TW; earlier drafts were mis-authored in Simplified.
Converted zh review + tagline from Simplified to Traditional Chinese (Taiwan) via OpenCC s2twp. site zh locale is zh-TW; earlier drafts were mis-authored in Simplified.
Converted zh review + tagline from Simplified to Traditional Chinese (Taiwan) via OpenCC s2twp. site zh locale is zh-TW; earlier drafts were mis-authored in Simplified.
Converted zh review + tagline from Simplified to Traditional Chinese (Taiwan) via OpenCC s2twp. site zh locale is zh-TW; earlier drafts were mis-authored in Simplified.
i18n anti-leak pass — zh/es/ru reviews and taglines stripped of curator vocabulary (shelf-class, tenure, RDAP, Wayback).
i18n anti-leak pass — zh/es/ru reviews and taglines stripped of curator vocabulary (shelf-class, tenure, RDAP, Wayback).
i18n anti-leak pass — zh/es/ru reviews and taglines stripped of curator vocabulary (shelf-class, tenure, RDAP, Wayback).
i18n anti-leak pass — zh/es/ru reviews and taglines stripped of curator vocabulary (shelf-class, tenure, RDAP, Wayback).
Anti-leak pass — stripped audit-trail language (shelf-class, RDAP, Wayback, Grade rationale, Lift path, primary lever, residual drag, etc.) from public review body.
Anti-leak pass — stripped audit-trail language (shelf-class, RDAP, Wayback, Grade rationale, Lift path, primary lever, residual drag, etc.) from public review body.
Anti-leak pass — stripped audit-trail language (shelf-class, RDAP, Wayback, Grade rationale, Lift path, primary lever, residual drag, etc.) from public review body.
Anti-leak pass — stripped audit-trail language (shelf-class, RDAP, Wayback, Grade rationale, Lift path, primary lever, residual drag, etc.) from public review body.
Anti-leak pass — stripped audit-trail language (shelf-class, RDAP, Wayback, Grade rationale, Lift path, primary lever, residual drag, etc.) from public review body.
Anti-leak pass — stripped audit-trail language (shelf-class, RDAP, Wayback, Grade rationale, Lift path, primary lever, residual drag, etc.) from public review body.
Anti-leak pass — stripped audit-trail language (shelf-class, RDAP, Wayback, Grade rationale, Lift path, primary lever, residual drag, etc.) from public review body.
i18n populated (zh, es, ru); status draft → active.
i18n populated (zh, es, ru); status draft → active.
i18n populated (zh, es, ru); status draft → active.
i18n populated (zh, es, ru); status draft → active.
C → B. Rationale: 5+ years tenure (RDAP 2020-07-22, Wayback 2021-01-23) + real Australian corporate entity + non-custodial routing + clean ToS. Thin operator surface (missing /about /privacy /how-it-works) kept in Caveats section; that is the residual drag preventing A.
C → B-. Rationale: 7-month tenure (RDAP 2026-01-16) is fresh but the OrangeFren backing of $24,000 + review_score 10 (green) + never-KYC:Yes is a strong tier-1 peer signal. Populated data.guarantees.orangefren block per the of-sync schema.
Added tenure paragraph — 2021-12 Wayback floor, 4+ years continuous. Grade C held per feedback_grade_c_aml_triggered_swaps; not lifted by tenure alone.
Added tenure paragraph — 2022-08 RDAP registration, 3 years. Grade B unchanged.
Added tenure paragraph — 2022-02 RDAP registration, 3.5 years. Grade B unchanged.
{
"status": "approved"
}{
"status": "approved"
}{
"also_listed_at": {
"privacyguides": true,
"monerica": true
}
}Manual peer-directory probe fills the gap RDAP + Wayback left. operating_since=2025-01 from monerica Founded date; independent floor from monerica Added-On 2025-12-09.
Tenure sweep 2026-08-10: RDAP + Wayback returned no data (RDAP 404, Wayback empty). Follow up with peer-directory Added-On or Grok live-search.
Set operating_since=2020-07. Independently verified: WHOIS/RDAP registration: 2020-07-22; earliest Wayback snapshot: 2021-01-23. `operating_since` set to the earliest signal.
Set operating_since=2026-05. Independently verified: WHOIS/RDAP registration: 2026-05-23; earliest Wayback snapshot: 2026-07-27. `operating_since` set to the earliest signal.
Set operating_since=2026-05. Independently verified: earliest Wayback snapshot: 2026-05-06. `operating_since` set to the earliest signal.
Set operating_since=2025-12. Independently verified: earliest Wayback snapshot: 2025-12-09. `operating_since` set to the earliest signal.
Set operating_since=2026-06. Independently verified: WHOIS/RDAP registration: 2026-06-15. `operating_since` set to the earliest signal.
Set operating_since=2021-12. Independently verified: earliest Wayback snapshot: 2021-12-26. `operating_since` set to the earliest signal.
Set operating_since=2026-05. Independently verified: WHOIS/RDAP registration: 2026-05-16. `operating_since` set to the earliest signal.
Set operating_since=2026-01. Independently verified: WHOIS/RDAP registration: 2026-01-16. `operating_since` set to the earliest signal.
Set operating_since=2026-05. Independently verified: WHOIS/RDAP registration: 2026-05-15; earliest Wayback snapshot: 2026-07-18. `operating_since` set to the earliest signal.
Set operating_since=2026-04. Independently verified: earliest Wayback snapshot: 2026-04-02. `operating_since` set to the earliest signal.
Set operating_since=2025-05. Independently verified: WHOIS/RDAP registration: 2025-05-21. `operating_since` set to the earliest signal.
Set operating_since=2026-04. Independently verified: WHOIS/RDAP registration: 2026-04-11. `operating_since` set to the earliest signal.
Set operating_since=2022-02. Independently verified: WHOIS/RDAP registration: 2022-02-03. `operating_since` set to the earliest signal.
Set operating_since=2022-08. Independently verified: WHOIS/RDAP registration: 2022-08-22. `operating_since` set to the earliest signal.
Rejected 2026-08-10 — operator (@michaelbitania) confirmed the submission was inadvertent; not intended as an update-request or new listing. bitania provider row untouched (remains active at Grade B).
Drafted from submission #61. Category=exchanges subcategory=Instant Swaps grade=C.
Drafted from submission #63. Category=exchanges subcategory=Aggregators grade=C.
Drafted from submission #64. Category=exchanges subcategory=Instant Swaps grade=held.
Operator refresh triggered by rottenwheel operator ticket #5762503573 (2026-08-10). Corrected operator attribution eestyle → rottenwheel across EN + ZH + ES + RU review bodies. Added companion-properties section naming Revuo Monero Calc (calc.revuo-xmr.com), Revuo Moneroj (moneroj.revuo-xmr.com), Rottenblog (blog.rottenwheel.com) with clearnet + .onion mirrors + GitHub repos. Kept single-listing precedent per Bitania/XMRBazaar/Trezor pattern rather than splitting into 4 rows. last_verified 2026-05-11 → 2026-08-10.
{
"parsed_rows": 27,
"updated_providers": 11
}{
"count": 21,
"provider_ids": [
"smspool",
"changenow-warning",
"exolix",
"exolix",
"uswap",
"uswap",
"uswap",
"neir",
"neir",
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 27,
"updated_providers": 11
}{
"count": 21,
"provider_ids": [
"smspool",
"changenow-warning",
"exolix",
"exolix",
"uswap",
"uswap",
"uswap",
"neir",
"neir",
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 21,
"provider_ids": [
"smspool",
"changenow-warning",
"exolix",
"exolix",
"uswap",
"uswap",
"uswap",
"neir",
"neir",
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 21,
"provider_ids": [
"smspool",
"changenow-warning",
"exolix",
"exolix",
"uswap",
"uswap",
"uswap",
"neir",
"neir",
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"field": "tos",
"summary": "Page changelog documents a July 2026 compliance update with material terms changes: refund section rewritten as statutory right of withdrawal, blanket non-refundability removed, liability disclaimer r",
"url_source": "discovered_footer"
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 20,
"provider_ids": [
"changenow-warning",
"exolix",
"exolix",
"uswap",
"uswap",
"uswap",
"neir",
"neir",
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 20,
"provider_ids": [
"changenow-warning",
"exolix",
"exolix",
"uswap",
"uswap",
"uswap",
"neir",
"neir",
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"field": "tos",
"summary": "Page changed from an error/blocked page (bot-check message) to the full Terms of Service document, including KYC/AML, refund, and prohibited-jurisdiction terms now visible to users — a legal page newl",
"url_source": "discovered_footer"
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 19,
"provider_ids": [
"exolix",
"exolix",
"uswap",
"uswap",
"uswap",
"neir",
"neir",
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"field": "tos",
"summary": "Page changed from a maintenance placeholder to a full Terms of Use: new rules on 60-minute rate fixation, refund policy (incl. cases where KYC/source-of-funds may be requested for suspicious deposits)",
"url_source": "discovered_footer"
}{
"field": "privacy",
"summary": "Page changed from a maintenance placeholder ('we'll be back soon') to a full Privacy and Cookie Policy: new disclosures on data collection, sharing with exchange providers, KYC/AML compliance verifica",
"url_source": "discovered_footer"
}{
"field": "fees_page",
"summary": "Fee page materially revised: 'no hidden spread, all-inclusive 0%' replaced by '0% platform fee on eligible standard routes' with new itemized costs — provider pricing/spread, network cost, market drif",
"url_source": "discovered_footer"
}{
"field": "tos",
"summary": "ToS substantially rewritten between versions: new 'as is/as available' service limitations, explicit caveats that refunds are not guaranteed by accessible status pages, and a statement that liability ",
"url_source": "discovered_footer"
}{
"field": "privacy",
"summary": "Privacy policy substantially rewritten between versions: new disclosures on PostHog analytics (automatic interaction capture, persistent identifiers, session replay), weakened retention promises (no i",
"url_source": "discovered_footer"
}{
"field": "tos",
"summary": "Adds a new 'Private anti-abuse proof' section imposing a signup verification obligation (bounded crypto proof, no bypassing), plus new 'Privacy and system boundaries' disclosure clarifying no-KYC does",
"url_source": "discovered_footer"
}{
"field": "privacy",
"summary": "Policy rewritten and expanded: discloses plaintext (non-zero-access) mail processing, IP addresses in operational logs (14-day journal), optional open-tracking pixels, retention/deletion specifics (30",
"url_source": "discovered_footer"
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}+7d re-check 2026-08-09: no walk-back triggers met. No operator statement/refund. kycnot AI Summary + user reviews unchanged since 2026-07-20. Monerica still ❌ Scam. octoswap.io still live and taking deposits with no incident acknowledgement on /about, /terms, or home. octoswap.com (lookalike, not canonical) parked for sale via GoDaddy at $11,888 — attribute to squatter, not operator exit. Grade F holds; wake +168h.
{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 27,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"parsed_rows": 28,
"updated_providers": 12
}{
"count": 12,
"provider_ids": [
"xmrvcc",
"bitrefill-giftcards",
"lm-studio",
"ollama",
"continue-dev",
"continue-dev",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}{
"window": "30d",
"ends_at": "2026-09-07T03:39:18.951Z",
"emailed": true,
"recipient": "support@cce.cash"
}{
"also_listed_at": {
"monerica": true
}
}{
"also_listed_at": {
"monerica": true
}
}{
"status": "approved"
}{"provider":{"id":"openmonero","category":"exchanges","subcategory":"P2P","name":"OpenMonero","tagline":"Agoradesk fork — P2P marketplace for buying/selling XMR. Repeat-exploit history: 2025-06 (90 XMR), 2026-06 (200 XMR), 2026-07 (API takeover + 399 XMR drain). Operator frames each event as a fresh zero-day. Grade F. Do not deposit.","review":"**Agoradesk fork** with self-custodial trade settlements for sellers and several privacy upgrades over the original (session notifications, self-destructable chat history, etc.). P2P marketplace pattern: buyers and sellers post offers, on-site chat handles negotiation, payment + delivery is arranged peer-to-peer. Funded payment methods include PayPal, credit/debit, bank transfer, gift cards, cash by mail, BTC, Venmo, etc.\n\n**Mirrors:** clearnet at openmonero.com, Tor onion (`fgssv2btn4…njev6sjbyd.onion`), I2P (`sex2vkgaei…ual5guyq.b32.i2p`). Reach matters for users in restricted networks.\n\n**Anonymous signup.** No KYC, no government ID. Accoexchanges -> marketplaces per new marketplaces category launch 2026-08-07. 301 redirect set in middleware from /exchanges/kashilo to /marketplaces/kashilo.
exchanges -> marketplaces per new marketplaces category launch 2026-08-07. 301 redirect set in middleware from /exchanges/xmrbazaar to /marketplaces/xmrbazaar.
{"provider":{"id":"zerotrace","category":"exchanges","subcategory":"Aggregators","name":"Null Route — ZERO TRACE","tagline":"Null Route — ZERO TRACE: Privacy-first swap aggregator that ranks exchanges by KYC rating (A→D) and log policy rather than price. Lives as a UI subpage on cetoc.org over Trocador.app.","review":"**Not to be confused with [0trace](/exchanges/0trace)** — a separate own-liquidity instant-swap operator at 0trace.io (Grade B). This listing is the swap-aggregator UI at cetoc.org / NULL_ROUTE.\n\n**What it is.** A swap aggregator with a hard privacy filter — sorts exchange quotes by KYC rating (A=never, D=can freeze funds) and log policy rather than by price. Listed at **Grade C** because the KYC-awareness UX is genuinely useful but the tool has zero legal pages, zero operator disclosure, zero peer-directory footprint, and swaps execute through Trocador.app rather than its own infrastructure.\n\n**Background.** ZERO TRACE (NULL_ROUTE) is a sub-page of **cetoc.org** — a Formal 30-day grace-period review probe 2026-08-06. Market-depth caveat appended to review body. Qualitative signals point to sustained low liquidity (retoswap cumulative counter unchanged 48h, r/haveno user report of zero offers), but exact XMR/day figure still not publicly probable. Grade held pending curator sign-off on downgrade per wake criteria (A/A- → B if <100 XMR/day sustained). Wake rescheduled +720h.
Formal 30-day grace-period review probe 2026-08-06. Market-depth caveat appended to review body. Qualitative signals point to sustained low liquidity (retoswap cumulative counter unchanged 48h, r/haveno user report of zero offers), but exact XMR/day figure still not publicly probable. Grade held pending curator sign-off on downgrade per wake criteria (A/A- → B if <100 XMR/day sustained). Wake rescheduled +720h.
{
"also_listed_at": {
"web3privacy": true,
"privacyguides": true,
"monerica": true
}
}SecureShift drafted at Grade C. Instant-swap engine (Cayman Islands, ~5-year tenure) rebranded as "SecureShift DEX" — mechanism is instant-swap not DEX (no wallet connection, deposit-address model). Own copy names "AML before swap" gate. Monerica peer-verified since 2024-08-11 as Instant Swaps / Guaranteed No KYC. XMR added 2026-08-04. Grade C per shelf rule for AML-gated instant swaps + fresh-to-our-shelf tenure default. Anti-leaking filters applied.
Third-party corroboration from Monero Society TG community member @Brownoid (internal-only per witness-protection rule). Pre-existing community suspicion + post-evidence confirmation. Warning-lead evidence chain gains community-level corroboration bullet.
XMR Escrow demoted C → F on 2026-08-05 for active exit-scam. Verified operator identity via documented DM history (@xmrescrow X was real operator). Victim reported $6,000 BTC loss with 3 verified on-chain txids. Operator identifier "TT" matches GitHub org xmrescro display name "tt". Coincident scrub of public contact surfaces (X deleted, GitHub whitewash commit, /about reactive whitewash). Site still taking new escrows. Full shame-list warning-lead prepended. All evidence URLs preserved to Internet Archive.
Verification pass 2026-08-05. Site still operational. /about page explicitly disclaims social media + warns against imposters + publishes PGP + XMPP/Tuta contacts only. Reframed warning-lead — imposter-scam hypothesis now on the table. Severity critical->high. Grade C held pending reporter chain-of-contact clarification. F escalation gated on real-channel verification or independent reports.
Redacted reporter handle (@IanMVA) from public review body per reporter-privacy rule. Added verified X-account-deleted corroborating signal (2026-08-05). Bumped incident severity low -> critical. Grade held at C pending curator escalation decision to F. Reporter handle retained in internal audit trail + submission row only.
Open-incident treatment triggered by submission #59 (user scam report against operator "TT", claimed $6,400 loss). Single-source, receipts referenced but not attached. Warning-lead prepended. Grade C held pending +14d corroboration.
xmr2cex Grade C draft from submission #60. Specialty XMR-in offramp with CEX-sourced clean output. Unusually explicit no-KYC ToS ("no exceptions" clause). Peer-dir: kycnot + monerica verified. Anti-leaking filters applied.Populated downgrade.reason_i18n + i18n.{loc}.{tagline,review} warning-lead + short reader-advice per locale. /shell-shifts and locale-prefixed FixedFloat listing now render demotion context in ZH/ES/RU. Full long-form review body stays EN — noted in each locale as pending translation.FixedFloat demoted B- → C for quiet legal-entity shift: FFX Group Ltd (Marshall Islands) → FFGX Group LLC (Kutaisi, Georgia) effective in ToS 2026-08-02. No operator announcement. Same treatment as BitcoinVN 2026-07-30 shell-shift downgrade. Warning-lead prepended to review body. Reader advice added re: pre-shift entity obligation inheritance. Policy state acked simultaneously. Downgrade metadata populated in data.downgrade.
onionswap: draft → active at Grade C. i18n populated for zh/es/ru. Category exchanges/Instant Swaps. Rationale: swap-only own-reserves operator with unusually direct no-KYC ToS commitment + Monerica peer-dir listing + honest deliberate-minimalism (no API, no referral, no service desk). Tenure remains the cap on grade; 60-90 day re-review scheduled naturally.
Tightened per user feedback — swap-only framing, no API, no referral, no service desk. Removed api_available tag, added minimalism tags.
OnionSwap drafted at Grade C from submission #57. Fresh (© 2026, first blog 2026-08-03) instant-swap operator with own-reserves model. ToS/FAQ/Support commit to no-KYC + no-fund-holds. Peer-dir: Monerica verified; kycnot/xmrlist/OrangeFren not yet indexed. Grade C per tenure rule. Anti-leaking filters applied: no curator-voice / process-meta / methodology mentions; reader-facing conclusions only.
Hellex (hellex.io) re-submission of previously-rejected operator. Original rejection 2026-07-09 (submission #40) documented in rejection log: OrangeFren cluster-delist with scam-attribution + aged-social-handle laundering pattern (X @Hellex_io "joined Jan 2014" but inverted follow ratio + wayback shows domain only ~50 days old at time). Re-submission 26 days later provides no new facts, no corrective disclosure, no addressing the aged-handle-inflation shape. Same URL, same operator. Auto-reject per rejection-log rule.
zerotrace: held → active at Grade C. i18n populated for zh/es/ru. Category exchanges/Instant Swaps. Rationale: operator (null_route) addressed 4 of 5 original hold reasons (onion mirror + broader NULL_ROUTE toolkit context + contact channel + peer-dir footprint verified across kycnot 7/10 + xmrlist + bitlist + monerica + BTT ANN); remaining Trocador single-provider dependency caps at Grade C. Naming-collision fix applied (renamed to Null Route — ZERO TRACE + cross-warnings both ways with 0trace listing).
Peer-dir footprint verified from operator-supplied URLs (5 primary + 1 pending + monerica parent-brand). Grade set to C in data.rating. Status stays HELD pending i18n populated (per draft-to-active-needs-i18n rule). Substantive rejection of 4 of 5 original hold reasons — Trocador single-provider dependency remains the cap on grade.
2026-08-04 wake-driven recheck of 2026-07-07 liquidity concern (~5k at that time, pre-incident norm 10k+). Retoswap.com homepage now advertises "19,000+ Swaps completed" — cumulative marketing figure, NOT real-time available-liquidity. Current-liquidity metric not publicly probable via web. Filing timeline entry; no review-body caveat added because evidence for the negative is missing.
2026-08-04 wake-driven recheck (parent protocol) — same finding as retoswap. Marketing shows 19,000+ lifetime swaps, no live liquidity number publicly exposed.
Renamed "ZERO TRACE" → "Null Route — ZERO TRACE" to resolve naming collision with 0trace (0trace.io, Grade B). Aligns with operator current parent branding (NULL_ROUTE). Cross-warning added to review body of both listings.
Cross-warning banner added to review body — points readers to /exchanges/zerotrace (Null Route — ZERO TRACE, unrelated cetoc.org aggregator, currently held). Companion warning on ZERO TRACE listing points here.
{
"also_listed_at": {
"0": {
"name": "monerica",
"url": "https://monerica.com/site/xeovo-vpn"
},
"1": {
"name": "kycnot.me",
"url": "https://kycnot.me/service/xeovo"
},
"monerica": true
}
}{
"also_listed_at": {
"monerica": true,
"web3privacy": true
}
}{
"also_listed_at": {
"monerica": true,
"web3privacy": true
}
}{
"also_listed_at": {
"kycnot": true,
"web3privacy": true,
"privacyguides": true,
"monerica": true
}
}Manual expire+activate flip: row 10 (El Capo Front-Page, ends_at 2026-08-03 19:15:48Z) → expired, row 12 (Ollie Swap Front-Page, starts_at 2026-08-03 19:15:48Z) → active. Reason: cron runs daily 06:00 UTC; Ollie was owed the slot ~6h ago. Manual flip prevents him losing paid slot time to the cron cadence gap.
User review #77 (torrnado, 5/5) approved. Peer-directory attribution enriched: Monerica (windows + android pages verified). Two additional peer-dir claims (monero.observer, hidden-services.today) noted as user-cited but unverified from top-level pages. Grade C rationale unchanged — user pushed for B, but the C reasons (privacy-community non-endorsement + light-wallet backend + KYC-partnered on-ramps) still hold.
{
"window": "1d",
"ends_at": "2026-08-03T19:15:48Z",
"emailed": false,
"recipient": null
}active → inactive. Service shut down 2025-11-27 per Mullvad blog announcement. Warning-lead prepended to tagline + review body. leta.mullvad.net no longer resolves. Surfaced by user review #76 (approved simultaneously). Grade A preserved as historical.
{
"also_listed_at": {
"kycnot": true
}
}El Capo Headline (exchanges) 30d, 1 XMR, tx 16dd296c1e20b1b10ed9af435187bd33b41c0000ad1d6481ce1f23cec1f8dc08. Starts 2026-08-22 (immediately after Ollie Swap headline expires), ends 2026-09-21. Status pending — cron flip to active at start. Pitch reuses his Front-Page copy with the new letter-of-guarantee mention appended.
{
"field": "tos",
"summary": "Legal entity changed from 'FFX Group Ltd, Republic of the Marshall Islands' to 'FFGX Group LLC, Kutaisi, Georgia'. Jurisdiction change from Marshall Islands to Georgia materially affects governing law",
"url_source": "discovered_footer"
}{
"field": "tos",
"summary": "Section 12 adds new refund policy: cards work ~95% of online places, if not they refund except card issuing fee (since card already issued). New partial-refund obligation affecting fee structure. Date",
"url_source": "curated"
}{
"field": "privacy",
"summary": "Cookie policy substantially expanded: new sections 10.3-10.7 add advertising cookies (Google Ads, Meta, AppsFlyer), email engagement tracking pixels with detailed consent rules, detailed cookie contro",
"url_source": "discovered_footer"
}{
"field": "privacy",
"summary": "Effective date bumped March 28 2025 -> June 2026. Material: new 'Cloud Services' data processing added - user requests may now be transiently processed in cloud (cloud models, web search) under Zero D",
"url_source": "discovered_conventional"
}{
"field": "fees_page",
"summary": "New Team plan launched at $25/seat/mo (5-seat minimum) plus Enterprise plan with custom pricing. Previously 'Team' was 'Coming soon'. New team billing/usage model with shared balance. Material change ",
"url_source": "discovered_conventional"
}+7d follow-up after 2026-07-29 escalation. Grade F holds. Three new signals added to review body from kycnot 2026-07-29 warning box: (1) fake partner claims — 13/14 logos link nowhere; (2) structural test-impossibility — 0.108 BTC min = ~$6,983 minimum possible loss; (3) Monerica explicit Scam label. No operator refund evidence in 14 days since original report; no walk-back. Continue 7-day watch.
Added per-order letter-of-guarantee subsection to review + brief mention in tagline. Source: operator TG statement 2026-08-02. Not independently verified in a follow-up test yet; framed as operator-declared, format description will update after next probe.
easybit: draft → held. Grade C recorded. Direct-URL findable; excluded from category listings, search, feeds. Rationale: removed-XMR-support on 2025-07-09 disqualifies as a reader-recommended Monero swap venue, but retained on shelf for kyc.rip data-integration continuity per curator directive. Re-evaluate for active status if EasyBit publicly restores XMR support.
EasyBit draft at Grade C, status draft. CRITICAL removed-XMR-2025 finding surfaced in review lede. Listing rationale: kyc.rip data-integration continuity per user directive (2026-08-02, "we already listed most providers kyc.rip is gonna integrate: swapgate, bitcoinvn, baltex, easybit"). Awaiting curator decision on final status: held (excluded from category listings/search/feeds but direct-URL findable) vs active (surfaces in exchanges index with strong warnings) vs reject (add to rejection log with removed-XMR-support as new named disqualifier).
swapgate: draft → active. Grade C. i18n populated for zh/es/ru. Category exchanges/Instant Swaps. Same shelf class as Baltex (per feedback_grade_c_aml_triggered_swaps rule). Affiliate + logo pinned.
Pinned logo to https://swapgate.io/favicon/apple-touch-icon.png (curator-supplied operator apple-touch-icon).
Swapgate draft at Grade C. Same shape as Baltex (instant-swap aggregator, two-postures pattern) but scores higher on transparency: full 5AMLD AML policy, explicit consent clause at order creation, publicly documented LE-request page. Grade C ceiling applies for the front-page-vs-policy contradiction, not for any hidden malfeasance. Affiliate: https://swapgate.io/exchange-usdttrc20-btc?ref=aff_1515
{
"parsed_rows": 24,
"updated_providers": 9
}{
"count": 9,
"provider_ids": [
"continue-dev",
"continue-dev",
"ollama",
"privatemode",
"bitrefill-giftcards",
"openrouter",
"openrouter",
"monero-stackexchange",
"lumo"
]
}baltex: draft → active. Grade C. i18n populated for zh/es/ru. Category exchanges/Instant Swaps. Flipped after operator + AML page review + peer-signal check (kycnot listed, Trocador B) + user-verified low-min differentiator.
Set affiliate link to https://app.baltex.io?_bpLink=7f3fa48c-a68523bf856f3df8
Generalized competitor + threshold references per user feedback: "most swaps require higher minimums" is durable, naming specific peers with specific \$-numbers ages poorly.
Fixed review formatting bug: rewrote body from HTML to markdown format (review-md.ts parses markdown, not raw HTML). Original render was showing escaped HTML tags as visible text.
Added low-minimum-amount differentiator to review + tagline + tags. Confirmed by curator use — accepts few-dollar swaps where peers require $10-20 min for XMR pairs.
Baltex draft at Grade C. Category exchanges/Instant Swaps. Rationale: privacy marketing + published AML/chain-analysis product page create shotgun-KYC-on-flagged-funds risk pattern (StealthEX shape). Peer signal supports operational reliability (kycnot listed, Trocador B). Trigger criteria unpublished; reader advice caps at ~$10K for elevated-risk amounts.
{"provider":{"id":"coin-wallet","category":"wallets","subcategory":"Multi-Chain","name":"Coin Wallet","tagline":"Multi-coin wallet with first-class XMR support and non-custodial key storage. MIT open source, ten-year operator (CoinSpace LLC, US). In-app buy/sell/swap routes through KYC-triggering partners — anonymous wallet, non-anonymous rails.","review":"Coin Wallet is a **multi-chain non-custodial wallet** with first-class Monero support, available on web, iOS, Android, Windows, macOS, Linux, and Tor. **MIT open source** (`github.com/CoinSpace/CoinSpace`, 456 stars, actively maintained since 2015). Listed at **Grade C** because the wallet itself is anonymous and non-custodial, but the in-app buy / sell / swap surface routes through **ten partners that can trigger KYC** — worth understanding clearly before using those rails.\n\n**Non-custodial, confirmed.** Both marketing copy and the Terms of Service are explicit: *\"Coin Wallet stores your Wallet address but does not receive or stodark.do (dark.do) rejected: (1) not on-shelf for educational — general darknet/politics news with XMR ticker + donation button, zero XMR-specific coverage in 9-article corpus, category-fit does not improve with tenure; (2) aggregator-branded-as-original — 6 of 15 RSS items are backfilled Dec 2023 mainstream wire headlines under a darkdobot byline while /about claims 100% in-house sourced news; (3) overclaim-vs-reality gap — /about claims 21M reach / 45K followers / 11.5K daily visitors / 15 articles per day / 10+ authors / 11 mirrors, observed reality <1 article/day + 1 bot byline + 0 peer footprint + 8 mirrors. Fabrication-shaped overclaims read reader-hostile. Not in prior rejection log; adding aggregator-branded-as-original + overclaim-vs-reality-gap as reusable disqualifiers.
{
"also_listed_at": {
"web3privacy": true,
"monerica": true
}
}{
"also_listed_at": {
"monerica": true
}
}{
"also_listed_at": {
"web3privacy": true,
"monerica": true
}
}{
"also_listed_at": {
"web3privacy": true,
"kycnot": true,
"monerica": true
}
}{
"also_listed_at": {
"web3privacy": true,
"kycnot": true,
"monerica": true
}
}ProxyMark Monero+Tor deanonymization paper (arxiv 2607.07062) follow-up +48h: MRL meeting agenda 2026-07-29 (issue #1431) included the paper as item #5 but meeting logs not yet posted (issue still open, 0 comments). No monerod patch since v0.18.5.1 (2026-07-08). No research-lab issue tagged ProxyMark yet. No commits touching P2P proxy code since 2026-07-28. Guides not modified pending MRL stance. Next check +48h.
{
"status": "approved"
}{
"status": "approved"
}{
"also_listed_at": {
"monerica": true
}
}