Contact
Three channels — pick the one that matches your reason for reaching out. All editorial contact goes through a bot front; the curator's personal Telegram is not publicly exposed.
Editorial — listings, corrections, press, partnerships
The bot auto-acknowledges and forwards your message into a private team channel. The curator replies from that channel; you see the response in your DM as if speaking directly. Typical response window: under 24h on business days.
Include in the first message: the URL of the listing you're referencing (e.g. https://xmr.club/exchanges/sideshift) and what you'd like changed, asked, or verified. Mention "press" if you need priority for a publishing deadline.
Security — vulnerabilities or sensitive disclosures
Email abuse@xmr.club. PGP signing optional; mention in the subject if you want a PGP-signed reply.
For coordinated disclosure on a worker / D1 / admin-surface vulnerability, expect a 90-day window before public write-up. Bugs in third-party listed providers belong to the provider's own security contact (we'll re-list them as RFC 9116 contact discovery improves; see our security.txt).
Public submissions — new listings, tag corrections, missing onions
Submissions go into a public review queue; the curator triages and either lists, rejects with reason, or holds for verification. Every accepted edit lands in the public audit log. Use this path when the request doesn't need a private back-and-forth.
What NOT to send
- Personal swap support. If you're stuck on a kyc.rip swap, contact kyc.rip directly (@kyc_rip_bot). xmr.club is the directory; we don't run the providers we list.
- Promotional pitches without a verifiable claim. Sponsorship goes through /sponsor and follows the public rubric; there is no editorial-curated paid placement.
- Take-down threats. We log every grade-change in /audit; corrections backed by evidence are normal, lawyer threats without evidence are republished. See /transparency for the policy.
Public-broadcast channels
- @xmr_club on X/Twitter — new-listing drops, onion-audit anomalies, methodology changes. Public, one-way.
- /feeds — JSON Feed v1.1 + Atom subscriptions for every category, plus a master audit-log feed. Machine-readable.
- Onion mirror:
xmrclubummbi…aad.onion. Same content over Tor. Fingerprint at /transparency.
Response policy
- Editorial: replies typically within 24h, usually faster. No reply within 72h = please bump (Telegram messages don't always re-notify).
- Security: acknowledged within 48h. 90-day disclosure window unless agreed otherwise.
- Submissions via /submit: triaged within ~5 business days. Accepted or rejected with reason; never silently dropped.
- No paid expedite. Sponsors of /sponsor placement slots get faster placement turnaround, never faster editorial response.