所有目錄變更的公開分類帳——等級調整、KYC 重測、贊助啟用、事件更新。我們把它記下來，是為了讓訪客能驗證我們所說的「編輯防火牆」確實成立。
清單本身就是產品；這頁是它變動的收據。
xmr.club
{"provider":{"id":"openmonero","category":"exchanges","subcategory":"P2P","name":"OpenMonero","tagline":"Agoradesk fork — P2P marketplace for buying/selling XMR. Repeat-exploit history: 2025-06 (90 XMR), 2026-06 (200 XMR), 2026-07 (API takeover + 399 XMR drain). Operator frames each event as a fresh zero-day. Grade F. Do not deposit.","review":"**Agoradesk fork** with self-custodial trade settlements for sellers and several privacy upgrades over the original (session notifications, self-destructable chat history, etc.). P2P marketplace pattern: buyers and sellers post offers, on-site chat handles negotiation, payment + delivery is arranged peer-to-peer. Funded payment methods include PayPal, credit/debit, bank transfer, gift cards, cash by mail, BTC, Venmo, etc.\n\n**Mirrors:** clearnet at openmonero.com, Tor onion (`fgssv2btn4…njev6sjbyd.onion`), I2P (`sex2vkgaei…ual5guyq.b32.i2p`). Reach matters for users in restricted networks.\n\n**Anonymous signup.** No KYC, no government ID. Acco2026-07-30 third documented exploit: 399 XMR drain announced, operator claims zero-day vulnerability "that had been hiding since the start of the project". Total documented: ~689 XMR across 3 drains + separate API-endpoint compromise. Grade F held. Sources: OrangeFren + Dark Web Informer on X.
D → F escalation: 2026-07-24 kycnot advisory reports login-API sequential-account-takeover exploit + data leak (trading history, shipping addresses, chat logs); operator silence continues (X quiet since 2026-06-08); reader recommendation is now do-not-deposit + withdraw-if-possible. Source: kycnot.me/service/openmonero.
C → D revert: 2026-07-24 new outage window, xmr.club chatbox reports frozen trades, operator posted then removed API-under-attack banner without follow-up, X silent since 2026-06-08. 2026-07-07 D → C lift reverted pending withdrawal-restoration verification. Timeline entry appended.
{"provider":{"id":"openmonero","category":"exchanges","subcategory":"P2P","name":"OpenMonero","tagline":"Agoradesk fork — P2P marketplace for buying/selling XMR with self-custodial trade settlement. Tor + I2P mirrors. Recent (May 2026) exploit; operator refunding affected users.","review":"**Agoradesk fork** with self-custodial trade settlements for sellers and several privacy upgrades over the original (session notifications, self-destructable chat history, etc.). P2P marketplace pattern: buyers and sellers post offers, on-site chat handles negotiation, payment + delivery is arranged peer-to-peer. Funded payment methods include PayPal, credit/debit, bank transfer, gift cards, cash by mail, BTC, Venmo, etc.\n\n**Mirrors:** clearnet at openmonero.com, Tor onion (`fgssv2btn4…njev6sjbyd.onion`), I2P (`sex2vkgaei…ual5guyq.b32.i2p`). Reach matters for users in restricted networks.\n\n**Anonymous signup.** No KYC, no government ID. Account creation is username + password. Per-seller reputati{
"from": "D",
"to": "C",
"reason": "90 XMR refund on 2026-06-24 + security hardening (server rotation, new onion, wallet isolation) per operator 2026-06-28 recovery post. Full lift to B blocked by lack of independent audit + public post-mortem + 30-day no-incident window."
}{
"date": "2026-06-28",
"note": "operator recovery post: 90 XMR refunded 2026-06-24, server rotation + new onion + wallet isolation. Partial recovery of ~200 XMR loss; grade held at D pending post-mortem + audit."
}{
"date": "2026-07-07",
"note": "site resumed after 2-week downtime per operator banner; new .onion published; grade held at D — resumption not rehabilitation",
"tor_rotated": true
}{
"also_listed_at": {
"kycnot": true,
"monerica": true
}
}{"provider":{"id":"openmonero","category":"exchanges","subcategory":"P2P","name":"OpenMonero","tagline":"Agoradesk fork — P2P marketplace for buying/selling XMR with self-custodial trade settlement. Tor + I2P mirrors. Recent (May 2026) exploit; operator refunding affected users.","review":"**Agoradesk fork** with self-custodial trade settlements for sellers and several privacy upgrades over the original (session notifications, self-destructable chat history, etc.). P2P marketplace pattern: buyers and sellers post offers, on-site chat handles negotiation, payment + delivery is arranged peer-to-peer. Funded payment methods include PayPal, credit/debit, bank transfer, gift cards, cash by mail, BTC, Venmo, etc.\n\n**Mirrors:** clearnet at openmonero.com, Tor onion (`fgssv2btn4…njev6sjbyd.onion`), I2P (`sex2vkgaei…ual5guyq.b32.i2p`). Reach matters for users in restricted networks.\n\n**Anonymous signup.** No KYC, no government ID. Account creation is username + password. Per-seller reputati{"provider":{"id":"openmonero","category":"exchanges","subcategory":"P2P","name":"OpenMonero","tagline":"Agoradesk fork — P2P marketplace for buying/selling XMR with self-custodial trade settlement. Tor + I2P mirrors. Recent (May 2026) exploit; operator refunding affected users.","review":"**Agoradesk fork** with self-custodial trade settlements for sellers and several privacy upgrades over the original (session notifications, self-destructable chat history, etc.). P2P marketplace pattern: buyers and sellers post offers, on-site chat handles negotiation, payment + delivery is arranged peer-to-peer. Funded payment methods include PayPal, credit/debit, bank transfer, gift cards, cash by mail, BTC, Venmo, etc.\n\n**Mirrors:** clearnet at openmonero.com, Tor onion (`fgssv2btn4…njev6sjbyd.onion`), I2P (`sex2vkgaei…ual5guyq.b32.i2p`). Reach matters for users in restricted networks.\n\n**Anonymous signup.** No KYC, no government ID. Account creation is username + password. Per-seller reputati{
"also_listed_at": {
"kycnot": true
}
}{"provider":{"id":"openmonero","category":"exchanges","subcategory":"p2p","name":"OpenMonero","tagline":"Agoradesk fork — P2P marketplace for buying/selling XMR with self-custodial trade settlement. Tor + I2P mirrors. Recent (May 2026) exploit; operator refunding affected users.","review":"**Agoradesk fork** with self-custodial trade settlements for sellers and several privacy upgrades over the original (session notifications, self-destructable chat history, etc.). P2P marketplace pattern: buyers and sellers post offers, on-site chat handles negotiation, payment + delivery is arranged peer-to-peer. Funded payment methods include PayPal, credit/debit, bank transfer, gift cards, cash by mail, BTC, Venmo, etc.\n\n**Mirrors:** clearnet at openmonero.com, Tor onion (`fgssv2btn4…njev6sjbyd.onion`), I2P (`sex2vkgaei…ual5guyq.b32.i2p`). Reach matters for users in restricted networks.\n\n**Anonymous signup.** No KYC, no government ID. Account creation is username + password. Per-seller reputati{
"also_listed_at": {
"kycnot": true
}
}{"provider":{"id":"openmonero","category":"exchanges","subcategory":"p2p","name":"OpenMonero","tagline":"Agoradesk fork — P2P marketplace for buying/selling XMR with self-custodial trade settlement. Tor + I2P mirrors. Recent (May 2026) exploit; operator refunding affected users.","review":"**Agoradesk fork** with self-custodial trade settlements for sellers and several privacy upgrades over the original (session notifications, self-destructable chat history, etc.). P2P marketplace pattern: buyers and sellers post offers, on-site chat handles negotiation, payment + delivery is arranged peer-to-peer. Funded payment methods include PayPal, credit/debit, bank transfer, gift cards, cash by mail, BTC, Venmo, etc.\n\n**Mirrors:** clearnet at openmonero.com, Tor onion (`fgssv2btn4…njev6sjbyd.onion`), I2P (`sex2vkgaei…ual5guyq.b32.i2p`). Reach matters for users in restricted networks.\n\n**Anonymous signup.** No KYC, no government ID. Account creation is username + password. Per-seller reputati{
"also_listed_at": {
"kycnot": true
}
}{
"also_listed_at": {
"kycnot": true
}
}{
"also_listed_at": {
"kycnot": true
}
}{"provider":{"id":"openmonero","category":"exchanges","subcategory":"p2p","name":"OpenMonero","tagline":"Agoradesk fork — P2P marketplace for buying/selling XMR with self-custodial trade settlement. Tor + I2P mirrors. Recent (May 2026) exploit; operator refunding affected users.","review":"**Agoradesk fork** with self-custodial trade settlements for sellers and several privacy upgrades over the original (session notifications, self-destructable chat history, etc.). P2P marketplace pattern: buyers and sellers post offers, on-site chat handles negotiation, payment + delivery is arranged peer-to-peer. Funded payment methods include PayPal, credit/debit, bank transfer, gift cards, cash by mail, BTC, Venmo, etc.\n\n**Mirrors:** clearnet at openmonero.com, Tor onion (`fgssv2btn4…njev6sjbyd.onion`), I2P (`sex2vkgaei…ual5guyq.b32.i2p`). Reach matters for users in restricted networks.\n\n**Anonymous signup.** No KYC, no government ID. Account creation is username + password. Per-seller reputati{"provider":{"id":"openmonero","category":"exchanges","subcategory":"p2p","name":"OpenMonero","tagline":"Agoradesk fork — P2P marketplace for buying/selling XMR with self-custodial trade settlement. Tor + I2P mirrors. Recent (May 2026) exploit; operator refunding affected users.","review":"**Agoradesk fork** with self-custodial trade settlements for sellers and several privacy upgrades over the original (session notifications, self-destructable chat history, etc.). P2P marketplace pattern: buyers and sellers post offers, on-site chat handles negotiation, payment + delivery is arranged peer-to-peer. Funded payment methods include PayPal, credit/debit, bank transfer, gift cards, cash by mail, BTC, Venmo, etc.\n\n**Mirrors:** clearnet at openmonero.com, Tor onion (`fgssv2btn4…njev6sjbyd.onion`), I2P (`sex2vkgaei…ual5guyq.b32.i2p`). Reach matters for users in restricted networks.\n\n**Anonymous signup.** No KYC, no government ID. Account creation is username + password. Per-seller reputati{
"category": "exchanges",
"name": "OpenMonero",
"grade": "B",
"incident": "2026-05-21 platform exploit ~40 XMR",
"source": "curator-flagged + KYCnot writeup + operator X statement"
}