⚠ Recorded incidents
major
2026-07-27 Policy
Ongoing
There are no terms of service and no privacy policy. The only contractual text is a Legal Disclaimer block on the home page, which names no legal entity, no jurisdiction and no competent court, so a user with a dispute has nothing to rely on and nowhere to bring it. The interface also still ships as v1.0.0-RC1, a release candidate, which the operator states only in the page footer. Source: kyc.rip
major
2026-07-27 Policy
Ongoing
The Ghost Protocol feature breaks on-chain links between deposit and withdrawal through automated routing and burner wallets, which is functionally a mixing step whatever it is called. Funds that pass through it are markedly more likely to be flagged by compliance systems at any downstream exchange, and several services in this directory name mixer-linked deposits as an automatic freeze trigger. The operator is unusually candid about the limits of its own feature, warning that upstream RPC nodes and swap APIs may still retain ephemeral metadata and advising VPN or Tor use, but it publishes no onion address of its own. Source: kyc.rip legal disclaimer
minor
2026-07-27 Policy
Ongoing
The whole interface requires JavaScript and the burner wallet keys behind Ghost Protocol are, by the operator own description, generated locally in the browser. That places the security of those keys entirely on script delivered from the operator servers on each visit, so a compromised or altered build could exfiltrate them without any user-visible change. This is the standard risk of browser-generated keys rather than anything specific to this service, but it applies here and there is no published source to audit. Source: kyc.rip legal disclaimer
minor
2026-07-14 Event
Users fully reimbursed
Countervailing evidence, and the strongest positive signal found: after a routed swap failed at partner PegasusSwap and the partner recovery process demanded a second deposit, screenshots, a four to five week wait and a processing fee, kyc.rip compensated the user from its own swap-platform budget rather than deferring to the partner, first partially and then in full. It also obtained from the operator a list of pairs where the failure mode is possible, in order to disable them at its routing layer. An aggregator absorbing a partner failure out of its own funds is uncommon. Source: xmr.club/exchanges/pegasusswap
minor
2026-07-27 Policy
Ongoing
Disclosure question worth resolving before relying on the listings: the two entries labelled Sponsor on the home page, uPay.rip and jiayou.rip, share the .rip domain pattern with the operator own ecosystem sites stables.rip and walls.rip. If those sponsors are operated by the same party, labelling them as paid placements rather than own products would be misleading. Not established either way here. Source: kyc.rip