KYC level
None — no account
RetoSwap verified 1h ago
Haveno-based P2P Monero DEX on Tor · non-custodial multisig, but hit hardest by the May 2026 protocol exploit · since 2024
Verification criteria
⚠ Recorded incidents
major
2026-05-20 Event
Patched / fixed
post-mortem published Haveno protocol exploit (upstream dependency, not RetoSwap's code): ~7,000 XMR ($2.7M) drained from mid-trade funds. Caught within minutes, trading halted, patched in v1.8.0. Stolen funds not recovered. Source: KYCnot.me, RetoSwap
major
2026-06-17 Event
Patched / fixed
post-mortem published Second Haveno dispute-resolution vulnerability (~1,500 XMR / $500k) allowing forged dispute payouts. Resolved via patch; refunds expected to be covered by future trading fees. Source: KYCnot.me
Posture
Custody
Non-custodial
Logging policy
No Logs
Data collected
None
JavaScript
Required
Open source
Yes
Frozen-funds policy
Refunds, never freezes
Blocked jurisdictions
none
Privacy — Exchange
Swap mechanism
Order Book
Own reserve (fewer third parties)
No
No deposit-address reuse
No
Details
Supported assets
XMR · BTC · ETH · USDT · LTC · BCH
Fee min (%)
0.2%
Fee max (%)
1%
API available
No
Rate type
Float
Reliability
30-day uptime
100.0%
Incident history
2 recorded, 2 resolved