Featured
Bisq
FeaturedPublished April 13, 2025 · Last updated 1 month ago
Decentralized P2P exchange, zero KYC.
At a glance
Pros
- +Guaranteed no-KYC, no email, ID, or registration required to trade Bitcoin peer-to-peer.
- +Tor-by-default architecture, every node operates as a hidden service, protecting user IP addresses.
- +Self-custodial multisig security, funds never held by a central party; 2-of-2 escrow requires both trader signatures.
- +Open-source and auditable, full source code available with PGP-signed releases and public development on GitHub.
- +Mobile expansion complete, Bisq Easy Mobile (Android full node) and Bisq Connect (Android/iOS remote client) now available as of April 2026.
- +Fifty-plus payment methods, extensive fiat on-ramp options including cash, bank transfer, and money order.
Cons
- −Recent security incident, May 2026 exploit in Bisq v1 trade protocol cost 10 users 11.59 BTC, primarily affecting altcoin trades.
- −Steeper learning curve, multisig mechanics, trade timeouts, and dispute resolution demand more technical engagement than centralized alternatives.
- −Lower liquidity, spreads and volumes typically trail major exchanges, per third-party reviewer observations.
Full review
What is Bisq
Bisq is an open-source desktop application for peer-to-peer Bitcoin trading. Unlike centralized exchanges, it operates as a distributed network of users running the software on their own machines. As of 2026-05-30, Bisq offers two main product lines: the mature Bisq v1 (latest release v1.10.0) and the newer Bisq 2 platform, which includes the simplified Bisq Easy trade protocol and mobile support. The project has no company behind it, no sign-up portal, and no central servers holding user data.
How no-KYC is it?
Bisq is fully no-KYC. No email, phone number, government ID, or any personal identifier is required to download, install, or trade. Users create offers or take existing ones pseudonymously. The software generates a local profile; reputation builds through trade history and account age witnesses rather than real-world identity. This design makes Bisq one of the few genuinely KYC-free fiat on-ramps to Bitcoin, though users should note that individual payment methods (bank transfers, etc.) may leave traces in the traditional financial system outside Bisq's control.
Privacy & security
Privacy is architecturally enforced. Every Bisq node runs as a Tor hidden service by default, concealing IP addresses. All data stores locally on-disk; nothing uploads to central servers. Trades use 2-of-2 multisig escrow where both parties must sign to release funds, with a mediator/arbitration layer for disputes.
A significant security incident occurred on May 1, 2026. An attacker using a modified client exploited missing validation checks in the Bisq v1 trade protocol, targeting active altcoin trades. Ten users suffered losses totaling 11.59104 BTC, with three traders bearing the majority. Fiat trades were unaffected due to the account age witness signing system. Bisq 2 and the Bisq Easy protocol were not vulnerable. Trading halted via emergency version enforcement, and v1.10.0 shipped with mitigations. A broader security review found no additional exploit paths for direct fund theft. Users should weigh this incident when choosing between v1 and Bisq 2.
Payments, fees & limits
Bisq supports Bitcoin trades against national currencies and alternative cryptocurrencies. The platform accommodates numerous payment methods-over 50 according to third-party estimates-including bank transfers, money orders, and cash deposits. Trading fees vary by protocol and market; makers typically pay lower fees than takers. BSQ, Bisq's colored-coin DAO token, can reduce fees for users participating in the project's decentralized governance. There are no deposit or withdrawal fees to a central entity, though on-chain Bitcoin transaction fees apply naturally. Trade limits depend on payment method risk profiles and account age, with newer accounts facing stricter caps that relax as reputation accumulates.
User experience & support
Bisq v1 runs on Windows, macOS (Intel and Apple Silicon), and Linux (Debian/Ubuntu .deb, Red Hat/Fedora .rpm, Arch AUR). Source code is available as zip or tar.gz with PGP-signed releases. Bisq 2 expands accessibility with mobile options: Bisq Easy Mobile, a full Android node using Bisq 2's Java libraries, and Bisq Connect, a lightweight remote-control client for both Android and iOS that links to a self-hosted or trusted desktop backend node.
The interface prioritizes function over polish. New users face a learning curve with multisig concepts, trade timeouts, and dispute resolution. Support channels include Matrix (bisq.chat), Telegram, GitHub issues, Reddit communities, and the Bisq forum. Third-party reviewers note Reddit and Telegram activity with communities in the 2,000-7,000 member range. Trustpilot shows 28 reviews as of recent checks. Users should remain vigilant against scammers impersonating support on social platforms.
Who it's for
Bisq suits privacy-conscious Bitcoiners seeking non-custodial, censorship-resistant trading without surrendering personal data. It appeals to technically comfortable users willing to manage their own keys, backups, and trade logistics. The May 2026 incident underscores that v1 altcoin traders currently face elevated protocol risk; those prioritizing stability may prefer Bisq Easy within Bisq 2. Bisq is less ideal for users wanting instant liquidity, advanced charting, or hands-off convenience comparable to centralized exchanges.
KYC & privacy
No account required at all.
Bisq collects zero identity data by design-no KYC, no email, no phone verification. All profile and trade data stores locally on user devices, with communication routed through Tor hidden services. The May 2026 incident did not compromise user data or wallets directly; it exploited trade protocol validation, not privacy infrastructure.
No
Custodial
No
Requires email
No
Logs IP
Verdict
Bisq remains the benchmark for no-KYC, decentralized Bitcoin trading, though the May 2026 v1 protocol exploit demands cautious protocol selection. Privacy purists and self-sovereignty advocates will find unmatched architectural commitment to anonymity; casual traders may prefer the simplified Bisq Easy experience or accept the trade-offs of centralized alternatives for convenience.
Frequently asked questions
Is Bisq no-KYC?
Does Bisq require ID or email?
What payment methods does Bisq accept?
Is Bisq safe after the 2026 hack?
Is Bisq still operating in 2026?
Can I use Bisq on mobile?
Update history
This review is monitored and refreshed regularly.
-
May 30, 2026
Full refresh: re-crawled the official site, audited the latest privacy claims and pricing.
-
May 28, 2026
Added May 2026 v1 security incident details and 11.59 BTC loss figure from official post-mortem.
-
March 9, 2026
Updated mobile section: Bisq Easy Mobile and Bisq Connect now complete per April 2026 announcement.
-
January 23, 2026
Revised protocol guidance: distinguished v1 multisig risks from Bisq 2/Bisq Easy status.
-
April 13, 2025
Initial review published.
Community reviews
9 user reviews
moneromaxi
Been using Bisq for years. The no-KYC policy isn't marketing-it's architecture. Tor by default, local data only. The May incident was rough but the team was transparent.
anon_trader
Solid for buying BTC with cash deposits. Learning curve is real though. First trade took me an hour to figure out the multisig deposit.
privacyfirst
Switched from centralized exchanges after KYC creep. Bisq Easy on Android works well enough, though I mostly use desktop for serious trades.
xmr_only
Wish Monero trading was more prominent. The v1 exploit hit altcoin trades hard. Sticking to Bisq Easy for now until protocols mature.
sat_stacker
Liquidity isn't great for large amounts but for regular DCA it's fine. Fees with BSQ are reasonable. Support on Matrix is responsive.
cypher_punk
The May hack shook my confidence. 11 BTC lost and I was in active trades that week. Team handled it okay but protocol security needs work.
fiatofframp
Only reliable way to sell BTC for SEPA without uploading my passport. Account age witness system works for building limits over time.
node_runner
Bisq Connect to my home desktop node is slick. iOS finally supported, though full node mobile is Android-only. Good compromise.
btc_newbie
Wanted to love it but UI is confusing and my first trade timed out. Probably user error but onboarding could be smoother.