RetoSwap

What is RetoSwap

RetoSwap is a decentralized, non-custodial peer-to-peer exchange built on the Haveno protocol for trading Monero (XMR) and Bitcoin (BTC). The platform routes all connections through Tor and generates private keys locally on the user's device, meaning RetoSwap never takes custody of funds. The software is open-source under AGPL-3.0, allowing public code verification. As of 2026-05-30, the service claims 19,000+ completed swaps on its network.

How no-KYC is it?

RetoSwap is marketed as "Guaranteed no KYC" and does not require identity verification, email, or phone number to trade. Users create a locally-stored trade account profile that is only shared with the specific trade counterparty. The platform supports cash trades and crypto-to-crypto swaps without intermediary custody. No-deposit offers are available to solve the typical security deposit chicken-and-egg problem for new users.

Privacy & security

Privacy claims center on Monero's blockchain confidentiality combined with Tor network routing for all connections. However, serious security and privacy concerns have emerged. In May 2026, RetoSwap suffered a $2.7 million exploit (~7,000 XMR) when attackers hijacked multisig wallets during the wallet creation process by exploiting vulnerabilities in the Haveno trading protocol. The platform suspended trading following the incident. Additionally, third-party research from Weizenbaum Institute, TRM Labs, and TU Berlin has challenged RetoSwap's privacy protections, suggesting the platform may not provide the anonymity it advertises and that approximately 90% of liquidity involves traceable BTC-XMR swaps. Multiple security vendors have blacklisted RetoSwap.com with low trust scores.

Payments, fees & limits

RetoSwap uses a maker-taker fee model: 0.1% maker fee, 0.8% crypto taker fee, and 2% fiat taker fee. Supported payment methods include cash and various cryptocurrencies, with Monero as the primary trading pair. The platform requires a 15% security deposit from vendors publishing sell offers, though no-deposit alternatives exist for buyers.

User experience & support

RetoSwap operates through a desktop client application rather than a web interface, available for multiple operating systems. The onboarding process involves three steps: download and install the client, fund the non-custodial Monero wallet or accept a no-deposit offer, then begin trading. Support channels include SimpleX messaging and a FAQ section. Community feedback on the interface is generally positive when operational, citing clean design and smooth processes.

Who it's for

RetoSwap suits privacy-focused users seeking non-custodial Monero trading without KYC, particularly those comfortable with desktop applications and P2P trade coordination. However, the May 2026 exploit and ongoing trading suspension make it unsuitable for active trading until security remediation is completed and independently verified. Users prioritizing operational reliability may prefer established alternatives like Bisq or newer protocols like Serai DEX.

Verdict

RetoSwap represents an ambitious attempt at maximally private cryptocurrency exchange but faces critical trust questions following the May 2026 security breach. The open-source foundation and genuine no-KYC architecture remain theoretically sound, yet the Haveno protocol vulnerability and subsequent fund losses demonstrate significant unaddressed risks. Privacy researchers have additionally questioned whether the platform's anonymity claims hold against sophisticated blockchain analysis.