RetoSwap
5.7/10 total
The only Haveno fork that has ever carried real trading volume, renamed from Haveno-reto in November 2024, with Monero as the base pair and 2-of-3 multisig escrow instead of atomic swaps. Two exploits of the underlying Haveno trade protocol hit it in 2026: around 7,000 XMR, roughly 2.7 million dollars, was stolen from mid-May, and a second active exploitation on 17 June 2026 caused trading to be suspended again. Do not open a trade without first confirming from the project's own channels that trading has resumed and which client version is required.
Scores
Weights are published in the method and applied identically to every entry.
For
- Tor-only desktop and Android client with no account, no email and no verification path in the software
- Supports fiat legs including SEPA, cash by mail and payment apps, which few non-custodial venues do at all
- Monero is the base pair, so the privacy-relevant leg of every trade is shielded by default
- Open source, and the team's incident response was fast and public: the attacker's onion address was banned two minutes after detection
- Upstream Haveno itself never ran live mainnet trading, so this is the only place the software is actually usable
Against
- Two protocol exploits in 2026 with about 2.7 million dollars in XMR stolen and unrecoverable; trading was suspended on 17 June 2026 and this entry could not confirm it has resumed
- The root cause was an arbitrator-impersonation flaw in Haveno's ACK handling during multisig setup, meaning the escrow model itself failed rather than a peripheral component
- Not atomic: funds sit in a 2-of-3 multisig with a third-party arbitrator as a signer, so the trust assumption is materially weaker than a real atomic swap
- The public homepage still shows completed-swap marketing figures and an older client version with no visible incident banner, so the site is not a reliable status indicator
- Requires locking a security deposit and waiting out a manual counterparty, so it is slow and capital-inefficient next to an instant swapper
Agent access 2/10
Haveno's daemon exposes a gRPC API, but trades need a human counterparty, manual fiat settlement on many pairs and a deposit, and trading was suspended at the time of checking. Not usable unattended.
Reported separately and not counted in the total. It measures what an autonomous agent can do unattended, not whether the service is safe to use.
Fees
0.1% maker, 0.8% crypto taker, 2% fiat taker
Fees are as published on retoswap.com: 0.1% maker, 0.8% taker on crypto pairs and 2% taker on fiat pairs, plus a security deposit locked for the trade duration. On fiat pairs the counterparty's own premium over spot is usually larger than the fee itself.
Specification
- Type
- Peer-to-peer
- KYC policy
- No KYC
- Custody model
- escrow
- Account required
- no
- Assets
- 6 crypto plus fiat
- Chains
- 5
- Operating since
- 2024
- Jurisdiction
- undisclosed
- Onion service
- yes
- Works without JS
- yes
- Open source
- yes
- Facts checked
- 2026-07-31
Links
Plain links, no referral parameters. Verify the domain yourself; phishing clones of every service in this table exist.