How to swap Monero (XMR) safely

Monero swaps now live mostly outside the big centralized exchanges: OKX delisted XMR in January 2024, Binance in February 2024, and Kraken pulled it for European Economic Area customers in October 2024. The safe routes today are non-custodial — Haveno’s peer-to-peer multisig escrow, BTC↔XMR atomic swaps — plus reputable no-account instant exchanges for convenience. The rules that matter: keep your own wallet, verify the destination address, prefer fixed rates with a refund address, and send a test amount before moving size.

Why swapping XMR is different

Monero is private by default. Ring signatures, stealth addresses, and confidential amounts mean an outside observer cannot see who paid whom or how much — there is no “transparent mode” to fall back on. That is the point of the asset, and it is also why the plumbing around it looks nothing like ETH or SOL plumbing. Chain-surveillance tooling, the backbone of exchange compliance programs, does not work on XMR flows, so venues that must run those programs increasingly choose not to carry the asset at all.

Two structural consequences follow. First, there is no trust-minimized wrapped XMR: Monero has no smart-contract layer to anchor a light client, so every “wrapped XMR” token on another chain is a custodial IOU — someone is holding the real coins, and you are trusting them. Second, XMR liquidity fragmented into non-custodial and no-account venues after the delistings, which makes venue selection the single biggest risk decision in any Monero swap.

It is worth being precise about why people hold and swap XMR in the first place: financial privacy is a normal commercial and personal need. A business does not want suppliers reading its treasury, an employer does not want a payroll payment exposing every salary on a public ledger, and individuals in unstable places have real personal-safety reasons not to broadcast their balances. None of that exempts anyone from the rules: wherever you live, you must comply with local laws, use regulated channels where your jurisdiction requires them, and report and pay taxes on your disposals. This guide compares non-custodial, no-account venues as a category; it is not advice to avoid identity checks where the law requires them.

The delisting map, briefly

The recent wave, verified: OKX removed XMR (alongside Zcash and Dash) with trading ending in early January 2024. Binance announced in early February 2024 that it would delist XMR effective February 20, 2024, and later force-converted remaining balances. Kraken halted XMR trading for EEA-registered clients on October 31, 2024, citing MiCA-era regulatory changes, with residual balances converted to BTC after the withdrawal window closed at year-end. Availability elsewhere varies by venue and jurisdiction and keeps shrinking, so check current status before relying on any listed market. The pattern is regulatory, not technical — and it is the reason the rest of this guide is about non-custodial routes.

The safe routes today

Haveno (P2P multisig escrow)

Haveno is a decentralized peer-to-peer exchange protocol built on Monero and Tor — the spiritual successor to LocalMonero, forked from Bisq’s design. Trades settle through a 2-of-3 multisig escrow: buyer, seller, and an arbitrator each hold a key, both sides post an XMR security deposit, and the arbitrator only intervenes on dispute. It is non-custodial end to end and supports both crypto and fiat payment legs. The protocol itself does not run a network; third-party networks such as RetoSwap (formerly Haveno-Reto) operate live instances. Trade-offs: liquidity is offer-dependent, size is small-to-mid, and the fiat payment leg carries ordinary P2P counterparty friction.

BTC↔XMR atomic swaps

Bitcoin–Monero atomic swaps (the COMIT-style protocol) execute trustlessly: cryptography, not a venue, guarantees that either both legs settle or neither does. This is the most trust-minimized XMR route that exists. It is also the least convenient — tooling is still largely command-line, maker liquidity is thin, and quotes are limited. Worth knowing as the benchmark for what “no counterparty” actually means, practical mainly for patient, technical users at modest size.

Instant exchanges and RFQ desks

No-account instant exchanges (the StealthEX-class of venues) quote you a rate, take custody for the minutes the swap runs, and pay out to your address. They are the convenience route: fast, simple, decent size. But you are trusting the operator for the duration of the swap, so selection is everything. A reputable venue in this category screens the transparent-chain leg of your swap and publishes a real AML policy — some flows can be held pending checks. That is what a venue that intends to still exist next year looks like; a venue advertising that it will never ask questions is the red flag (see eXch, below).

Protocol corridors: not yet

Neither of the two big native cross-chain protocols runs a live XMR corridor as of mid-2026. THORChain has never supported XMR in production; its native Monero integration entered final testing after a June 2026 roadmap announcement, shortly after the protocol restarted from a 39-day halt caused by a roughly $10.7M exploit of its signing system. Maya Protocol, a THORChain fork, does run native corridors for privacy-adjacent assets — Zcash and Dash trade natively against BTC and ETH — and its team has publicly discussed Monero integration for years, but we could not verify a live native XMR corridor on Maya as of publication. Treat any interface offering “XMR on Maya” or “XMR on THORChain” with suspicion until you have confirmed it against official protocol docs. For how these corridors work mechanically, see our pillar on how cross-chain swaps work.

The routes, compared

How to read a row → Instant exchange / RFQ desk · custodial for minutes · no account · mid size: fast and simple, but you trust the operator for the length of the swap — so the main risk is venue selection; a reputable one screens the transparent leg and publishes an AML policy.

What to check before using any venue

• “No logs” claims are unverifiable. You cannot audit a venue’s retention from the outside, and seizures happen — assume anything an operator can log, it does. Judge venues on custody model and track record, not privacy marketing.
• Fixed vs floating rate. A fixed rate transfers volatility risk to the venue for the quote window and gives you a number to hold it to; a floating rate can reprice against you mid-swap. For anything but trivial size, prefer fixed — a guaranteed minimum received is the property that makes a quote accountable. It is the property to insist on — a guaranteed minimum received, so the quote you accept is the floor on what arrives.
• Refund address support. If a swap fails or is held, where does the money go? A venue that lets you set a refund address before you send has a failure path; one that does not is asking you to open a support ticket for your own funds.
• Min/max limits and real liquidity. Check that your size clears the minimum and does not brush the maximum — quotes near a venue’s max are where slippage and “manual processing” live.
• A published AML policy. Counterintuitive but true: for custodial-for-minutes venues, a real compliance page is a longevity signal. Venues that advertise having none tend to end up as evidence (again: eXch).

Operational hygiene

Receive to your own wallet. Official GUI/CLI, Feather, or Cake are the standard choices; a swap that pays out to an exchange account defeats the purpose and adds a custodian. Verify the destination address on the receiving device, not from your clipboard — clipboard-hijacking malware is a real and boring way to lose funds. Send a test amount first for any size that would hurt: one small swap end-to-end validates the route, the refund path, and your own addresses for the cost of a second fee. Expect the 10-block lock: incoming XMR is spendable only after 10 confirmations, roughly 20 minutes — a swap that seems stuck is often just Monero being Monero. And mind legacy deposit formats: a few older venues still credit deposits via a payment ID inside an integrated address; send without it and you are in manual-recovery territory.

What goes wrong: risks and the eXch lesson

The failure modes are consistent across years of user reports: exit scams (a venue accumulates deposits, then disappears — custodial-for-minutes becomes custodial-forever), stuck swaps (floating-rate repricing disputes, holds without a refund address, or simple operational failure), and address mistakes (wrong destination, missed payment ID on a legacy venue, or no refund address set when the swap bounces). Every item in the checklist above maps to one of these.

The venue-selection lesson has a name: eXch. On April 30, 2025, Germany’s BKA — working with Frankfurt prosecutors and Dutch FIOD — seized the infrastructure of eXch, a swap service that had operated since 2014 and openly advertised on underground forums that it ran no anti-money-laundering measures. Authorities seized about €34M in crypto and roughly 8 terabytes of data, alleging around $1.9B laundered through the service, including proceeds from the Bybit hack. Note what that means for ordinary users who touched it: the “no logs” promise ended as an 8TB data seizure. A venue that markets itself on lawlessness concentrates criminal flow, becomes a law-enforcement priority, and takes its users’ history down with it. Choosing boring, screened, published-policy venues is not a compromise of financial privacy — it is how you keep it.

FAQ

Why did Binance, OKX and Kraken delist Monero?

Monero is private by default, which makes the chain-surveillance monitoring that AML rules expect impractical. OKX delisted XMR in January 2024, Binance in February 2024, and Kraken removed it for European Economic Area customers on October 31, 2024, citing MiCA-era regulatory changes. Holding XMR remains legal in most jurisdictions.

What is the safest way to swap Monero?

Non-custodial routes carry the least venue risk: Haveno’s multisig escrow for P2P trades and BTC-XMR atomic swaps for trust-minimized execution. For convenience, a reputable no-account instant exchange is acceptable if you use a fixed rate, set a refund address, and send a test amount first.

Does THORChain or Maya Protocol support native XMR swaps?

Not in production as of mid-2026. THORChain’s native XMR integration was in final testing after its June 2026 roadmap announcement, and Maya Protocol — which runs native Zcash and Dash corridors — has discussed Monero for years without a live corridor we could verify. Confirm against official docs before sending funds anywhere.

What happened to the eXch exchange?

Germany’s BKA seized eXch’s infrastructure on April 30, 2025, taking about 34 million euros in crypto and 8 terabytes of data. Authorities allege roughly 1.9 billion dollars was laundered through the service, including proceeds from the Bybit hack. Its no-questions-asked marketing is exactly the red flag this guide tells you to avoid.

Are Monero swaps taxable?

In most jurisdictions a crypto-to-crypto swap is a taxable disposal, and privacy technology does not change that. Keep your own records and comply with the tax rules where you live.

The TT desk thoughts

The XMR market is the cleanest case study we know of liquidity being regulated out of one venue class and reappearing in another: the 2024 delistings did not shrink Monero flow, they moved it to P2P escrow and no-account instant venues — and in doing so made venue selection, not price, the trade. Our working rule for XMR execution is inverted from most assets: on ETH you shop for basis points, on XMR you shop for the counterparty that will still exist and still pay out next quarter, and only then look at the rate. The eXch seizure made that concrete — the cheap, no-questions venue was also the one that ended as a BKA evidence locker.

The structural event to watch is THORChain’s XMR corridor going live. A real native protocol route — non-custodial vaults, pool pricing, no operator to select — would compress instant-exchange spreads and pull the venue-selection problem into smart-contract risk instead, which is at least a risk you can read. Until it ships (and until Maya’s long-discussed integration is verifiably live), the checklist above is the whole game.

Keep reading

How cross-chain swaps work — the pillar · BTC to XMR: the routes · Cross-chain swap vs bridge · Infrastructure hub · Crypto regulation impact analysis · All notes