Skip to content
NoKYC Score
DirectoryExchangesSwapsBuyRatesIncidentsGuides List a project Sign in

P2P Exchanges Since 2024 Reviewed 22 Oct 2026

RetoSwap review

Largest Haveno-based Monero P2P network; exploited twice in mid-2026

  • No account needed
  • Accepts Monero
  • Never holds your funds
  • Open source
  • Accepts cash
  • Nobody accountable
ID never required KYC 0 Documentation reviewed
Visit retoswap.com Report an incident Watch

Privacy

8.9/ 10

Excellent

Safety

2.7/ 10

Poor

Based on terms and documentation. No test transactions published yet. See the arithmetic

RetoSwap review in short

RetoSwap is a P2P exchange operating since 2024. Its terms put it at KYC level 0 of 4: ID never required. NoKYC Score grades it 8.9/10 for privacy (excellent) and 2.7/10 for safety (poor). In its favour: no account needed, no email needed and no phone number. To watch: it has no publicly accountable operator. 2 incidents are on record, the latest from 17 Jun 2026.

Category
P2P Exchanges
KYC level
0 of 4: ID never required
Grades
Privacy 8.9/10, Safety 2.7/10
Sign-up
No account needed
Custody
non-custodial
Fees
0.1% maker; 0.8% crypto taker; 2% fiat taker
Jurisdiction
Decentralised / none
Incidents on record
2
Last reviewed
22 Oct 2026
Cite this review

NoKYC Score, "RetoSwap review", reviewed 22 Oct 2026, https://nokycscore.com/service/retoswap

Also available as plain text.

What RetoSwap is

RetoSwap, formerly Haveno-Reto, is the largest live network built on the Haveno protocol for peer-to-peer Monero trading. Its site describes it as open-source software without the ability to verify user identities and lists fees of 0.1% for makers, 0.8% for crypto takers and 2% for fiat takers. In May 2026 an exploit of the Haveno trade protocol drained about 7,000 XMR from traders, and in June 2026 the network suspended trading after a second exploit was reported. New client releases followed in June and October 2026, and the site showed no suspension notice when checked in October 2026.

What RetoSwap offers, and what to watch

8 of 16 privacy and safety features, 1 warning in its terms.

"Not stated" means its own pages do not say.

Identity

  • ID never required Yes The terms rule identity checks out, or the design makes them impossible.
  • No account needed Yes Usable without creating an account, or the account is only a random number.
  • No email needed Yes An email address is not required to sign up or use it.
  • No phone number Yes A phone number is never required.

Payment

  • Accepts Monero Yes Monero hides sender, receiver and amount, so the payment cannot be traced to you.
  • Accepts Lightning Not stated
  • Accepts cash Yes Cash by post or in person: no bank and no blockchain record.

Access

  • Tor onion address Not stated
  • Works without JavaScript Not stated

Trust

  • Never holds your funds Yes The operator never controls user funds, so it cannot freeze them.
  • Refund without ID Not stated
  • Escrow it cannot spend alone Not stated
  • Open source Yes The code that matters is public and can be inspected.
  • Independent audit Not stated
  • Company named No
  • 5+ years operating Not stated

Warnings

  • May ask for ID Not in terms
  • Screens deposits Not in terms
  • Holds your funds Not in terms
  • Email required Not in terms
  • Phone number required Not in terms
  • Closed source Not in terms
  • Nobody accountable Yes No company or person is publicly responsible for the service.

Does RetoSwap require KYC?

  1. 0
  2. 1
  3. 2
  4. 3
  5. 4

KYC level 0: ID never required. The terms rule out identity checks, or the design makes them impossible.

The site states RetoSwap "is merely open source software, without the ability to verify user identities".

Read the terms we assessed ↗

How the grades add up

Both grades start at 50 points and move by fixed, published amounts. Nothing is adjusted by hand. The total is divided by ten.

Privacy

8.9
  • Starting points 50
  • KYC level 0: ID never required +20
  • No registration +6
  • No email needed +3
  • No phone needed +1
  • Accepts Monero +4
  • Open source +2
  • Non-custodial +3
  • Total, clamped to 0–100 89

Safety

2.7
  • Starting points 50
  • Open source +8
  • Non-custodial +12
  • Anonymous operator -4
  • Reported second protocol-level exploit; all trading suspended high · unknown · 128 days ago -14
  • Reported exploit of the Haveno trade protocol drained about 7,000 XMR from traders critical · funds lost · 156 days ago -25
  • Total, clamped to 0–100 27

Test ledger

Real transactions run by our editors. A badge without a ledger is an assertion; this is the proof.

No test transactions published yet

The grades above rest on RetoSwap’s terms and documentation. Tests will appear here with the date, route, amount band and result as they are run.

Incidents on record

high

Hack or exploit

Reported second protocol-level exploit; all trading suspended

Press coverage reports that RetoSwap suspended all trading in mid-June 2026 after confirming that the underlying Haveno protocol was being actively exploited again, about a month after the first incident. The team is reported to have forced a minimum client version and blocked the attacker's address. The size of any loss in the second incident was not stated in the coverage reviewed. New client releases were published afterwards.

Outcome unknown Source: coingabbar.com ↗

critical

Hack or exploit

Reported exploit of the Haveno trade protocol drained about 7,000 XMR from traders

According to press reports, an attacker exploited a flaw in the Haveno trade protocol used by RetoSwap and drained roughly 7,000 XMR, about $2.7 million at the time, from trades in progress. The network operators said the flaw was in the upstream protocol rather than their own infrastructure and that fiat trades were not affected. The directory kycnot.me states that the funds were not recovered and that no reimbursement had been confirmed.

Funds lost $2.7M Source: cryptotimes.io ↗

User reviews

Reviews never change a grade. Reviews with a transaction reference are marked.

No reviews yet.

Write a review

Create an account to write a review. It takes ten seconds and needs no email: you get a random key and a random name. Already have a key? Sign in.

Alternatives to RetoSwap

All alternatives →

Bisq

Open-source desktop P2P exchange for bitcoin with no registration

Privacy 9.3
Safety 8.0
Never KYC 0 Docs reviewed

Haveno

Open-source protocol for non-custodial Monero trading over Tor

Privacy 9.2
Safety 7.3
Never KYC 0 Docs reviewed

Mostro

Open-source P2P bitcoin trading protocol over Nostr and Lightning hold invoices

Privacy 8.9
Safety 7.3
Never KYC 0 Docs reviewed

Peer

P2P fiat on/off-ramp settling through smart-contract escrow and payment-app proofs

Privacy 7.3
Safety 7.0
Not mentioned KYC 1 Docs reviewed

RetoSwap vs BisqRetoSwap vs HavenoRetoSwap vs MostroRetoSwap vs Peer

RetoSwap: common questions

Does RetoSwap require KYC?

RetoSwap is rated KYC level 0 of 4 on this site: ID never required. The site states RetoSwap "is merely open source software, without the ability to verify user identities".

Is RetoSwap safe to use?

RetoSwap has a Safety grade of 2.7 out of 10 and a Privacy grade of 8.9 out of 10. There are 2 incidents on record, listed with sources on this page. Evidence level: documentation reviewed.

Is RetoSwap legit?

RetoSwap is a working P2P exchange that has operated since 2024. Its operators do not publish a company or names, so nobody is publicly accountable for it. Being real is not the same as being safe: its Safety grade here is 2.7 out of 10, built from custody, liquidity, track record and incidents.

Is RetoSwap a scam?

NoKYC Score does not label services as scams; it records documented incidents with their sources and outcomes. RetoSwap has 2 incidents on record, 2 not resolved, the latest: "Reported second protocol-level exploit; all trading suspended". Each is listed on this page with its source.

Do I need an account or email to use RetoSwap?

No account needed.

What fees does RetoSwap charge?

0.1% maker; 0.8% crypto taker; 2% fiat taker. Fees were recorded from RetoSwap's own pages and can change; check before you send.

Does RetoSwap have a Tor onion address?

No official onion address was found on RetoSwap's own pages.

Which cryptocurrencies does RetoSwap support?

RetoSwap supports XMR, BTC, ETH, USDT, and fiat payments in EUR, USD.

Is RetoSwap custodial?

No. RetoSwap is non-custodial: the operator does not control user funds.

Can I use RetoSwap over Tor?

RetoSwap does not publish an official onion address.

Listing history

  • Listing added. Facts and KYC level set from the service's own terms and documentation.
  • Incident recorded: Reported exploit of the Haveno trade protocol drained about 7,000 XMR from traders
  • Incident recorded: Reported second protocol-level exploit; all trading suspended