Monero en Septiembre el 2025

cripto monero
,
1

Repost desde /r/monero, publicado por MasteringMonero:

MONERO SECURITY

For a couple of weeks now Monero is facing an orchestrated media campaign claiming a dubious 51% attack.

State actors (see Qubic’s ties for reference) use a mining pool that gathered up to 38% of the hashes to utilise a “selfish mining attack” that is known to work if one or more cooperating miners/pools reache roughly 1/3 of the hashrate.

Many people ask what they can do to help resolve the situation in the short, mid and long term.

Some people jump to fast conclusions that involve changing the PoW algo with unknown and potentially unintended consequences.

Calls for consenus change need to be taken very seriously, especially since it is understood to be a social engeneering attack vector in itself.

:backhand_index_pointing_right: So the most obvious answer is honest mining by everybody who has a material or immaterial stake in Monero.

However there is an ongoing price suppression attack against Monero for well over half a decade using the biggest CEX to manipulate prices as low as possible - thanks to naked shorting (issuing paper coins) against their users claims.

This partially breaks miner incentives and has a direct impact on the global hashrate aka the security budget of the Monero network.

The most effective and easiest way may therefore be withdrawing all user owned Monero funds from CEX be it Kraken, KuCoin or Bitfinex (you shouldn’t use any other CEX anyways!)

Doing your part can be as easy as withdrawing coins to a wallet you yourself control and spread the message to other people, friends and family who might not be aware of the situation or their silent contribution to the ongoing attack.

STATISTICS

DEX Liquidity
RetoSwap 7.7K XMR (~$2.3M)
Eigenwallet 2.7 BTC (~$0.3M)

STATE OF THE MONERO EXCHANGE ECOSYSTEM

Caveat: This is a well crafted, extensive list of all major exchanges dealing (or pretending to) in Monero.

If you can not find your go to exchange on this list treat it as “extremely high risk” and a potential scam.

This list gets updated as new information becomes available. At the end you will find some recommendations for exchanges and wallets.

USE CUSTODIAL CEX AKA “CRYPTOBANKS” WITH EXTREME CAUTION

Only day traders should use these third parties for their trading stack and ideally withdraw after closing a position.

Newcomers should make themselves comfortable with hardware wallets before buying on a CEX and always and immediately withdraw, what they bought.

Custodial CEX Fractional reserve risk XMR status - AVOID
:no_entry: Gate Extremely high :warning: + KYC risk :warning: + Scam alert :cross_mark: (“delisted” 12/2024) :prohibited: withdrawals closed > months *KYC since 01/24
:no_entry:HitBTC Extremely high :warning: + Scam alert :cross_mark: :prohibited: withdrawals closed > years
:no_entry: Huobi/HTX Extremely high :warning: + Scam alert :cross_mark: :prohibited: withdrawals closed > months (despite claims of being “operational”; delisted 09/22, but since “relisted” a trading pair)
:no_entry: MEXC Extremely high :warning: + KYC risk :warning: + Scam alert :cross_mark: :prohibited: withdrawals closed > months incidents with XMR, partial *KYC since 02/24
:no_entry: Poloniex Extremely high :warning: + Scam alert :cross_mark: :prohibited: withdrawals closed > years (despite claims of being “operational”)
:no_entry: WhiteBIT Extremely high :warning: + Scam alert :cross_mark: :prohibited: withdrawals closed > months
:no_entry: XT.COM Extremely high :warning: + KYC risk :warning: + Scam alert :cross_mark: :prohibited: withdrawals closed > months incidents with XMR
CoinEx Extremely high :warning: + KYC risk :warning: :prohibited: withdrawals closed > months incidents with XMR, ARRR, *KYC since 01/24
KuCoin Extremely high :warning: + KYC risk :warning: :prohibited: withdrawals closed > months regular incidents with XMR, *KYC since 01/24
NonLogs Extremely high :warning: relatively unknown, centralized server :warning:, untrusted operator​:warning:
Binance Extremely high (delisted 02/24) :prohibited: withdrawals permanently closed (despite claims to be open for 3 months from delisting)
OKX Extremely high (delisted 01/24) :prohibited: withdrawals permanently closed (despite claims to be open for 2 months from delisting)
Waves “DEX” Extremely high (delisted 03/2022) :prohibited: withdrawals permanently closed (despite claims to be open for 1 week from delisting)
Bittrex Extremely high (delisted 01/2021) insolvency
Custodial CEX Fractional reserve risk XMR status - USE WITH EXTREME CAUTION
Bitfinex High :warning: + KYC risk :warning: incidents with XMR
:no_entry: Tradeogre High :warning: + Scam alert :cross_mark: (non-operational 07/2025) incidents with KAS and DOGE, potential exit scam
Custodial CEX Fractional reserve risk XMR status - USE WITH CAUTION
Kraken Medium + KYC risk :warning: :prohibited: deposits and witdrawals limited, :warning: delisted in EU, UK, JP, AUS, UAE, CA
Newton Medium (delisted 06/2021 ) :prohibited: withdrawals permanently closed
Custodial CEX Fractional reserve risk XMR status - USE IF ANONYMITY IS NOT A CONCERN
n/a n/a n/a

USE NON-CUSTODIAL CEX AKA “INSTANT SWAP EXCHANGES” WITH CAUTION

Centralized instant swap exchanges come with their own set of problems.

Despite them ideally being just one step between a trade from one self-custodial wallet to another they still function as a third party that can hold or freeze transactions temporarily or permanently.

To combat KYC and confiscation/theft of funds risk it is recommended to use them only for smaller amounts. Taking risks into account they can be used to route around CEX/CRYPTOBANKS.

Be aware that instant swap exchanges often come with higher fees, shotgun KYC or are selective scams like “Changelly”.

Most of them depend on external liquidity (or are fronts for CEX), which means they will halt or freeze trades just as often as CEX (main culprits are ChangeNow and FixedFloat).

In times of bigger market movements many of those sites will abandon trades that are not favorable to them.

You can use an aggregator like Trocador.app (:locked: .onion / :locked: .i2p) that has a security bond for transactions of up to $1000 and gives you a clear indication about competitive pricing and KYC risk. Another aggregator is CypherGoat (:locked: .onion / :locked: .i2p)

Other reputable resources to evaluate exchange risk are

Non-custodial CEX Instant exchange risk status - AVOID
:no_entry: Changelly Extremely high :warning: + Scam alert :cross_mark: :warning: confirmed selective scam
:no_entry: Moleswap Extremely high :warning: :warning: confirmed scam, relatively unknown
:no_entry: SwapPix Extremely high :warning: + KYC risk :warning: + Scam alert :cross_mark: :warning: confirmed selective KYC scam, relatively unknown
:no_entry: Swapuz Extremely high :warning: + KYC risk :warning: + Scam alert :cross_mark: :warning: confirmed selective KYC scam
Alfacash Extremely high :warning: :warning: potential scam, proof of reserves, own liquidity pool
BitSwitsch Extremely high :warning: + KYC risk :warning: relatively unknown
CCE Cash Extremely high :warning: + KYC risk :warning: relatively unknown
ChainSwap Extremely high :warning: + KYC risk :warning: relatively unknown
Changee Extremely high :warning: + KYC risk :warning: relatively unknown
ChangeHero Extremely high :warning: + KYC risk :warning: relatively unknown
ChangeNow Extremely high :warning: + KYC risk :warning: :warning: confirmed selective KYC scam, liquidity problems with long holds on funds
ChipEX Extremely high :warning: + KYC risk :warning: relatively unknown
CoinCraddle Extremely high :warning: + KYC risk :warning: relatively unknown
CoinSpace Extremely high :warning: one way (buy XMR only)
CoinSwap.click Extremely high :warning: + KYC risk :warning: :warning: MITM attack risk via clearnet (Cloudflare), relatively unknown
CrowSwap Extremely high :warning: :warning: potential scam, relatively unknown, proof of reserves, own liquidity pool
Exchang.io Extremely high :warning: + KYC risk :warning: relatively unknown
ExWell Extremely high :warning: + KYC risk :warning: relatively unknown
FairTrade (:locked: .onion) Extremely high :warning: Tor only, relatively unknown
FixedFloat Extremely high :warning: + KYC risk :warning: liquidity problems (has been halting Monero operations for months, before)
GoExme Extremely high :warning: + KYC risk :warning: relatively unknown
Hellex Extremely high :warning: + KYC risk :warning: relatively unknown
Nanswap Extremely high :warning: + KYC risk :warning: relatively unknown
Ninja.Exchange Extremely high :warning: relatively unknown
OctoSwap Extremely high :warning: + KYC risk :warning: relatively unknown
Pegasusswap Extremely high :warning: + KYC risk :warning: relatively unknown
Quickex Extremely high :warning: + KYC risk :warning: relatively unknown
SecureShift Extremely high :warning: + KYC risk :warning: relatively unknown
ShapeBTC Extremely high :warning: + KYC risk :warning: relatively unknown
Silent.Exchange Extremely high :warning: + KYC risk :warning: relatively unknown
Soldinchange Extremely high :warning: + KYC risk :warning: relatively unknown
Swaponix Extremely high :warning: + KYC risk :warning: relatively unknown
SwapSwop Extremely high :warning: + KYC risk :warning: relatively unknown
Swapter Extremely high :warning: + KYC risk :warning: :warning: potential scam, liquidity problems
VigorSwap (:locked: .onion) Extremely high :warning: relatively unknown
XGram Extremely high :warning: + KYC risk :warning: relatively unknown
Zeroslip Extremely high :warning: :warning: potential scam, relatively unknown
MajesticBank (:locked: .onion) Extremely high :warning: (winded down 07/2025) :warning: potential scam, inconsistencies
CoreSwap Extremely high :warning: (exit scammed 05/2025) “trusted” atomic swaps, relatively unknown
Non-custodial CEX Instant exchange risk status - USE WITH EXTREME CAUTION
AtomicMonero High :warning: unresolved incident, “trusted” atomic swaps
Exolix High :warning: + KYC risk :warning:
Godex High :warning: + KYC risk :warning: liquidity problems
Houdini Swap High :warning: + KYC risk :warning:
Letsexchange High :warning: liquidity problems, blocks Tor
NonKYC High :warning: proof of reserves, own liquidity pool
SimpleSwap High :warning: + KYC risk :warning:
StealthEX High :warning: + KYC risk :warning:
XChange.me (:locked: .onion) High :warning: :warning: MITM attack risk via clearnet (Cloudflare)
Guardarian High :warning: (delisted 07/2025) fiat trades
Nokyc.Pro High :warning: (winded down 10/2024) one way (buy XMR only), no known incidents, own liquidity pool
MorphToken High :warning: (winded down 04/2022) blocked Tor and VPN connections
Non-custodial CEX Instant exchange risk status - USE WITH CAUTION
BitcoinVN Medium no known incidents, own liquidity pool
Wizardswap (:locked: .onion) Medium no known incidents, proof of reserves, own liquidity pool
Exch.cx (:locked: .onion) Medium (ceased operations 05/2025) :warning: tainted BTC, ETH, no known incidents, proof of reserves, own liquidity pool
Sideshift.ai Medium (delisted 10/2023)
XMR.to (:locked: .onion) Medium (winded down 01/2021) no known incidents, one way (sell XMR only)
Shapeshift Medium (delisted 11/2020)
Anycoindirect Medium (delisted 10/2020) no known incidents, fiat trades

Satoshi taught us not to entrust our money with third parties.

Not your key, not your coins

Crypto is all about control over your own money. If you don’t self-custody, it means you entrust your stack, in some cases your life savings, with a third party that may or may not have ulterior motives, may or may not be a scam or may or may not be controlled or extorted by a rogue government.

The process of learning to become self-sovereign might include some pain. But as crypto history shows us, keeping “your” coins in the hands of a custodian is a 100% guarantee to set yourself and the community up for failure.

What exchanges to use then?

There are plenty of better (more secure, private, trustless) however still more inconvenient solutions that are preferable over using KYC/CEX. Those often come at a higher price as security and privacy have a price, but not necessarily at a lower speed. Indeed starting from zero, signing-up for a cumbersome and intimidating KYC process will often take days or weeks sometimes placing holds on funds while a DEX like Haveno will give you access to coins in under an hour and coming at the benefit of not giving up your right to privacy.

Exchanges Trust level Exchange method Remarks
BasicSwapDEX High Desktop Atomic swaps open source, :white_check_mark: trustless
Bisq v1 High Desktop P2P DEX (:locked: Tor only) open source, TailsOS support, escrow + security deposit, arbitration
Eigenwallet fka UnstoppableSwap (:locked: .onion) High Desktop Atomic swaps open source, :white_check_mark: trustless
RetoSwap (based on Haveno) High Desktop P2P DEX (:locked: Tor only) open source, TailsOS support, escrow + security deposit, arbitration
Robosats (:locked: .onion) Medium Web P2P market open source, “Lightning network” based market place
Paxful Medium Web P2P market centralized server :warning:
AxeSwap Experimental Atomic swaps open source, orderbook trading
DawnSwap (based on Haveno) Low (*relatively new) Desktop P2P DEX (:locked: Tor only) open source, TailsOS support, escrow + security deposit, arbitration
SeraiDEX (alpha) n/a AMM (automatic market makers) open source, liquidity providers exposed to potential hacks
AgoraDesk (:locked: .onion / :locked: .i2p) High (winded down 05/2024) Web P2P market centralized server :warning:, closed down
LocalMonero (:locked: .onion / :locked: .i2p) High (winded down 05/2024) Web P2P market centralized server :warning:, closed down
Samourai Wallet High (ceased operations 04/2024) Mobile Atomic swaps open source, :white_check_mark: trustless

Not trusted - AVOID until further notice

Exchanges Trust level Exchange method Remarks
Bitania (:locked: .onion) Low Web P2P market relatively unknown, centralized server :warning:, untrusted operator​:warning:
Bitpapa Low Web P2P market relatively unknown, centralized server :warning:, untrusted operator :warning:
Bitrica (:locked: .onion) Low Web P2P market relatively unknown, centralized server :warning:, untrusted operator :warning:
OpenMonero (:locked: .onion / :locked: .i2p) Low Mobile, Web P2P market open source, relatively unknown, centralized server :warning:, untrusted operator​:warning:, hacked and deposits stolen
XMRGlobal (:locked: .onion) Low Web P2P market relatively unknown, centralized server :warning:, untrusted operator :warning:

Alternative ways of acquiring Monero

It may sound strange to list alternative methods of acquiring Monero in a post about exchanges.

However it can not be repeated enough that Monero as electronic cash is not dependent on any exchanges.

You can acquire it by various different means e.g. by mining or by offering services or products like with every other currency.

The Monero community actively encourages the use as currency in every day transactions to make a circular economy happen for everybody.

Software / Service Trust level Method Remarks
Gupax High Mining (“buy” via electricity) :white_check_mark: trustless, P2Ppool support
Gupaxx High Mining (“buy” via electricity) :white_check_mark: trustless, P2Ppool support
XMRrig High Mining (“buy” via electricity) :white_check_mark: trustless
Monero GUI High Mining (“buy” via electricity) :white_check_mark: trustless, P2Ppool support, significantly less efficient than the other options
xmrbazaar High Earning (“buy” via products and services) uses escrow to avoid scams
Monero Market Medium winded down 05/2025) Earning (“buy” via products and services) uses escrow to avoid scams

What can you do?

If you are into cryptocurrencies for more than just some side gamble you really want to learn how to use the right tools to manage your money in a self-sovereign and self-custodial way.

The more people learn about the risks involved and how to mitigate them the better for you and the health of the whole ecosystem.

Self-sovereignty starts with the wallet you use.

*Be aware that different risks apply to the security of your operating system.

To learn more about operational security the OPSEC Bible (Tor) is a great place to start for beginners and security professionals alike.

Do not store significant amounts on desktop, mobile or web wallets! Always use an air-gapped storage method for significant amounts.

Wallet Trust level Type Remarks
AnonNero High Mobile, Hardware open source, air-gapped
CakeWallet / Monero.com High Mobile, Desktop :locked: .onion support, open source, Ledger support
Featherwallet (:locked: .onion / :locked: .i2p) High Desktop :locked: .onion support, open source, TailsOS support, Trezor, Ledger support
KeepKey High Hardware open source
MMGen Wallet (:locked: .onion / :locked: .i2p) High Desktop open source
Monero CLI High Server, Desktop :locked: .onion / :locked: .i2p support, open source, Trezor, Ledger support
Monero GUI High Desktop :locked: .onion / :locked: .i2p support, open source, Trezor, Ledger support
Monerujo High Mobile :locked: .onion support, open source, Ledger support
Monfluo fka MySu High Mobile :locked: .onion / :locked: .i2p support, open source
Passport Prime High Hardware open source
StackWallet / Stack Duo High Mobile, Desktop :locked: .onion support, open source
Trezor High Hardware open source
XMRSigner High Hardware open source, air-gapped
Coin Wallet (:locked: .onion) Medium Mobile, Desktop, Web :locked: .onion support, open source
Edge Medium Mobile open source, :warning: privacy risk / exposure of viewkeys (use with your own LWS instance instead), :warning: no seed generation (trusted self-custody)
Ledger Medium Hardware :warning: not open source, :warning: “Ledger Recovery” has potential access to your seeds (except abanoned Nano S)
MyMonero Medium Mobile, Desktop, Web open source, :warning: privacy risk / exposure of viewkeys (use with your own LWS instance instead)
Unstoppable Wallet Medium Mobile open source, :warning: privacy risk due to built in trackers
XMRWallet.com (:locked: .onion) Medium Mobile, Web open source, :warning: privacy risk / exposure of viewkeys (use with your own LWS instance instead), :warning: be ware the affinity scams, :warning: no updates > 1 year
Cupcake (beta) Experimental Mobile open source, air-gapped
Cuprate (beta) Experimental Server, Desktop open source, Rust Monero implementation

Not trusted - AVOID until further notice

Wallet Trust level Type Remarks
:no_entry: FreeWallet Extremely low :warning: + Scam alert :cross_mark: Mobile :warning: known scam
EliteWallet Extremely Low Mobile :warning: inconsistencies / potential scam, :warning: no updates > 1 year
AtomicWallet Low Mobile, Desktop, Web :warning: not open source, :warning: > $100M funds got lost in hack
Coinomi Low Mobile, Desktop, Web :warning: not open source
Guarda Low Mobile, Desktop, Web :warning: not open source
Exodus Low (delisted 08/25) Mobile, Desktop, Web :warning: not open source, Trezor, Ledger support
Zelcore Low (delisted 01/24) Mobile, Desktop, Web :warning: not open source, Trezor, Ledger support