XMRPool
Security model
What you have to trust, and how to check everything else yourself.
Who sees what
Trust assumptions
| Claim | Rests on | How to check |
|---|---|---|
| Nobody reads an order before the close | The drand network does not release a round signature early (threshold BLS: a majority of independent operators would have to collude) | The ciphertext header names the round; compare with the batch close |
| The batch was cleared honestly | Nothing: the computation is public and deterministic | Verify in the Batches tab |
| The server did not drop an order | Your receipt: the commitment the server returned | Your commitment must appear in the published batch |
| A swap cannot leave you with nothing | The contract and the two timeouts; the DLEq proof checked before locking | Read XmrSwap.sol; run the proof check |
| Your keys stay with you | The wallet code served by this site | Watch the network panel: only node RPC calls leave the tab |
One honest limit: the server could refuse to accept an order. It cannot accept one and then hide it, because you hold the commitment.
Alpha
The protocol code is new and has not been audited. Orders are capped at 5 XMR and the contract has a per-swap ETH cap. Use amounts you can afford to lose.
Report a bug
Send a direct message to our X account with the details. Please do not publish an issue that puts funds at risk before we have answered.