RetoSwap review 2026 covers the largest Haveno fork for non-custodial Monero P2P trading, including fees, liquidity data, 2026 exploits, and security trade-offs.
RetoSwap functions as the most prominent public mainnet fork of the Haveno protocol, delivering a Tor-based P2P exchange focused on Monero. Originally operating as Haveno-reto, the project rebranded to RetoSwap around November 22, 2024, and now runs at retoswap.com.
The platform follows a strictly non-custodial model. Every trade uses 2-of-3 multisig escrows involving the maker, taker, and an arbitrator, while all funds remain in user-controlled local wallets. The exchange software never holds custody of assets.
This setup sets RetoSwap apart from centralized exchanges, which require users to deposit funds into platform accounts and typically impose KYC. RetoSwap instead routes all communication and settlement over Tor and imposes no KYC requirement from the software itself, preserving the core privacy and decentralization goals of the Haveno design.
RetoSwap operates as a non-custodial P2P exchange built on the Haveno protocol, routing all activity over Tor. Traders post offers for XMR paired with BTC, ETH, LTC, BCH or stablecoins such as USDT on Ethereum and Tron. Fiat options include SEPA/ACH, PayPal, CashApp, cash-by-mail and in-person cash. The software itself imposes no KYC requirement.
Every trade uses a 2-of-3 multisig escrow involving the maker, taker and an arbitrator. Funds stay in the participants’ local wallets throughout; the platform never receives custody. A 15 % security deposit is required, so a maker selling XMR must commit 115 % of the trade amount upfront.
Current fees, listed on the site, are 0.1 % for makers, 0.8 % for crypto takers and 2 % for fiat takers. These charges replaced an earlier zero-fee period and are intended to fund ongoing Monero and Haveno development.
RetoSwap’s offer book reached a new all-time high of over 500 individual buy and sell Monero P2P offers on 7 September 2026, according to the project’s X account. Earlier snapshots show liquidity of approximately 22,792 XMR spread across roughly 500 offers on 13 March 2026. These figures come directly from posts on https://x.com/RetoSwap and reflect the platform’s position as the largest public Haveno instance.
| Metric | Value | Date | Source |
|---|---|---|---|
| Offer book size | >500 offers | 7 Sep 2026 | https://x.com/RetoSwap |
| XMR liquidity | ~22,792 XMR | 13 Mar 2026 | https://x.com/RetoSwap |
| Monthly volume | 122,606 XMR (~$47.5M) | Oct 2025 | https://x.com/RetoSwap/status/1988968848989565091 |
| Completed trades | 14,000+ | mid-Nov 2025 | https://x.com/RetoSwap/status/1988968848989565091 |
| Total completed swaps | 19,000+ | current (Sep 2026) | https://retoswap.com |
October 2025 saw 122,606 XMR traded, equating to roughly $47.5 million at prevailing rates. By mid-November 2025 the network had recorded more than 14,000 completed trades; the current total stands above 19,000 swaps. All numbers are taken from the cited X posts and the RetoSwap site accessed on 30 September 2026. Liquidity depth remains concentrated in larger crypto-to-crypto offers, while fiat payment methods show thinner but consistent activity across SEPA, PayPal and cash-by-mail listings.
RetoSwap encountered two Haveno protocol exploits in 2026. On May 20 an attacker forged ACK messages to impersonate an arbitrator, compromising 2-of-3 multisig creation on selected trades and draining approximately 7,000 XMR, valued at roughly 2.7 million USD at the time, almost entirely from large crypto-to-crypto orders. Fiat trades remained unaffected.
Within minutes RetoSwap halted all trading by enforcing a minimum client version of 2.0.0 through the network filter and blocked the attacker’s onion address. A second incident surfaced around June 16–17, 2026, triggering identical controls. No separate loss figure has been published for the June event.
Public reports indicate the team evaluated recovery options and conditioned any trading resumption on protocol-level fixes. As of the September 2026 offer-book peak, no final audited totals, detailed post-mortem, or confirmed resolution of the underlying messaging vulnerability had appeared in available sources.
RetoSwap differentiates itself through higher visible liquidity and a broader set of supported assets than most other Haveno forks. Its current fee schedule of 0.1% maker, 0.8% crypto taker and 2% fiat taker applies after an earlier zero-fee period, while many alternative instances still operate without platform-wide fees or with only arbitrator payments.
| Platform | Maker Fee | Crypto Taker Fee | Fiat Taker Fee | Offer Volume (Sep 2026) | Supported Assets | Post-Exploit Status |
|---|---|---|---|---|---|---|
| RetoSwap | 0.1% | 0.8% | 2% | >500 offers | XMR, BTC, ETH, LTC, BCH, USDT (ETH/TRON) | Trading resumed after minimum client 2.0.0 filter |
| Other Haveno instances | 0% or arbitrator-only | 0% or arbitrator-only | 0% or arbitrator-only | Not publicly reported at comparable scale | Typically XMR plus fewer altcoins | Most unaffected; limited public disclosure on patches |
Offer-book depth on RetoSwap reached an all-time high above 500 Monero buy/sell listings in September 2026, with roughly 22,792 XMR visible across those offers in earlier snapshots. Comparable figures for peer instances remain unavailable in public sources. Both the May and June 2026 protocol exploits affected the shared Haveno codebase, yet RetoSwap alone published immediate network-filter responses and subsequent Android updates. Smaller forks avoided the same volume of reported losses but also lack RetoSwap’s documented recovery timeline and expanded asset list.
Users commonly ask how to configure RetoSwap without exposing identity or funds. Begin by installing the client and forcing all connections through Tor; the platform never accepts clearnet traffic. Create a fresh local Monero wallet for each trading session so that 2-of-3 multisig keys remain under your control at all times.
Route every action—including offer browsing and payment messaging—exclusively via Tor. Verify the current onion address from docs.retoswap.com before launch and block any unexpected addresses during network alerts, as occurred after the May 2026 incident.
Store the wallet seed offline and test restoration on a separate device before large trades. Because funds never leave the local wallet, recovery reduces to standard Monero seed backup; no platform account exists to reset.
Review each arbitrator’s completion history and dispute record before accepting an offer. The 15 % security deposit means a maker selling XMR must commit 115 % of the trade value upfront; size orders accordingly to avoid liquidity lockups. Update the client to the minimum required version immediately after any protocol alert to restore trading access.
