Engineering roadmap · Multi-asset DEX

The road to public swaps

A non-custodial atomic-swap exchange built into the Monzero app. You trade XMZ for another coin straight from your own wallet — the two blockchains enforce the trade, so either both sides get paid or both get refunded. No account, no deposit, no custodian.

Not live yet. Public DEX trading is not enabled. Every pair is proven on test networks first, then in a small real-funds test by the project, before any gated public release. Please don't send funds to trade on the DEX yet. XMZ has no market price, and the code has not had an independent security audit.

Status as of 8 November 2026. Milestone-based delivery; no committed public-launch date.

Where each pair stands

The DEX is crypto-only — XMZ against Bitcoin, Litecoin, BNB, Ethereum and Solana. (Earlier Bitcoin Cash and Dogecoin work was dropped: a legacy-signature malleability issue made their pre-signed refunds unsafe.)

Monero (XMR) is in development as a trading coin against BNB, Ethereum and Solana, with XMZ/XMR as two swaps back to back through one of them. 14 Nov 2026: full swaps, refunds and restarts passed on a local Monero test chain with the official Monero 0.18.5.4 software. Next: public test networks, then the wallet apps. Not yet available to trade.

XMZ / BTC mainnet tested

Passed every test-network gate on signet and testnet4 — swap, refund, two machines, interruption and power-loss — with light wallets on both sides (no Bitcoin node needed). The first real-funds BTC↔XMZ swap on Bitcoin mainnet completed on 4 November. On 8 November a signet swap was started from a signed offer posted to a relay and completed through it — Bitcoin lock, XMZ lock, redemption and payout.

XMZ / BNB mainnet tested

A chain-agnostic EVM atomic-swap contract on BNB Smart Chain. Swap and refund passed on testnet; the first real-funds XMZ↔BNB swap on mainnet completed on 31 October.

XMZ / SOL mainnet tested

A dedicated Solana atomic-swap program (native SOL and SPL). Deployed to Solana mainnet and verified with a live real-funds swap — lock → claim, escrow closed — on 6 November. On 12 November a SOL/XMZ swap completed on mainnet end to end through the public wallet and the DEX page with Phantom, from an offer posted to the open relays.

XMZ / LTC mainnet validating

A Litecoin light wallet on both sides. Passed the public-testnet gates; the mainnet path is now enabled and validated end-to-end in a dry run (light-wallet sync and full setup). A first real-funds swap is the next step.

XMZ / ETH mainnet tested

Uses the same EVM contract as BNB, with Ethereum's finality wait (96 blocks) before either side acts. Passed every test-network gate on Sepolia — a full swap, both refund cases, and stop-and-resume of each side — then the first real-funds XMZ↔ETH swap on Ethereum mainnet completed on 8 November. Low-gas L2s such as Base and Arbitrum come later.

How a pair goes live — the gates

Each stage starts only when the one before it passes. A gate failing means fix and retest, never skip.

Stage	What it proves	Status
1 · Test networks	Swap, refund, interruption, power loss, two machines — with light wallets where used	BTC · LTC · BNB · SOL · ETH
2 · Project real-funds test	A real swap with the project's own small funds, both sides owner-held	BTC · BNB · SOL · ETH LTC next
3 · Security review	Community pentest kit, then independent review — before any public money	required · pending
4 · Gated public beta	In-app offers, small per-trade and daily caps, a signed operator pause switch	offers & relays built opens after review
5 · Raised limits	Weeks of clean trading; limits raised step by step by signed document	later

What's left before a public beta

Independent security review / community pentest. The swap contracts and engine have not been externally audited; this gates any public, real-money trading.
In-app peer discovery and offers — built, in testing. Two public relays are now running (relay1.monzero.org in Europe, relay2.monzero.org in the US) and share offers with each other; anyone can run another. Traders post signed offers for BTC, LTC, ETH and BNB, and agree trade keys through sealed messages only the two traders can read, so neither needs an open port. A relay cannot change an offer or read the messages. The website order book now shows the open offers for all four pairs (BTC, ETH, BNB and LTC) straight from the relays, with market depth and a price chart. The app now sets up its own trading wallet and offer markets, and derives its trading keys from the wallet's recovery words, so no hand-written settings are needed. While building this we found and closed a gap: a taker now refuses any terms that would pay out less XMZ than the offer shows.
The go-live controls. Per-trade and daily caps, published fee addresses, and a signed kill switch that can pause new trades at any time.
Finish the pair set. A first real-funds LTC swap, then low-gas L2s on the existing EVM contract.
Trading from an Android phone — built, in testing. The Android wallet can now run swaps for the DEX page opened in the phone's own browser: the wallet asks for each connection, the trading password and each trade with a notification, and the page cannot start a trade by itself. On 12 November a test-network ETH/XMZ swap (Sepolia) completed this way on an Android emulator, from a relay offer to the payout. Not released: it still needs a run on a real phone and a signed release.

What this roadmap means

Readiness is per market

Each pair needs its own verified settlement and recovery before it is offered. Progress on one pair is not a claim about another.

No custody, ever

The app never holds your coins. Trades are atomic — both sides settle, or both refund. Contract and program addresses are pinned in the app build, never fetched from the website.

Evidence, not promises

Source is public, releases are signed, and test evidence is published. No price talk, and no launch-date hype.

See the DEX in the app → · Security & reporting → · Source ↗