Comparison
Exolix alternative without KYC: the honest guide
Last updated
Exolix is a no account swap with a big menu, about 500 currencies on its public list, Monero included, and a fixed rate that holds for an hour. Standard swaps need no identity, its support is well rated, and plenty of wallets route swaps through it.
In May 2026 a security researcher reported that Exolix's partner API had exposed swap history: roughly 355,000 swaps from January 2025 to May 2026, with deposit and payout addresses, transaction hashes and timestamps, worth about $39.5 million. The issue was metadata, not stolen coins. But for people who pick a no KYC swap so their addresses are not linked, metadata is the whole point. Add a source of funds clause for flagged deposits, and it is reasonable to look at alternatives.
The one sentence verdict: Exolix remains a capable swap with more coins than we have; use CoinVast if you want the check to happen before you send and a plain account of what is kept about your swap.
~355,000
swap records reported exposed through its partner API
January 2025 to May 2026, as reported
$39.5M
in swaps covered by the exposed records
Reported figure; metadata, not stolen coins
513
currencies on Exolix's public list
Read from its API, October 29, 2026
60 min
how long its fixed rate is guaranteed
Its terms, as quoted on kycnot.me
The short version
Three honest verdicts
Stay with Exolix if…
- You need one of its roughly 500 currencies that we do not list.
- You value a one hour fixed rate window for slow confirming coins.
- Your swaps are routine and unlikely to be flagged, and the reported exposure does not worry you.
- You like its support, which reviewers rate well.
Switch to CoinVast if…
- You want the risk check to run before you send, not after your coins arrive.
- You want a failed check to end in a refund with no source of funds questions.
- You want to know exactly what is kept about your swap and for how long.
- You want Monero settled against the swap service's own node.
- You want one printed fee: a flat 2% spread locked at quote time.
Use both if…
- You need a long tail coin. Use Exolix for that leg, from a wallet with a clean history.
- Swap the majors and Monero here, checked before you send.
- Each tool does a different job, and neither pretends to do the other's.
Dated, sourced
What was reported about Exolix in 2026
The exposure was reported by an independent researcher and logged by kycnot.me. We found no statement from Exolix confirming the figures, so treat them as reported. The links are in Sources.
- January 2025 to May 2026
The period covered by the swap records later reported as reachable through Exolix's partner API.
- May 28, 2026
kycnot.me opens a high severity incident: Exolix's partner API used unscoped access keys with no rate limiting or IP restrictions, so anyone holding a partner key could pull full swap histories. About 355,000 transactions, roughly $39.5 million, with addresses, hashes, timestamps and partner user IDs.
- May to June 2026
Press coverage lists wallets reportedly affected through their Exolix integrations, including Edge, Exodus, Monerujo and BTCPay Server. Reports say Exolix added firewall rules; kycnot.me says the underlying flaw was not fixed and that Exolix described the open access as a feature.
- September 13, 2026
kycnot.me updates the listing: third party liquidity added and own liquidity removed, and a new note that source of funds may be required for refunds.
- October 2026
The incident is still marked as active on kycnot.me.
Side by side
Exolix and CoinVast, grouped by what matters
✓ and ✗ mark what is better or worse for you. Exolix cells trace to its public API, its terms as quoted by kycnot.me and the reporting in Sources.
Identity and access
Account
Exolix
✓ None needed
CoinVast
✓ None. There is nothing to sign up for
Identity on a normal swap
Exolix
✓ Not required
CoinVast
✓ Never. The deposit is screened, not the person
When the check runs
Exolix
✗ After your coins arrive
CoinVast
✓ When you create the order, before you send
When something is flagged
What it can ask for
Exolix
✗ Proof of source of funds
CoinVast
✓ Nothing. A failed check ends in a refund
If you decline
Exolix
✗ Its terms say it is not responsible for the refund or completion
CoinVast
✓ Coins return to your refund address minus the network fee
Sanctions match
Exolix
Handled under its AML policy
CoinVast
Held and reported, the single stated exception to auto refund
Your swap history
Reported exposure
Exolix
✗ About 355,000 swap records through its partner API (reported May 2026)
CoinVast
What we keep is listed on /privacy: order records, plus server logs for about 7 days
Coins and rates
Currencies
Exolix
✓ 513
CoinVast
✗ A short list of majors, shown live below
Monero
Exolix
✓ Listed
CoinVast
✓ Native XMR, against our own Monero node
Rate lock
Exolix
✓ Fixed rate held 60 minutes
CoinVast
Locked at quote for the 30 minute deposit window
Liquidity
Exolix
Third party providers
CoinVast
Self hosted BTC, LTC, BCH, DASH and Monero nodes
What you can swap here today
15 coins with live settlement right now- BTC
- ETH
- XMR
- SOL
- USDT · TRC-20
- USDT · ERC-20
- USDC · ERC-20
- LTC
- BCH
- TRX
- DASH
- BONK
- WIF
- USDT · SPL
- USDC · SPL
This list is read from our settlement backend when the page loads, so it only shows coins we can take and pay out at this moment. Any two of them make a pair.
Credit where due
What Exolix does better. Yes, really
1. A much bigger menu
About 500 currencies against our short list. If you need a coin we do not run, Exolix is a far better bet.
2. A longer rate lock
Its terms guarantee a fixed rate for 60 minutes from the moment you create a transaction. Ours holds for the 30 minute deposit window. For a coin that confirms slowly, the longer window is genuinely useful.
3. Support people like
Its kycnot.me listing credits good customer support, and it offers a free AML check through support that can clear a flagged deposit without identity documents.
4. Years of operation
Exolix is a mature service with a verified kycnot.me listing. We launched in 2026, and track record matters in this niche.
The uncomfortable part
What you trade away for it
1. Your addresses in someone else's data
The reported partner API exposure covered deposit and payout addresses, transaction hashes and timestamps for about 355,000 swaps. With those, anyone can link the coins you sent to the coins you received, which is exactly what most people use a no KYC swap to avoid.
2. A source of funds question after you send
Exolix can ask for proof of where flagged coins came from, and its terms say that if you refuse, it is not responsible for ensuring the refund or completion of that transaction. The question comes when your coins are already inside.
3. Refunds that can need documents
Since September 2026 the kycnot.me listing notes that source of funds may be required for refunds too. With us, a deposit that fails screening comes back with no documents asked.
4. Liquidity from third parties
Exolix routes swaps through outside liquidity providers and disclaims liability for issues at those providers. Every party in the chain is another place a swap can stall.
Our own fine print, stated just as plainly: CoinVast screens every deposit before the exchange starts. Pass means the swap runs and is final. Fail means it never starts and your coins return to your refund address minus the network fee, no documents. The one exception is a government sanctions list match, which the law requires us to hold and report. What we keep about each order is listed on our privacy page.
Order of operations
Where the check happens
Exolix, when a deposit is flagged
- 1You send coins
- 2Checks run after they arrive
- 3Proof of source of funds requested
- 4Refuse, and the refund is not its responsibility
The question arrives when your coins are already inside
CoinVast
- 1You create the order and get a locked quote
- 2We screen the deposit before any exchange
- 3Pass: we exchange at the locked rate
- 4We send the coins to your wallet
Fail: your coins come back minus the network fee. No documents.
A check that runs first can only end two ways: the swap runs, or your coins come back. There is no in between where your money waits on a document.
The numbers
Fees, with no dancing
Exolix offers fixed and floating rates with its margin built into the quote, so the fair comparison is the amount you receive. On a floating rate, the final amount can differ from the first estimate.
CoinVast charges a flat 2% spread on every swap, locked the moment you create the order, with the payout network fee on its own line. On a $1,000 swap that is $20 of spread, printed before you send anything.
Questions
Exolix and CoinVast, asked and answered
What happened with Exolix's API?
In May 2026 a security researcher reported that Exolix's partner API used access keys that were not limited to each partner's own data, with no rate limiting or IP restrictions. About 355,000 swap records from January 2025 to May 2026, worth around $39.5 million, were reported as reachable, including addresses, transaction hashes and timestamps. No theft of coins was reported. We found no Exolix statement confirming the figures.
Is Exolix safe to use?
Exolix is a working, mature service with a verified kycnot.me listing, and standard swaps need no identity. The concerns are the reported exposure of swap history and a source of funds clause for flagged deposits. Whether that matters depends on why you are using a no KYC swap.
Does Exolix require KYC?
Not for standard swaps. If a deposit is flagged, Exolix can ask for proof of the source of funds, and since September 2026 that can apply to refunds. kycnot.me rates it shotgun KYC, level 3 of 4.
Does Exolix support Monero?
Yes, XMR is on its public currency list. CoinVast also swaps native XMR, settled against our own Monero node, with no account.
What does CoinVast keep about my swap?
Order records (pair, amounts, addresses, transaction hashes, timestamps and status) and standard server logs with IP addresses for about 7 days. No identity, no trackers, no visitor cookies. The full list is on our privacy page.
Is there an Exolix alternative with no KYC?
CoinVast never asks for identity or source of funds. We screen the deposit when you create the order, before you send. Pass and the swap runs; fail and your coins return to your refund address minus the network fee. A sanctions list match is held and reported, as the law requires.
How long does the rate lock last?
Exolix guarantees its fixed rate for 60 minutes from creating the transaction, per its terms. CoinVast locks the rate when you create the order and holds it for the full 30 minute deposit window.
Can I use both?
Yes. Use Exolix for currencies we do not list. Use CoinVast for the majors and Monero when you want the check before you send.
Receipts
Sources
Claims about Exolix trace to the pages below, read in October 2026. If a fact changes, tell us at [email protected] and we will fix the page.
- https://exolix.com/api/v2/currencies?size=1&page=1Exolix public API: currency list read October 29, 2026 (513 currencies) · read October 2026
- https://kycnot.me/service/exolixkycnot.me: Exolix listing, terms quotes and incident log from May 28, 2026 · read October 2026
- https://cryptoadventure.com/exolix-partner-api-leak-raises-opsec-alarm-after-swap-metadata-exposure/Crypto Adventure: Exolix partner API leak and swap metadata exposure · read October 2026
- https://coin.space/exolix-swaps-exposed-via-api-vulnerability/Coin.Space: Exolix swaps exposed via API vulnerability · read October 2026
Keep reading
Checked before you send. Kept only what we say.
No account, no documents, no source of funds questions after the fact. The spread is printed on the quote. Test it with a small swap.
Start a swap