{"data":{"slug":"sageswap","name":"SageSwap","domain":"sageswap.io","url":"https://sageswap.io/","kyc":"none","kycLevel":0,"kycNote":"Official FAQ says no KYC is ever required under any circumstances; no account is needed for crypto-to-crypto swaps.","fee":"Standard swaps: 1% to 2% plus network gas; amounts below $50 may add up to 6%. High-risk AML or NO AML mode adds 2.2% and usually totals 3% to 4%.","categories":["Swap"],"countries":["GLOBAL"],"bestFor":["Small XMR swaps","No-account crypto-to-crypto exchange","Users who understand AML-score route risk"],"features":["No account","Never-KYC claim","XMR support","BTC Lightning support","Fixed and floating rates","AML-swap mode","Refund address option"],"tagline":"No-account swaps with an official never-KYC claim and XMR support.","status":"ok","updatedAt":"2026-09-05","description":"No-account crypto swaps supporting Monero and Lightning, with a separate AML-swap mode for high-risk coins.","cardSummary":"No-account swaps supporting Monero.","networks":["BTC","LIGHTNING","BCH","ETH","DASH","USDT","USDC","XMR","ZANO","SOL","LTC","DOGE","BNB"],"checkedAt":"2026-06-24","lastReviewed":"2026-09-05","reviewSource":"https://sageswap.io/faq","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":null,"evidenceStatus":"partial","riskLevel":"caution","privacyWarning":"SageSwap claims never-KYC operation, no IP or identifying-data collection, and permanent deletion of successful swap records after seven days. These are operator assertions without published legal or privacy terms. Its high-risk mode accepts coins rejected by the standard AML screen for an added 2.2 percent fee, and the legal operator and jurisdiction remain undisclosed.","auditedBy":[],"corporate":{"entityType":{"value":"unresolved","citation":"unknown","note":"Pass 1 researched this service but established no registry facts."},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":null,"telegram":null,"incidents":[{"title":"Support impersonation and phishing campaign targeting SageSwap users","status":"active","severity":"medium","startedAt":"2026-08-24","summary":"SageSwap reports an active campaign impersonating its support across Telegram and platform accounts and warns that support will never request wallet connection or wallet information. No resolution notice was found.","directUserHarm":true,"customerDataOrAssetsCompromised":false,"disclosure":"proactive","remediation":"unresolved","sources":[{"label":"SageSwap official warning","href":"https://x.com/SageSwap_io/status/2091830071778562151"}]}],"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/sageswap","canonical_score":53,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":21,"control":15,"transparency":1,"security":13,"accountability":3},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 21 of 25 points.","control: 15 of 20 points.","transparency: 1 of 20 points.","security: 13 of 25 points.","accountability: 3 of 10 points.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-10-25","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"limited","controlModel":"noncustodial-hosted","sourceModel":"closed"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"limited","sourceUrls":["https://sageswap.io/faq","https://sageswap.io/"],"reviewedAt":"2026-08-27","note":"No account is required, but deposit/output addresses, swap state and support records remain visible to the hosted exchanger."},"controlModel":{"value":"noncustodial-hosted","sourceUrls":["https://sageswap.io/","https://sageswap.io/faq"],"reviewedAt":"2026-08-27","note":"SageSwap coordinates noncustodial hosted swaps without persistent customer accounts."},"sourceModel":{"value":"closed","sourceUrls":["https://sageswap.io/"],"reviewedAt":"2026-08-27","note":"No official critical-core source or reproducible deployment was located."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped independent audit of the score-critical core was evidenced; no audit points are granted."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"Swap","primary_bucket":"Swap","corporate_identity":null,"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":1,"self-reported":0},"total_sources":1},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":59,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":17,"detail":"Oldest recorded check is 135 days old"}],"score_computed_at":"2026-11-06T01:35:18.293Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":null,"jurisdictionConfidence":"unknown","evidenceStatus":"partial","checkedAt":"2026-06-24","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"},"citation":{"canonical_url":"https://cunicula.com/en/provider/sageswap","api_url":"https://cunicula.com/api/v1/services/sageswap","schema_version":"1.1.0","publisher":"Cunicula","reviewed":"2026-09-05","retrieved":"2026-11-06","attribution":"Cunicula, \"SageSwap\", cunicula.com, reviewed 2026-09-05, retrieved 2026-11-06, https://cunicula.com/en/provider/sageswap","attribution_template":"Cunicula, \"{name}\", cunicula.com, reviewed {reviewed}, retrieved {retrieved}, {url}","license":"LicenseRef-Cunicula-Attribution-1.0","license_url":"https://cunicula.com/en/cite","cite_guide_url":"https://cunicula.com/en/cite"},"edit_history":[{"changed_at":"2026-09-05T11:33:47+10:00","action":"updated","why":"fix(data): review overdue providers against current sources","source":{"commit":"78a694892dd66e73fb83a412c7cf28efc95e6288","url":"https://cunicula.com/en/provider/sageswap#history-78a694892dd6","review_source":"https://sageswap.io/faq"},"changes":[{"field":"fee","operation":"changed","before":"1–2% standard; AML-swap mode usually 3–4% total","after":"Standard swaps: 1% to 2% plus network gas; amounts below $50 may add up to 6%. High-risk AML or NO AML mode adds 2.2% and usually totals 3% to 4%."},{"field":"kycLastChecked","operation":"changed","before":"2026-06-22","after":"2026-09-05"},{"field":"lastReviewed","operation":"changed","before":"2026-06-22","after":"2026-09-05"},{"field":"privacyWarning","operation":"changed","before":"Official pages claim no IP or identifying-data collection and automatic permanent deletion of successful swap records after 7 days. The separate AML Swap mode accepts high-risk coins for an extra 2.2% and the operator/jurisdiction remain opaque; these are operator assertions without published legal/privacy terms.","after":"SageSwap claims never-KYC operation, no IP or identifying-data collection, and permanent deletion of successful swap records after seven days. These are operator assertions without published legal or privacy terms. Its high-risk mode accepts coins rejected by the standard AML screen for an added 2.2 percent fee, and the legal operator and jurisdiction remain undisclosed."},{"field":"reviewSource","operation":"changed","before":"candidate_sageswap_official_2026-06-22","after":"https://sageswap.io/faq"},{"field":"updatedAt","operation":"changed","before":"2026-06-22","after":"2026-09-05"}]},{"changed_at":"2026-08-27T08:50:11+10:00","action":"updated","why":"fix: reconcile score 4.0 evidence","source":{"commit":"18e788afe003dcb0febe08a578aaf9cb087161b2","url":"https://cunicula.com/en/provider/sageswap#history-18e788afe003","review_source":"candidate_sageswap_official_2026-06-22"},"changes":[{"field":"evidenceStatus","operation":"changed","before":"verified","after":"partial"},{"field":"scoreReview","operation":"added","before":null,"after":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"limited","sourceUrls":["https://sageswap.io/faq","https://sageswap.io/"],"reviewedAt":"2026-08-27","note":"No account is required, but deposit/output addresses, swap state and support records remain visible to the hosted exchanger."},"controlModel":{"value":"noncustodial-hosted","sourceUrls":["https://sageswap.io/","https://sageswap.io/faq"],"reviewedAt":"2026-08-27","note":"SageSwap coordinates noncustodial hosted swaps without persistent customer accounts."},"sourceModel":{"value":"closed","sourceUrls":["https://sageswap.io/"],"reviewedAt":"2026-08-27","note":"No official critical-core source or reproducible deployment was located."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped independent audit of the score-critical core was evidenced; no audit points are granted."}}}]},{"changed_at":"2026-08-26T16:27:32+10:00","action":"updated","why":"feat: apply full-service rereview and score 4.0","source":{"commit":"faa73ed3ef3cfbd8ae2fbc31753e0d1ddc6b11cf","url":"https://cunicula.com/en/provider/sageswap#history-faa73ed3ef3c","review_source":"candidate_sageswap_official_2026-06-22"},"changes":[{"field":"privacyWarning","operation":"changed","before":"Official FAQ explicitly says the service accepts high-AML coins only through AML Swap mode and is not a mixer. That positioning is privacy-relevant but materially raises compliance, counterparty and reputational risk. Jurisdiction and operators are opaque.","after":"Official pages claim no IP or identifying-data collection and automatic permanent deletion of successful swap records after 7 days. The separate AML Swap mode accepts high-risk coins for an extra 2.2% and the operator/jurisdiction remain opaque; these are operator assertions without published legal/privacy terms."},{"field":"scoreAssessment","operation":"added","before":null,"after":{"operatorDataExposure":"limited","controlModel":"noncustodial-hosted","sourceModel":"closed"}}]},{"changed_at":"2026-08-09T15:02:38+10:00","action":"updated","why":"Schema coherence: make \"no legal entity\" a statable answer","source":{"commit":"075c50f012e80ede7c8cdaf232ba498568a04276","url":"https://cunicula.com/en/provider/sageswap#history-075c50f012e8","review_source":"candidate_sageswap_official_2026-06-22"},"changes":[{"field":"corporate.entityType","operation":"added","before":null,"after":{"value":"unresolved","citation":"unknown","note":"Pass 1 researched this service but established no registry facts."}}]},{"changed_at":"2026-08-08T20:39:10+10:00","action":"updated","why":"data: registry-sourced corporate identity for 79 services","source":{"commit":"e6b09ff769a03b6bcda957c24e2cfd447d7b6c46","url":"https://cunicula.com/en/provider/sageswap#history-e6b09ff769a0","review_source":"candidate_sageswap_official_2026-06-22"},"changes":[{"field":"corporate","operation":"added","before":null,"after":{"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"}}]},{"changed_at":"2026-08-08T04:17:21+10:00","action":"updated","why":"chore(data): concise summaries batch 6","source":{"commit":"1100ceb495b23b8614141f1aa40a4d94ed68cbf0","url":"https://cunicula.com/en/provider/sageswap#history-1100ceb495b2","review_source":"candidate_sageswap_official_2026-06-22"},"changes":[{"field":"description","operation":"changed","before":"No-account crypto-to-crypto swap service. Official FAQ says it never requires KYC under any circumstances, supports Monero and Bitcoin Lightning, and separates standard swaps from an AML-swap mode for high-risk coins.","after":"No-account crypto swaps supporting Monero and Lightning, with a separate AML-swap mode for high-risk coins."}]},{"changed_at":"2026-08-07T19:08:58+10:00","action":"updated","why":"fix(cards): authored card summaries, sweep 4/5 (records 121-160)","source":{"commit":"e7caee1367b3d589c06f16d3bf1472c95d0622b8","url":"https://cunicula.com/en/provider/sageswap#history-e7caee1367b3","review_source":"candidate_sageswap_official_2026-06-22"},"changes":[{"field":"cardSummary","operation":"added","before":null,"after":"No-account swaps supporting Monero."}]},{"changed_at":"2026-08-06T11:14:13+10:00","action":"updated","why":"feat: consolidate comparisons scores and design system","source":{"commit":"6285d0d61970ee36e5a7c4ef72e2e76273f2c4a4","url":"https://cunicula.com/en/provider/sageswap#history-6285d0d61970","review_source":"candidate_sageswap_official_2026-06-22"},"changes":[{"field":"evidenceStatus","operation":"added","before":null,"after":"verified"},{"field":"riskLevel","operation":"added","before":null,"after":"caution"},{"field":"trustLevel","operation":"removed","before":"caution","after":null}]},{"changed_at":"2026-06-24T20:31:10+10:00","action":"updated","why":"data: apply verified provider metadata updates","source":{"commit":"71793a972d1b61c83163aab9cfa4e0127c31105e","url":"https://cunicula.com/en/provider/sageswap#history-71793a972d1b","review_source":"candidate_sageswap_official_2026-06-22"},"changes":[{"field":"checkedAt","operation":"changed","before":"2026-06-22","after":"2026-06-24"}]},{"changed_at":"2026-06-23T06:40:37+10:00","action":"created","why":"data: add vetted no-kyc candidate services","source":{"commit":"0fc59dbe60c372f110858f10200b2b41247c8d30","url":"https://cunicula.com/en/provider/sageswap#history-0fc59dbe60c3","review_source":"candidate_sageswap_official_2026-06-22"},"changes":[{"field":"record","operation":"added","before":null,"after":"created"}]}],"history_scope":{"schema_version":"1.0.0","source_path":"data/services.json","source_repository":"https://cunicula.com/en/methodology#record-history","source_commit":"656629f3a2cfd1544249be7a37a0b0526c6bbe7e","record_identity":"id","scope":"Committed public record changes. Creation events are summarized; later events contain field-level before/after values. Internal affiliate and numeric identity fields are excluded, and unsupported public claims remain redacted.","event_count":10},"related_services":[{"slug":"boltz","name":"Boltz","domain":"boltz.exchange","url":"https://boltz.exchange/","kyc":"none","kycLevel":0,"kycNote":"The swap service is currently disabled. Previous no-account and swap terms are not evidence of present availability.","fee":"0.1%","categories":["Swap"],"countries":["GLOBAL"],"bestFor":["Lightning ↔ on-chain swaps","Liquid Bitcoin","Non-custodial workflows"],"features":["Non-custodial","No account required","Lightning ↔ On-chain","Liquid swaps","Open source","Submarine swaps","HTLC-based"],"tagline":null,"status":"down","updatedAt":"2026-09-05","description":"Non-custodial Bitcoin bridge swapping between Lightning, on-chain and Liquid using submarine swaps.","cardSummary":"Non-custodial swaps across Lightning and Liquid.","networks":[],"checkedAt":"2026-09-05","lastReviewed":"2026-09-05","reviewSource":"https://www.boltz.exchange/","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"SV","evidenceStatus":"verified","riskLevel":"danger","privacyWarning":"Boltz swap services have been disabled since 3 August 2026 and remain disabled until further notice. The provider says its API remains available for cooperative refunds and unilateral refunds do not depend on its infrastructure. It reported repeated attacks and contained exploits, said no user funds were at risk, and did not give a reopening date.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://boltz.exchange/terms","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"Boltz S.A. de C.V.","citation":"https://boltz.exchange/terms"},"incorporationJurisdiction":{"value":"El Salvador","citation":"https://boltz.exchange/terms"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":"https://x.com/Boltzhq","incidents":[{"title":"Service suspension and ownership handover after targeted attacks","status":"monitoring","severity":"high","startedAt":"2026-08-12","summary":"Boltz said AI-assisted attackers had targeted the service, suspended operations, and announced that all original founders stepped down. On 18 August the old crew still controlled the service and the handover remained in progress; no later provider-owned completion notice was found in the review window.","directUserHarm":false,"customerDataOrAssetsCompromised":false,"disclosure":"proactive","remediation":"unresolved","sources":[{"label":"Boltz suspension and founder departure","href":"https://x.com/Boltzhq/status/2087636521746674168"},{"label":"Boltz handover still in progress","href":"https://x.com/Boltzhq/status/2089675696494834097"}]}],"agentUsability":{"status":"hard-blocked","evidence":"The current provider listing is marked down, so this dataset treats agent payment as hard-blocked.","derivedFrom":["status"]},"details_url":"https://cunicula.com/en/provider/boltz","canonical_score":17,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":0,"accountability":5},"applied_caps":[{"key":"active-high-incident","maximum":39,"reason":"An unresolved high-severity incident limits the score to 39."},{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 0 of 25 points.","accountability: 5 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","An unresolved high-severity incident limits the score to 39.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-10-25","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://x.com/Boltzhq/status/2089675696494834097","https://x.com/Boltzhq/status/2087636521746674168","https://status.boltz.exchange/","https://boltz.exchange/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://x.com/Boltzhq/status/2089675696494834097","https://x.com/Boltzhq/status/2087636521746674168","https://status.boltz.exchange/","https://boltz.exchange/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://x.com/Boltzhq/status/2089675696494834097","https://x.com/Boltzhq/status/2087636521746674168","https://status.boltz.exchange/","https://boltz.exchange/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"SV","jurisdiction_confidence":"unknown","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Swap","primary_bucket":"Swap","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"Boltz S.A. de C.V.","registration_number":null,"registry_url":null,"incorporation_jurisdiction":"El Salvador","incorporation_date":null,"registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://boltz.exchange/terms","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://boltz.exchange/terms","note":null,"agent_verified":false},"entityType":{"url":"https://boltz.exchange/terms","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":2,"self-reported":3},"total_sources":5},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 62 days old"}],"score_computed_at":"2026-11-06T01:35:18.296Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"SV","jurisdictionConfidence":"unknown","evidenceStatus":"verified","checkedAt":"2026-09-05","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"changehero","name":"ChangeHero","domain":"changehero.io","url":"https://changehero.io/","kyc":"light","kycLevel":1,"kycNote":"Accounts are optional. Logged-in swaps appear in account history. The AML policy calls for due diligence at EUR 1,000 or on suspicion, and can request funds evidence. Fiat partners apply their own checks.","fee":"Up to 0.5% Best Rate / up to 0.7% Fixed Rate","limit":"Crypto swaps: no hard maximum; fiat purchases: €25 minimum","categories":["Swap"],"countries":["GLOBAL"],"features":["Optional account and transaction history","Fixed and floating quotes","350+ swap assets advertised","150+ fiat-purchase assets advertised","Risk-based identity checks"],"status":"ok","updatedAt":"2026-10-25","description":"Crypto swaps without mandatory accounts, plus fiat purchases through partners. Identity checks can apply.","cardSummary":"No-account swaps and fiat on-ramp.","networks":[],"checkedAt":"2026-10-25","lastReviewed":"2026-10-25","reviewSource":"https://changehero.io/legal/privacy-policy","jurisdictionConfidence":"inferred","kycLastChecked":"2026-10-25","trending":false,"jurisdiction":"CR","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"ChangeHero collects device, IP, email and sometimes identity data. Partners and authorities may receive it. Fiat providers apply separate rules. Its terms and footer name different operator entities.","auditedBy":null,"corporate":{"entityType":{"value":"unresolved","citation":"https://changehero.io/legal/terms-of-use","note":"Terms name Herofintechs Ltd.; website footer names HEROFINTECHS LIMITADA. The relationship is not established."},"source":"Current provider terms, footer, press kit and privacy policy; contracting entity unresolved.","reviewedAt":"2026-10-25"},"twitter":"https://x.com/changehero_io","telegram":"https://t.me/changehero","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/changehero","canonical_score":30,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":9,"control":0,"transparency":0,"security":17,"accountability":4},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 9 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 4 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-10-25","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://changehero.io/","https://changehero.io/legal/privacy-policy"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://changehero.io/","https://changehero.io/legal/privacy-policy"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://changehero.io/","https://changehero.io/legal/privacy-policy"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"CR","jurisdiction_confidence":"inferred","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Swap","primary_bucket":"Swap","corporate_identity":null,"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":1},"total_sources":1},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; inferred jurisdiction: CR"}],"evidence_confidence":100,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":30,"detail":"All recorded checks are within 30 days"}],"score_computed_at":"2026-11-06T01:35:18.296Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"CR","jurisdictionConfidence":"inferred","evidenceStatus":"verified","checkedAt":"2026-10-25","lastReviewed":"2026-10-25","kycLastChecked":"2026-10-25"}},{"slug":"clearswap","name":"ClearSwap","domain":"clearswap.io","url":"https://clearswap.io/","kyc":"light","kycLevel":1,"kycNote":"No current KYC policy was found. This does not establish that verification is never required.","fee":null,"limit":null,"categories":["Swap"],"countries":["GLOBAL"],"bestFor":["Privacy"],"features":["Open-source protocol","Peer-to-peer and liquidity-pool swaps","On-chain and cross-chain swaps","EVM and non-EVM token interface","Staking"],"tagline":null,"status":"ok","updatedAt":"2026-09-05","changedAt":null,"description":"Cross-network swap app with generic terms rather than a stated no-KYC policy, and Google Analytics on its site.","cardSummary":"Swap app for confidential cross-network swaps.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://clearswap.io/pdf/clearswap-terms-of-use.pdf","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":null,"evidenceStatus":"partial","riskLevel":"caution","privacyWarning":"ClearSwap exposes an open-source swap protocol through an interface operated by an unnamed Administration. Its policy permits collection of wallet, IP, device and interaction data, cookies and web beacons, and the current site loads Google Analytics. The legal operator, incorporation jurisdiction, KYC policy and reusable limits remain undisclosed.","auditedBy":[],"corporate":{"entityType":{"value":"unresolved","citation":"https://clearswap.io/pdf/clearswap-terms-of-use.pdf","note":"Current terms identify only an unnamed Administration and do not establish a registered legal entity."},"repositoryUrl":{"value":"https://github.com/Cryptorubic","citation":"https://clearswap.io/pdf/clearswap-terms-of-use.pdf"},"source":"Official primary source review 2026-09-05","reviewedAt":"2026-09-05"},"twitter":null,"telegram":null,"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/clearswap","canonical_score":49,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":14,"control":15,"transparency":0,"security":17,"accountability":3},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 14 of 25 points.","control: 15 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 3 of 10 points.","Limited evidence: sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-10-25","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"noncustodial-hosted","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://clearswap.io/pdf/clearswap-terms-of-use.pdf"],"reviewedAt":"2026-08-27","note":"email, wallet, device/browser/IP, cookies and Google Analytics data"},"controlModel":{"value":"noncustodial-hosted","sourceUrls":["https://clearswap.io/pdf/clearswap-terms-of-use.pdf"],"reviewedAt":"2026-08-27","note":"hosted-frontend-over-third-party-protocols"},"sourceModel":{"value":"unknown","sourceUrls":["https://clearswap.io/pdf/clearswap-terms-of-use.pdf"],"reviewedAt":"2026-08-27","note":"claimed-open-protocol-unverified-deployment"}},"audit":{"scoreEligible":false,"reason":"No independent audit or vulnerability-disclosure evidence."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"Swap","primary_bucket":"Swap","corporate_identity":null,"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":2},"total_sources":2},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":66,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 71 days old"}],"score_computed_at":"2026-11-06T01:35:18.296Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":null,"jurisdictionConfidence":"unknown","evidenceStatus":"partial","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"coinoswap","name":"CoinoSwap","domain":"coinoswap.com","url":"https://coinoswap.com/","kyc":"light","kycLevel":1,"kycNote":"No CoinoSwap account required for aggregator use; partner exchanges/on-ramps may request KYC or enforce thresholds independently.","fee":"No separate CoinoSwap fee; the quoted rate includes exchange costs except blockchain network fees.","limit":null,"categories":["Swap","Aggregator"],"countries":["GLOBAL"],"bestFor":["Privacy"],"features":["Rate comparison","10+ exchange partners","No registration","Fixed and floating rates","1000+ cryptocurrencies","Partner KYC risk indicator"],"tagline":null,"status":"ok","updatedAt":"2026-09-05","changedAt":null,"description":"Non-custodial swap aggregator and rate comparison site whose partner ramps apply their own KYC thresholds.","cardSummary":"Non-custodial swap rate comparison site.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://coinoswap.com/faq","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"US","evidenceStatus":"partial","riskLevel":"caution","privacyWarning":"CoinoSwap is an aggregator and partner exchanges may require KYC or hold a transaction. CoinoSwap itself records wallet addresses, swap amounts, timestamps, IP and device data, cookies and optional email, and does not state a retention period for transaction or device data.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://coinoswap.com/terms-of-use","note":"Official Terms of Use state that CoinoSwap refers to Coinoisseurs LLC, a registered company in Wyoming, USA; site lists a Wyoming legal address and operates as a hosted swap aggregator."},"legalEntity":{"value":"Coinoisseurs LLC","citation":"https://coinoswap.com/terms-of-use"},"registrationNumber":{"value":"2024-001534402","citation":"https://thegrid.id/profiles/coinoswap"},"registryUrl":{"value":"https://wyobiz.wyo.gov/Business/FilingSearch.aspx","citation":"https://wyobiz.wyo.gov/Business/FilingSearch.aspx"},"incorporationJurisdiction":{"value":"Wyoming, United States","citation":"https://coinoswap.com/terms-of-use"},"registeredAddress":{"value":"1309 Coffeen Avenue, Suite 16200, Sheridan, Wyoming 82801","citation":"https://coinoswap.com/about-us"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":null,"telegram":null,"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/coinoswap","canonical_score":52,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":14,"control":15,"transparency":0,"security":17,"accountability":6},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 14 of 25 points.","control: 15 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 6 of 10 points.","Limited evidence: sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-10-25","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"noncustodial-hosted","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://coinoswap.com/privacy-policy"],"reviewedAt":"2026-08-27","note":"wallet addresses, transactions, IP, device/browser/OS, optional email, cookies and partner communications"},"controlModel":{"value":"noncustodial-hosted","sourceUrls":["https://coinoswap.com/privacy-policy"],"reviewedAt":"2026-08-27","note":"hosted-aggregator-over-partners"},"sourceModel":{"value":"unknown","sourceUrls":["https://coinoswap.com/privacy-policy"],"reviewedAt":"2026-08-27","note":"closed-or-undisclosed"}},"audit":{"scoreEligible":false,"reason":"No audit/security disclosure evidence."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"US","jurisdiction_confidence":"unknown","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Swap","primary_bucket":"Swap","corporate_identity":{"entity_type":"company","entity_type_note":"Official Terms of Use state that CoinoSwap refers to Coinoisseurs LLC, a registered company in Wyoming, USA; site lists a Wyoming legal address and operates as a hosted swap aggregator.","governance_model":null,"repository_url":null,"legal_entity":"Coinoisseurs LLC","registration_number":"2024-001534402","registry_url":"https://wyobiz.wyo.gov/Business/FilingSearch.aspx","incorporation_jurisdiction":"Wyoming, United States","incorporation_date":null,"registered_address":"1309 Coffeen Avenue, Suite 16200, Sheridan, Wyoming 82801","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://coinoswap.com/terms-of-use","note":null,"agent_verified":false},"registrationNumber":{"url":"https://thegrid.id/profiles/coinoswap","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://coinoswap.com/terms-of-use","note":null,"agent_verified":false},"registeredAddress":{"url":"https://coinoswap.com/about-us","note":null,"agent_verified":false},"entityType":{"url":"https://coinoswap.com/terms-of-use","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":2,"self-reported":4},"total_sources":6},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":66,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 71 days old"}],"score_computed_at":"2026-11-06T01:35:18.296Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"US","jurisdictionConfidence":"unknown","evidenceStatus":"partial","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"cyphergoat","name":"CypherGoat","domain":"cyphergoat.com","url":"https://cyphergoat.com/","kyc":"light","kycLevel":1,"kycNote":"No CypherGoat account/KYC, but official terms say partnered exchanges may rarely require KYC for AML; privacy policy says some partners may require IP logging.","fee":"No added CypherGoat fee; partner exchange and network fees apply","limit":null,"categories":["Swap","Aggregator"],"countries":["GLOBAL"],"bestFor":["Privacy"],"features":["CypherGoat does not perform KYC; partners may","Rate comparison","No accounts","Non-custodial","Open source web client","SafeRoute split routing"],"tagline":null,"status":"ok","updatedAt":"2026-09-05","changedAt":null,"description":"Open-source Monero-native swap aggregator comparing partner exchanges over non-custodial routing.","cardSummary":"Monero-native open-source swap aggregator.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://cyphergoat.com/","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":null,"evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"CypherGoat may use affiliate-tracking cookies; for specified compliance-requiring partners it logs IP address, user agent and language, anonymizes destination-address/amount transaction data after 14 days, and may retain partner-required IP logs longer. Partner exchanges have separate policies and may require KYC.","auditedBy":[],"corporate":{"entityType":{"value":"project-no-legal-entity","citation":"https://4rkal.com/posts/launching-cyphergoat/","note":"Individual developer 4rkal built and operates the open-source aggregator; Terms, Privacy, About, and Shield pages name only 'CypherGoat' with no registered legal entity, and no company registry records were found."},"governanceModel":{"value":"individual","citation":"https://github.com/4rkal"},"repositoryUrl":{"value":"https://github.com/CypherGoat/web","citation":"https://github.com/CypherGoat/web"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":null,"telegram":null,"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/cyphergoat","canonical_score":60,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":14,"control":15,"transparency":8,"security":17,"accountability":6},"applied_caps":[{"key":"partially-reviewable-critical-core","maximum":79,"reason":"A partially reviewable critical core without current audit evidence limits the score to 79."}],"score_rationale":["privacy: 14 of 25 points.","control: 15 of 20 points.","transparency: 8 of 20 points.","security: 17 of 25 points.","accountability: 6 of 10 points.","A partially reviewable critical core without current audit evidence limits the score to 79."],"last_scored":"2026-10-25","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"noncustodial-hosted","sourceModel":"partial"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://cyphergoat.com/about"],"reviewedAt":"2026-08-27","note":"wallet/transaction, IP/device and partner exchange data"},"controlModel":{"value":"noncustodial-hosted","sourceUrls":["https://cyphergoat.com/about"],"reviewedAt":"2026-08-27","note":"open-source-hosted-aggregator"},"sourceModel":{"value":"partial","sourceUrls":["https://github.com/CypherGoat/web"],"reviewedAt":"2026-08-27","note":"open-source-web-ui"}},"audit":{"scoreEligible":false,"reason":"Shield/audit claims lack a dated scoped report."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"Swap","primary_bucket":"Swap","corporate_identity":{"entity_type":"project-no-legal-entity","entity_type_note":"Individual developer 4rkal built and operates the open-source aggregator; Terms, Privacy, About, and Shield pages name only 'CypherGoat' with no registered legal entity, and no company registry records were found.","governance_model":"individual","repository_url":"https://github.com/CypherGoat/web","legal_entity":null,"registration_number":null,"registry_url":null,"incorporation_jurisdiction":null,"incorporation_date":null,"registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"entityType":{"url":"https://4rkal.com/posts/launching-cyphergoat/","note":null,"agent_verified":false},"governanceModel":{"url":"https://github.com/4rkal","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":3,"self-reported":0},"total_sources":3},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 71 days old"}],"score_computed_at":"2026-11-06T01:35:18.297Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":null,"jurisdictionConfidence":"unknown","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}}]},"meta":{"total":1,"api_version":"1.3","powered_by":"cunicula.com","documentation_url":"https://cunicula.com/en/api-docs","machine_index_url":"https://cunicula.com/llms.txt","license":"LicenseRef-Cunicula-Attribution-1.0","license_url":"https://cunicula.com/en/cite","attribution":"Cunicula, \"{name}\", cunicula.com, reviewed {reviewed}, retrieved {retrieved}, {url}","cite_guide_url":"https://cunicula.com/en/cite","dataset_url":"https://cunicula.com/api/v1/dataset","schema_version":"1.1.0","related_total":5,"history_total":10}}