🛡️ SECURITY & TRUST REPORT

How We Keep
Your Crypto Safe

We've been running since 2019. In that time we've processed over $2.4 billion in exchanges and haven't had a single security incident. Here's what actually happens to your money.

0
Security Incidents
since 2019
No KYC
Up to $10,000/day
no ID, no registration
100%
Non-Custodial
we never hold your funds
4.9/5
User Rating
12,847 reviews

Your funds don't sit with us

🏗️

What happens when you swap

We create a one-time deposit address for your transaction. Your coins go in, get routed through our liquidity layer, and come out the other side as the coin you want. Your coins are never sitting on our servers.

🔑

You keep your keys

Binance and Coinbase hold your private keys. We don't. You send from your wallet directly — no depositing into an account first, no waiting to withdraw later, no platform that could get hacked and take your money with it.

⚡

Auto swaps all amounts

Small orders go through ChangeNOW's atomic swap system — the transaction either completes fully or reverts. No partial fills, no stuck funds.

🏦

Cold storage for reserves

Hot wallets hold only what we need for active processing. The rest sits in multi-signature cold wallets where releasing funds requires multiple team members with physical hardware keys. One person can't do it alone.

What's running under the hood

🔐
TLS 1.3 / SSL
All connections encrypted with TLS 1.3. HSTS enforced. No downgrade attacks possible.
🛡️
Content Security Policy
Strict CSP headers block XSS attacks. Inline scripts prohibited. Trusted origins only.
🔒
CSRF Protection
All state-changing requests require CSRF tokens. Cross-site request forgery prevented.
👁️
Rate Limiting
API and exchange endpoints rate-limited per IP. Brute force and DDoS protection active.
📝
Audit Logs
All exchange transactions logged immutably with timestamps, IPs, and wallet addresses.
🔍
Dependency Scanning
Third-party libraries scanned weekly for CVEs. Automatic patching pipeline in place.

AML screening — what we check and what we don't

What gets checked on every transaction

Every swap goes through Chainalysis before we process it — takes milliseconds. We check the sending wallet against sanctions lists, known scam addresses, and darknet market wallets. If something flags, we pause and investigate before proceeding.

  • ✅ OFAC sanctions list screening
  • ✅ Known scam/theft wallet blacklist
  • ✅ Darknet market address detection
  • ✅ Mixer/tumbler transaction flagging
  • ✅ Suspicious pattern detection

No KYC — what we don't ask for

CryptoSwapPro is a no-KYC, no-registration exchange for amounts under $10,000/day. You need exactly one thing: the wallet address where you want to receive coins. No ID, no selfie, no bank details, no email. Above $10K/day the law requires ID — we can't get around that, but we only ask when we legally have to.

  • ❌ Passport or ID scan (under $10K/day)
  • ❌ Selfie or liveness check (under $10K/day)
  • ❌ Bank account linking
  • ❌ Social Security Number
  • ❌ Address verification
KYC is required only for: exchanges over $10,000/day, as required by applicable financial regulations.

Found a bug? We pay.

If you find a real security vulnerability and report it to us before going public, we pay bounties. Contact [email protected] with details.

Critical
Up to $5,000
RCE, auth bypass, fund theft
High
Up to $1,000
XSS, CSRF, data exposure
Medium
Up to $250
Logic errors, info disclosure
Low
$50–$100
Minor issues, best practices
🔐 Report a Vulnerability

Proven Since 2019

2019
Founded
Platform launched with BTC/ETH/LTC support
2020
Expanded to 50+ coins
Added major DeFi tokens during DeFi summer
2021
$100M exchanged
Milestone: first $100M in exchange volume
2022
9 languages added
Full multilingual support across Europe
2023
200+ pairs added
Expanded to all top-200 CoinGecko coins
2024
$2.4B milestone
Total cumulative volume exceeded $2.4 billion

Start exchanging

Six years, 847,000+ users, zero incidents. Now you know why.

⚡ Start Exchanging →