> For the complete documentation index, see [llms.txt](https://docs.yifi.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.yifi.io/swap-types/private-swaps.md). # Private Swaps Private Swaps are a dedicated rail for users who want to reduce the on-chain linkability between their source and destination addresses. YiFi offers two separately branded routes. Both run as a **two-leg** flow through [off-chain](/swap-types/off-chain-swaps.md) partner exchanges with an intermediate hop. > Swap without linking your source and destination wallets. ### The two private modes #### Private (XMR-hop) Two-leg routing through partner exchanges with an intermediate hop in **Monero**. The XMR leg adds a cryptographic privacy layer between the incoming and outgoing legs. ```mermaid graph LR A[Your wallet] -->|Leg 1: source asset| B[Partner exchange A] B -->|Converts internally to XMR| C[Monero network hop] C -.->|Sender, receiver, amount not visible on public ledger| D[Partner exchange B] D -->|Converts to destination asset| E[Destination wallet] ``` #### Stealth (stable-hop) Two-leg routing through partner exchanges with an intermediate hop in a **stablecoin**. This trades the cryptographic XMR layer for price stability during the swap and remains transparent on-chain. ```mermaid graph LR A[Your wallet] -->|Leg 1: source asset| B[Partner exchange A hot wallet] B -->|Random chain + stablecoin, chosen per swap| C{1 of ~20 chains
1 of ~5 stablecoins} C --> D[Partner exchange B hot wallet] D -->|Converts to destination asset| E[Destination wallet] ``` ### Private vs. Stealth | Parameter | Private (XMR-hop) | Stealth (stable-hop) | | -------------------------------- | ---------------------------------------------------------- | -------------------------------------------------------------------- | | Intermediate hop | Monero | Stablecoin | | Privacy source | Cryptographic (stealth addresses, ring signatures, RingCT) | Probabilistic (randomized chain + coin) | | Price exposure during hop | XMR volatility | Minimal (pegged) | | On-chain transparency of the hop | Opaque | Transparent [(probabilistic barrier](#stable-hop-privacy-explained)) | | Typical execution time | Slightly longer. Up to 15 min | Faster. Avg 3 min | ### How privacy actually works #### **XMR hop privacy explained** The exchange happens between two partner exchanges, with Monero as the intermediate asset. Your source asset is converted into XMR at the first partner, moved across the Monero network, then converted from XMR into your destination asset at the second partner. What makes this stronger than randomization alone is that the middle leg is **cryptographically opaque by protocol design**, not just hard to correlate. Monero combines three mechanisms on every transaction: 1. **stealth addresses** (a unique one-time address is generated for each transfer, so the recipient's real address never appears on-chain), 2. **ring signatures** (the true sender is mixed in with a set of decoys, so no single sender can be identified), 3. and **RingCT** (the transfer amount is encrypted, not published). Seeing any of that data requires the transaction's private view key — something the two exchange partners don't expose externally. So even if an observer held records from both partners at once, the Monero leg itself doesn't hand them the sender, receiver, or amount to line up. #### **Stable hop privacy explained** The exchange takes place between the hot wallets of two different exchange partners. Funds from the first leg settle into a partner's hot wallet (belonging to any of our off-chain providers), then move out on the second leg through one of roughly 20 supported chains, in one of 5 stablecoins – chosen at random for that swap. The randomization is what does the work here, not any property of the stablecoin itself. Unlike the XMR leg, this hop is fully public – an observer can see both transfers on-chain. What breaks the link is that they can't predict, from watching the first leg, which specific combination of provider, chain, and stablecoin the second leg will use. As our network of off-chain integrations grows, this combinatorics pool expands, creating an even larger matrix of possibilities. This is a probabilistic barrier, not a cryptographic one – a determined observer with enough correlating data (timing, amount patterns) has a better chance against this "Stable hop" than against the XMR hop. {% hint style="info" %} **Reduced linkability, not anonymity.** Both modes make it materially harder to connect a source and destination wallet – they are not an anonymity guarantee. Each leg is a one-to-one swap through a partner exchange, under that partner's own terms. See [Privacy & Compliance](https://claude.ai/chat/privacy-and-compliance.md). {% endhint %} ### **Private Swaps – Summary at a glance** * **Privacy:** High on the XMR hop (cryptographic), Moderate on the Stealth hop (probabilistic) – reduced linkability, not anonymity. * **Speed:** Moderate – two-leg execution, XMR hop typically takes 5-20 min, while Stealth only 2-5 min. * **Custody:** Non-custodial at the platform level – funds pass one-to-one through partner exchanges on each leg. * **Best for:** Breaking the on-chain link between source and destination when privacy matters more than speed. ### Integrating Private routes are quoted and executed through the same lifecycle as the other rails (quote → order → status), with an additional query parameter on the quote request selecting the mode and intermediate coin. See the private routing endpoints in the [API Reference](https://claude.ai/chat/api-reference.md).