| | Bitcoin to Monero Atomic Swaps
|
ZETO is a web interface for BTC → XMR atomic swaps, built on the swap protocol of eigenwallet (formerly UnstoppableSwap). You trade peer-to-peer with a liquidity maker - at every point of the protocol, either the swap completes or you can recover your bitcoin.
Quote — you ask a maker for a price over libp2p.
Setup — both sides generate key shares and pre-sign the Bitcoin cancel, refund and punish transactions, before anything moves.
BTC lock — your bitcoin goes into a 2-of-2 output.
XMR lock — the maker locks monero to an address derived from both key shares, and sends you the transfer proof.
Redeem — you hand over an encrypted signature. The maker redeeming your BTC reveals their Monero key share, which sweeps the locked XMR to you.
Safety — if anything stalls, timelocks let you cancel and refund the BTC.
Setup is what makes the rest safe: adaptor signatures on secp256k1, tied to the ed25519 Monero key shares by a cross-group DLEQ proof.
BROWSER ARCHITECTURE
The protocol needs a Bitcoin wallet, a Monero wallet and a libp2p node. Your browser runs the interface and drives a daemon (zetod) embedding the audited eigenwallet Rust crates. A daemon is required — ZETO performs real swaps, so there is no simulated mode to mistake for one.
Makers come from libp2p rendezvous through that daemon, so you see the same book as the desktop app — including
TOR makers a browser could never reach on its own.
YOUR KEYS NEVER LEAVE YOUR BROWSER
Your Bitcoin wallet lives only in this browser, encrypted with your password. The lock transaction is
built and signed locally — the daemon receives the signed result and never your keys.
Two checks make that safe against the daemon itself, which is shared infrastructure. Your browser signs only the exact transaction it just built, and it verifies the change address is the one you gave when starting the swap — the protocol reuses that address as the destination of every refund path. If either differs, nothing is signed.
IF ZETO DISAPPEARS MID-SWAP
Atomic swaps run on timelocks, so a coordinator vanishing at the wrong moment would be a real problem. At every stage you can download what you need to finish without us — a plain text file, broadcastable from any node, from a phone.
Bitcoin refund kit. From the lock until the maker redeems, you can save two already signed transactions — a cancel and a refund — that return your coins to your own address, with no cooperation from anyone. The cancel becomes broadcastable 24 blocks after the lock confirms, and you have 144 more before the maker may claim the coins. Every output pays you, so the file is worthless to whoever steals it.
Monero redeem kit. Once the maker has redeemed the Bitcoin, ZETO publishes the Monero transaction that pays you and keeps retrying until it confirms — you normally do nothing. You can still save it and publish it on any Monero node yourself; its outputs are fixed at signing time.
FEES
ZETO charges a
0.7% coordinator fee for infrastructure. It is not a custody fee: it is one output of the final Monero redeem transaction — the protocol-native receive pool eigenwallet uses for its own developer tip. Network fees and the maker's spread go to miners and makers, not to ZETO.
Don't want to pay it? Use the eigenwallet desktop app directly: same protocol, same makers, zero coordinator fee. ZETO exists for those who prefer a browser.
Questions, or a swap that needs a hand?
zeto.cash@proton.meClearnet:
https://zeto.cashTerms:
https://zeto.cash/terms
