What is public
What anyone can see.
Solana is a public ledger and Monero is a private one. An exit crosses from the first to the second, so part of it is always on show. This page says which part, for each route, and what Nero itself knows. The same facts are in the Paper; here they are side by side.
On every route the Solana side is public: that a wallet sent funds, when, and how much. What differs is whether your Monero address is on Solana too.
Private exit, with a wallet
You sign one transaction. Our solver pays XMR from its own Monero wallet.
| On Solana | Your wallet, the token and the amount, the time, and that the funds went to Nero's deposit wallet. The transaction carries a note holding your Monero address, sealed in your browser so only the solver can open it. To everyone else it is unreadable. |
|---|---|
| Not on Solana | Your Monero address, the Monero transaction and its tx key. |
| On Monero | A transaction like any other. Monero hides who sent it, who received it and how much. |
| Known to Nero | The solver opens the sealed address to pay it, so it knows which Solana wallet paid which Monero address. It keeps that in its own records and publishes none of it. |
| Only in your browser | The payment proof (the Monero transaction and its tx key). It is shown to the browser that made the order and to no one else. |
Private exit, Send SOL
No wallet is connected. You send SOL to a one-time address from any wallet or exchange.
| On Solana | The transfer into the one-time address: who sent it (your wallet, or the exchange's), the amount and the time. The address is later emptied into Nero's deposit wallet, so it can be tied to Nero. If an order is refunded, the refund goes to the Solana address you gave, in public. |
|---|---|
| Not on Solana | Your Monero address. It is sealed in your browser and handed to the solver in that form; on this route it is never written to the chain at all. |
| On Monero | The same as above: sender, receiver and amount are hidden. |
| Known to Nero | Which one-time address paid which Monero address, and the refund address you gave. |
Private exit, other assets
USDC or USDT on Solana, or a coin on Base, Ethereum, Arbitrum, Optimism, Polygon or Avalanche. A third-party route carries the funds to our solver.
| On your network | Your transfer to the one-time address there: your sending address, the asset, the amount and the time. |
|---|---|
| On Solana | SOL arriving at a one-time address of our solver, and that address being emptied into Nero's deposit wallet. |
| Known to the route | Your deposit and the refund address you gave on your own network. It never sees your Monero address. |
| Known to Nero | The order, the Monero address it paid, and the route's record of your deposit. |
| On Monero | Sender, receiver and amount are hidden. |
Standard exit
For amounts larger than the solver can cover. It runs through the wXMR bridge, and it is the one route that names your Monero address in public.
| On Solana | Your wallet, what you swapped and how much, the Monero address you exit to, and the bridge's Monero transaction and tx key once it has paid. |
|---|---|
| On Monero | The transaction hides its sender, receiver and amount as always. But with the tx key from Solana, anyone can confirm that your address received that amount. |
| Known to the bridge | Everything above. The bridge is a third party; Nero does not run it. |
Use a fresh subaddress for a standard exit, and send the XMR on to another of your own addresses before spending it.
Enter, from Monero
| On Solana | Your wallet, the Monero subaddress the bridge gave it, and the wXMR you receive. |
|---|---|
| Not shown | Where the XMR came from. The record says this wallet receives from Monero, not from whom. |
Our own numbers
The Verify page and the public API publish private exits as running totals only: how many, and how much XMR. Never per order and never per day, so no single exit can be picked out by its date and size. An order's signed promise is safe to share: it names the amounts and a hash of the sealed address, never the address itself.
This browser
Your recent exits, the last token you used and each private order's proof are kept in this browser's own storage, not on a server. Clearing site data removes them. An order link holds the order's public id only, so it shows nothing in anyone else's browser.
After the XMR lands
Nothing that happens next is visible. Monero hides the sender, receiver and amount of every later transaction. Three habits keep the Solana side from saying more than it has to:
- Exit to a fresh subaddress each time (it starts with 8).
- Avoid round amounts, and do not spend the moment it arrives.
- Never post a tx key or an order's proof in public: it shows your address and the amount.
Not sure which route fits? Help has a short answer on which exit to use, and the Paper lists who you trust on each.