Risks & terms
By using the app you acknowledge the following risks. Read them before you send your first XMR.
- 1. Not financial advice
Piconero is a tool. Nothing in the app (trending lists, featured tokens, labels) is a recommendation to buy or sell. You decide and you are responsible.
- 2. Memecoins can go to zero
Most Solana tokens lose most of their value, often within hours. Rug pulls, thin liquidity, high price impact and manipulation are common. The safety filter removes only some obvious traps. Only trade what you can afford to lose.
- 3. Transactions are irreversible
A sent transaction on Solana or Monero can't be undone. A wrong address or amount means lost funds. The app simulates every transaction before sending, but it can't protect you from a mistyped address.
- 4. The wxmr.io bridge is custodial
wXMR is backed by native XMR held by the wxmr.io team. An outage, relayer bug or loss of reserves can mean delays or losses. The app monitors the bridge and offers an exchange fallback route, but it can't remove that risk.
- 5. Exchanges are third parties
ChangeNOW, SideShift and StealthEX may delay, pause (AML review) or refund a swap. Rates are floating; the final amount can differ from the estimate.
- 6. Beta features
The private balance (Helius Privacy) is in beta and under audit. It keeps your idle balance out of plain view, but moves in and out are public with their amounts and trades on Solana stay public. It may contain bugs.
- 7. You are responsible for your key
Your key exists only in your browser. Nobody — including the operator — can recover or freeze it. Without a backup (12 words / private key) you lose your funds if you lose the device, clear browser data or lose your passkey. Never show your backup to anyone or paste it into any website.
- 8. Fees
The app charges a fee on swaps (1%), the bridge charges 0.1%, and exchanges build their fee into the rate. Solana network fees are paid from a small SOL reserve that the app tops up from XMR.
- 9. Privacy has limits — and we keep no logs
The server keeps no request logs with IPs, user-agents or wallet addresses, and your browser talks only to this site (RPC providers and APIs never see your IP). That doesn't hide everything: Solana is a public ledger, the bridge and exchanges see their side of every transfer, and your internet provider sees that you visit this site unless you use Tor. Stealth mode, split buys and the private balance reduce links between your wallets; they don't remove them.