support@instaswap.com · July 2026
We present InstaSwap, a non-custodial exchange aggregation protocol that enables native cryptocurrency swaps across 66 heterogeneous blockchain networks. The protocol operates as a routing and rate-optimization layer atop a network of integrated decentralized liquidity protocols, including THORChain, Chainflip, Maya Protocol, NEAR Intents, Hyperliquid, 1inch, Jupiter, Uniswap, and others. InstaSwap introduces a walletless swap architecture that removes the requirement for client-side wallet connection, instead utilizing ephemeral deposit addresses generated per swap. On top of the swap engine, the protocol provides Split Swap and Payments (one deposit fanned out to as many as 100 recipient wallets through a private settlement layer), on-chain spot trading with live order books, decentralized perpetual futures with leverage, and tokenized stock trading backed 1:1 by real shares. All execution occurs on-chain through audited third-party smart contracts; the aggregation layer itself holds no user funds, deploys no custodial contracts, and stores no private keys. This paper describes the protocol architecture, cross-chain routing mechanics, the private settlement layer, security model, fee structure, developer integration surface, and preliminary token economics.
The cryptocurrency ecosystem has expanded to encompass hundreds of independent blockchain networks, each with its own consensus mechanism, transaction format, and native asset. A fundamental challenge facing users is the fragmentation of liquidity across chains. A holder of Bitcoin who wishes to acquire Ether, Solana, or another chain's asset must navigate a patchwork of custodial services (which introduce custody risk, identity requirements, and single points of failure) or a growing but still fragmented set of decentralized cross-chain protocols. This fragmentation imposes real costs: suboptimal execution prices, time spent manually querying multiple platforms, and security risk from interacting with unfamiliar protocol interfaces.
InstaSwap addresses this fragmentation by operating as a multi-protocol aggregation layer that queries its integrated decentralized liquidity sources simultaneously, scores the returned routes by a composite optimization function, and presents the user with the single best execution path. The protocol supports five product surfaces: instant cross-chain swaps of native assets, Split Swap and private payments (one deposit, up to 100 payouts), on-chain spot trading, decentralized perpetual futures with leverage, and tokenized stocks.
The term "native" is central to InstaSwap's design philosophy. When a user swaps BTC for ETH, they send real Bitcoin on the Bitcoin network and receive real Ether on the Ethereum network. No wrapped tokens, synthetic representations, or intermediary bridge contracts are involved. This is enabled by cross-chain protocols such as THORChain and Chainflip, which maintain their own validator networks and chain-specific liquidity vaults.
InstaSwap is non-custodial at every stage. The protocol never holds user private keys, never controls user wallets, and never takes custody of user funds. It functions purely as a routing, rate-optimization, and transaction-construction layer, delegating all on-chain execution to the integrated decentralized protocols.
InstaSwap's development history spans from May 2018 to the present, reflecting a deliberate architectural migration to fully decentralized, non-custodial infrastructure.
The platform launched in May 2018 as a licensed exchange providing fiat-to-crypto and crypto-to-crypto swap services. Between January 2021 and July 2022, fiat gateways expanded to support credit card and bank transfer purchases. In May 2022, the Partners Dashboard was introduced, establishing the B2B integration surface that remains a core component of the current protocol.
The pivotal architectural transition occurred in March 2023, when InstaSwap migrated to a fully decentralized, non-custodial DEX aggregation model. The motivations were threefold: the maturation of cross-chain DEX protocols (particularly THORChain), the validation of decentralized architecture following several high-profile custodial platform collapses in 2022, and increasing user demand for privacy-preserving, accountless exchange services.
In November 2024, walletless swap support expanded to cover 50+ tokens including Solana and Polkadot assets. February 2025 brought integration with 10+ additional DeFi protocols and 5+ wallet providers. During 2026 the protocol shipped four major product expansions: decentralized spot and perpetual trading with live order books, the Split Swap private fan-out engine, the Payments product built on the same settlement layer, and tokenized stock trading (20+ equities and ETFs backed 1:1 by real shares). A native utility token ($INS) is in preparation, with points-based distribution already live.
InstaSwap's architecture is organized into four horizontal layers: Presentation, Aggregation, Protocol Integration, and Blockchain. User requests flow downward through the stack; execution results propagate upward.
The presentation layer encompasses the client-facing interfaces: the primary web application at app.instaswap.com, the trading terminal at trade.instaswap.com, the embeddable swap widget, and the public REST API for programmatic access. This layer handles user input capture, trade parameterization, quote display, and transaction status reporting. It communicates with the aggregation layer via API calls and does not interact with blockchain networks directly.
The aggregation layer contains the routing engine and rate optimizer. When a swap request arrives, the engine dispatches concurrent rate queries to all applicable protocol adapters. Each returned quote is evaluated using a composite scoring function:
S(r) = w1 x OutputAmount(r) + w2 x SlippageScore(r) + w3 x GasCostScore(r) + w4 x ReliabilityScore(r)The route with the highest composite score is selected. For BTC-to-ETH, the engine queries multiple cross-chain protocols in parallel. For intra-chain pairs such as ETH-to-USDC, it queries the integrated DEX aggregators and single-chain venues of that network.
The protocol integration layer manages direct interfaces with each external decentralized protocol through dedicated adapter modules. Each adapter normalizes a protocol's external API, transaction construction format, signing requirements, deposit address generation, and status polling endpoints into a common internal interface. This plugin model decouples the aggregation engine from the specifics of any individual protocol and allows new liquidity sources to be added without touching the routing core.
The blockchain layer represents the on-chain execution environment across 66 supported networks. InstaSwap does not operate its own blockchain, consensus mechanism, or validator network. It relies entirely on the security and finality guarantees of the underlying chains and integrated cross-chain protocols. By not operating its own chain, InstaSwap avoids the complexity, cost, and security responsibility of maintaining validator infrastructure.
InstaSwap's cross-chain swaps operate on a native-asset model: the user sends cryptocurrency in its original form on its native blockchain and receives the destination cryptocurrency in its original form on the destination blockchain. No wrapping step, intermediary synthetic token, or bridge contract is involved. This is a critical distinction from the majority of cross-chain solutions, which rely on lock-and-mint bridge patterns that create synthetic wrapped representations.
The historical record validates concern about bridge risk. Between 2021 and 2024, wrapped token bridges suffered catastrophic exploits: Ronin (~$620M), Wormhole (~$320M), Nomad (~$190M), and Harmony Horizon (~$100M). By avoiding the wrapping paradigm entirely, InstaSwap's cross-chain swaps carry only the smart contract and economic security risk of the underlying cross-chain protocol, a fundamentally more robust security model.
For intra-chain swaps, InstaSwap routes through single-chain DEXs and aggregators: on Ethereum via 1inch, Uniswap, and other integrated aggregators; on Solana via Jupiter; on BNB Chain via PancakeSwap; on Avalanche and Arbitrum via their leading venues. The same composite scoring function S(r) applies.
In certain cases, the optimal swap path traverses one or more intermediate assets or protocols. For example, a swap from BTC to a Solana-native token may route as BTC to a settlement asset via a cross-chain protocol, followed by an intra-chain swap on Solana via Jupiter. The routing engine constructs and prices these combination routes automatically, presenting them as a single quote with one deposit and one delivery.
Several AMM paradigms are represented across the integrated protocols: Constant Product Market Makers (Uniswap V2 family), THORChain's Continuous Liquidity Pools with slip-based fees, concentrated liquidity designs (Uniswap V3 family), Chainflip's Just-In-Time AMM, and central-limit order books on high-throughput chains. The aggregation engine does not prefer any one design a priori; it evaluates actual quoted outputs for the specific trade parameters.
For cross-chain swaps routed through protocols such as THORChain or Chainflip, execution occurs within the protocol's own consensus environment rather than a public mempool, providing natural protection against sandwich attacks. For intra-chain EVM swaps, MEV protection depends on the specific protocol selected. Users can set slippage tolerance parameters bounding the maximum loss from price manipulation.
Bitcoin uses probabilistic finality (typically 6 confirmations). Ethereum achieves deterministic finality after approximately 12.8 minutes. Solana finalizes in under a second. Cross-chain swaps typically complete within minutes, with an estimated completion time returned with every quote. Intra-chain swaps complete within a single block confirmation.
Walletless swaps remove the requirement for client-side wallet connection, browser extension installation, or any software beyond a standard web browser.
The walletless mechanism operates through ephemeral (time-limited) deposit addresses generated at swap initiation. Stage 1: the user selects an asset pair and provides a receiving address and a refund address. Stage 2: InstaSwap coordinates with the selected protocol to generate a unique deposit address. Stage 3: the user sends source tokens to the displayed deposit address using any wallet. Stage 4: the routing engine executes the swap and delivers output tokens to the receiving address.
The walletless architecture has significant privacy implications. No wallet connection is established, so the protocol cannot associate the user's source wallet address with their browser session or any other client-side identifier. No account creation, email address, username, password, or identity is collected. KYT (Know Your Transaction) and AML screening is performed on every transaction. This combination makes walletless swaps particularly popular for privacy-conscious cross-chain conversions.
Beyond the source-wallet unlinkability above, swaps can settle through two optional privacy rails where the assets support them. The private rail settles the deposit through an intent-based liquidity layer: the output is paid from a shared pool that continuously processes many unrelated orders, so no on-chain link exists between the asset the user sends and the asset they receive. The size of the anonymity set grows with the volume flowing through the layer.
The zero-knowledge rail routes the swap through a shielded pool. A zk-SNARK validity proof authorizes the payout without revealing the sender, the destination, the token, or the amount, and without exposing any link between the deposit and the withdrawal; to an outside observer the settlement appears to originate from the shared pool. It is available for any token and adds a short proof window and a small shielding fee. Both rails remain non-custodial and KYT/AML screened, and settlement stays provable to the participant.
If a walletless swap fails, source assets are automatically returned to the refund address provided at initiation. For swaps executed by cross-chain protocols, the refund is executed by the protocol's validator network and does not depend on InstaSwap's backend being operational.
InstaSwap also supports conventional wallet-connected trading. Supported wallets include MetaMask, Ledger hardware wallets, Coinbase Wallet, and more than ten additional providers through injected provider detection, WalletConnect integration, and wallet-specific adapter modules. Both modes maintain the same non-custodial guarantee.
Split Swap extends the swap engine with private fan-out: a single deposit is swapped and distributed to as many as 100 destination wallets, each with its own asset and amount. Payments is the same settlement engine framed for real-world payouts: payroll, contributor payments, OTC settlement, and treasury distributions.
The user defines the recipient set (up to 100 addresses), the distribution mode (even, random, or custom weights), and the funding asset. The engine quotes the entire operation up front, validates minimums per leg before anything is created, and returns a single deposit address. After the entry deposit is swapped, settlement proceeds through a restricted-visibility execution environment before fanning out to the recipients, so the entry deposit is never publicly linked to the payouts.
Three rails are exposed per quote, depending on asset support: a private rail (default, settling in minutes), a zero-knowledge proof rail (available for any token, adding a proof window of roughly an hour and a small shielding fee), and a public rail (transparent fan-out, available where explicitly enabled). Optional execution parameters include amount randomization and staggered payout timing.
Split Swap is not a mixer. It moves the user's own deposit to recipients the user defines. Execution is private to the public but provable to the participants: settlement is cryptographically verifiable, records support selective disclosure to auditors, and all transactions pass KYT/AML screening.
The protocol supports 66 blockchain networks spanning every major architecture family: UTXO proof-of-work chains (Bitcoin, Litecoin, Bitcoin Cash, Dogecoin, Dash, Zcash), privacy chains (Monero, with ring signatures, stealth addresses, and RingCT), account-based networks (Ethereum, BNB Chain, Avalanche, TRON, Solana), Ethereum Layer 2 rollups (Arbitrum, Base, Optimism, Scroll), and independent consensus networks (XRP Ledger, Polkadot, Cosmos, TON, NEAR, Sui, Aptos, Stellar, Cardano, and others). New networks are added continuously; the live list is published in the documentation.
Aggregated liquidity currently spans cross-chain DEXs (THORChain, Chainflip, Maya Protocol), cross-chain intent settlement (NEAR Intents), an on-chain order-book DEX for spot and perpetuals (Hyperliquid), DEX aggregators (1inch, Jupiter, 0x Protocol, OpenOcean, Kyber Network), and single-chain or multi-chain DEXs (Uniswap, SushiSwap, PancakeSwap, Camelot, Pangolin, WOOFi, Trader Joe). All are decentralized, non-custodial protocols; InstaSwap holds no user funds at any point in any route.
The spot trading module, live at trade.instaswap.com, enables users to buy and sell crypto assets against live on-chain order books. Unlike custodial platforms, order matching and settlement occur on decentralized infrastructure and the user retains custody throughout. The module supports market and limit orders, real-time order book depth, balance and position tracking, and full trade history. Trades placed through partner integrations carry affiliate attribution, and profitable trades accrue InstaSwap Points.
Perpetual contracts allow traders to take leveraged long or short positions without an expiry date. The funding rate is a periodic payment exchanged between long and short position holders that anchors the perpetual mark price to the underlying spot price: when the mark trades above spot, longs pay shorts; when below, shorts pay longs. Funding accrues hourly, and both current and annualized rates are published per market.
Positions support leverage of up to 20x. Each position carries initial and maintenance margin requirements; account-level margin ratio, used margin, unrealized PnL, and per-position liquidation prices are exposed in real time. If unrealized losses reduce margin below maintenance, the position is subject to liquidation. Order types include market, limit, and stop-loss. All margin collateral is held by the underlying protocol's on-chain infrastructure, never by InstaSwap.
Perpetual trading with leverage carries substantial financial risk and is intended exclusively for experienced participants who understand derivative mechanics. Liquidation can result in total loss of deposited margin collateral.
The tokenized stocks module extends the swap engine to real-world equities. Users can buy tokens tracking stocks and ETFs such as Apple, Tesla, NVIDIA, and the S&P 500 with any supported cryptocurrency, and hold them in their own wallet.
Each stock token (issued under the xStocks brand by Backed) is collateralized 1:1 by the actual underlying share, held with a regulated custodian and verifiable through on-chain proof of reserves. The token tracks the share price but does not constitute a brokerage account and does not carry shareholder rights such as voting.
Dividends and splits are applied automatically through an on-chain multiplier mechanism: the token balance visible in the holder's wallet adjusts without any claim process.
Stock tokens trade against decentralized on-chain liquidity 24/7, including nights and weekends. Because on-chain markets continue trading while the underlying US market is closed, the on-chain price can drift from the official close until the next session opens. Purchases and sales route through the same aggregation engine as every other swap: any supported funding asset in, stock token out, and the reverse.
Tokenized stocks are issued by third-party issuers under their own terms, which exclude US persons and a list of restricted jurisdictions. InstaSwap surfaces these products non-custodially and without sign-up, but users are responsible for compliance with the issuer's terms.
InstaSwap does not charge a flat platform fee. Fees are embedded in the swap execution through the underlying liquidity protocol and reflected in the output amount presented during quoting. The observed range is approximately 0.3% to 1.0%, varying by protocol, asset pair, trade size, and market conditions. Every quote returned by the API includes a machine-readable fee breakdown itemizing network fees, the platform margin, and any partner fees, in both native asset terms and USD.
Network gas fees are determined by each chain's congestion level. For small-denomination swaps on expensive chains, gas can constitute a substantial fraction of total trade cost. The aggregation engine's GasCostScore factor accounts for this when selecting routes.
Integration partners may configure their own fee on top of the base execution cost. Partner fees and sub-partner splits are itemized transparently in the fee breakdown of every quote, swap, and webhook payload, and settle automatically to the partner's dashboard balance.
The foundational security property: at no point does the protocol take custody of user funds, hold private keys, or control user wallet addresses. An attacker who compromises InstaSwap's backend infrastructure gains access to routing logic and interface code, but not to user funds.
All communications are encrypted using TLS 1.2 or higher. Webhook deliveries to partners are signed with HMAC-SHA256 so recipients can verify payload authenticity and integrity.
Because InstaSwap delegates all on-chain execution to integrated protocols and does not deploy its own swap execution contracts, on-chain security is determined by the security of the selected routing protocol. InstaSwap does not introduce additional smart contract risk.
When a swap cannot complete, refund logic returns source assets to the user's refund address. For cross-chain protocol routes this operates at the protocol validator level, independently of InstaSwap's backend.
Every transaction is screened with KYT/AML tooling from a specialized third-party provider. Addresses previously flagged for illicit activity are rejected before execution. No identity information is collected from users; screening operates purely on on-chain data.
Five primary threat categories are considered: backend compromise (limited to routing and interface manipulation, not fund access), integrated protocol risk (mitigated by multi-protocol integration and route scoring), DNS or certificate hijacking (mitigated by DNSSEC and certificate transparency monitoring), front-end supply chain attacks (mitigated by dependency auditing), and blockchain-level attacks (mitigated by confirmation requirements).
A public transaction explorer at explorer.instaswap.com allows anyone to monitor swap activity. Every swap is visible on the relevant blockchains and can be independently verified.
The public REST API (walletlessapi.instaswap.com) provides endpoints for token and pair enumeration (tokens-lite, pairs-lite), quoting (quote-lite), swap creation (swap-lite), status tracking (status-lite), and the full Split Swap lifecycle. Assets are identified with a lowercase network.token notation (for example btc.btc or eth.usdt) with no contract addresses required. Requests are attributed with a partner affiliate ID; no API key is needed to quote. Full interactive documentation is available through the Partners Dashboard.
Partners can register webhook endpoints to receive signed notifications on every swap state change (deposit detected, swapping, complete, failed, refund), removing the need to poll. Payloads are HMAC-SHA256 signed and optionally include the per-swap fee breakdown.
The widget provides a plug-and-play swap interface embeddable with a script tag or as a component for React, Next.js, Vue, and Angular. Widget operators earn commission on swaps executed through their embedded instance, with domain whitelisting enforced through the Partners Dashboard.
Beyond the API and widget, the protocol supports fully branded exchange deployments: a complete trading front end (swaps, spot, perpetuals, tokenized stocks, portfolio) operated under the partner's domain and brand, with per-deployment fee configuration and automatic revenue attribution.
The affiliate program operates a shared-revenue model: affiliates earn 50% of the swap fees generated by their referred users, paid in USDC, with no volume thresholds. Custom arrangements are available for high-volume partners.
Partners can issue sub-affiliate tokens to their own downstream integrators. Sub-affiliate attribution is carried on API requests via a dedicated header, and fee splits between the platform, the partner, and the sub-affiliate are itemized in every fee breakdown and settled automatically.
The Partners Dashboard at partners.instaswap.com provides real-time analytics across swaps, spot, and perpetuals, integration management (API attribution, widget configuration, domain whitelisting, webhooks, fee configuration), and revenue tracking per deployment.
The InstaSwap token ($INS) has not yet launched. Supply, allocation, pricing, and sale parameters have not been announced; anything circulating elsewhere is not official. Full details will be published ahead of the Token Generation Event.
The token is designed to function as the utility backbone of the InstaSwap ecosystem, creating economic alignment between the protocol and its user community. The planned direction includes fee discounts for holders, trading rewards, tiered benefits, and governance participation, with every parameter subject to change until officially announced.
Users accumulate InstaSwap Points today through trading activity (2x fees paid), quests, and referrals (10% bonus from referred users). Points determine distribution allocations for the $INS token. The live leaderboard is published at instaswap.com/leaderboard.
Completed phases:
Upcoming: the $INS token generation event with points-based distribution, staking, expanded blockchain and protocol coverage, additional order types, and continued refinement of the aggregation engine's scoring function.
InstaSwap provides a unified non-custodial interface for cross-chain cryptocurrency swaps, private one-to-many payments, spot trading, perpetual futures, and tokenized stocks by aggregating liquidity from decentralized protocols across 66 blockchain networks. The aggregation engine surfaces optimal routing across fragmented liquidity using a composite scoring function that weighs output amount, slippage, gas cost, and route reliability.
The walletless swap mode eliminates the friction of wallet connection through an ephemeral deposit address mechanism. The Split Swap settlement layer extends the engine to one-to-many payouts that are private to the public yet provable to participants. The native-asset model, in which users exchange real BTC, ETH, SOL, and other tokens in their original form without wrapping or bridging, eliminates the smart contract risk of intermediary bridge contracts.
By delegating execution to purpose-built decentralized protocols and holding no user funds at any stage, InstaSwap inherits robust, battle-tested security models without deploying custodial infrastructure. The upcoming $INS token will complete the ecosystem; its parameters will be announced ahead of the Token Generation Event.