Instaswap: A Non-Custodial, Decentralized Cross-Chain DEX Aggregation Protocol

The presentation layer encompasses three client-facing interfaces: the primary web application at app.instaswap.com, the embeddable swap widget, and the public REST API for programmatic access. This layer handles user input capture, trade parameterization, quote display, and transaction status reporting. It communicates with the aggregation layer via internal API calls and does not interact with blockchain networks directly.

The aggregation layer contains the routing engine and rate optimizer. When a swap request arrives, the engine dispatches concurrent rate queries to all applicable protocol adapters. Each returned quote is evaluated using a composite scoring function:

S(r) = w1 x OutputAmount(r) + w2 x SlippageScore(r) + w3 x GasCostScore(r) + w4 x ReliabilityScore(r)

The route with the highest composite score is selected. For BTC-to-ETH, the engine queries THORChain, Chainflip, and Maya Protocol in parallel. For ETH-to-USDC, it queries 1inch, Uniswap, SushiSwap, 0x Protocol, OpenOcean, and Kyber Network.

The protocol integration layer manages direct interfaces with each external non-custodial, decentralized protocol through dedicated adapter modules. Each adapter normalizes a protocol external API, transaction construction format, signing requirements, deposit address generation, and status polling endpoints into a common internal interface. This plugin model decouples the aggregation engine from the specifics of any individual protocol. Current adapters cover 15 protocols: 3 cross-chain DEXs (THORChain, Chainflip, Maya Protocol), 5 DEX aggregators (1inch, Jupiter, 0x Protocol, OpenOcean, Kyber Network), and 7 single-chain DEXs (Uniswap, SushiSwap, PancakeSwap, Camelot, Pangolin, WOOFi, Trader Joe).

The blockchain layer represents the on-chain execution environment across 35 supported networks. Instaswap does not operate its own blockchain, consensus mechanism, or validator network. It relies entirely on the security and finality guarantees of the underlying chains and integrated cross-chain protocols. By not operating its own chain, Instaswap avoids the complexity, cost, and security responsibility of maintaining validator infrastructure.

Instaswap cross-chain swaps operate on a native-asset model: the user sends cryptocurrency in its original form on its native blockchain and receives the destination cryptocurrency in its original form on the destination blockchain. No wrapping step, intermediary synthetic token, or bridge contract is involved. This is a critical distinction from the majority of cross-chain solutions, which rely on lock-and-mint bridge patterns that create synthetic wrapped representations.

The historical record validates concern about bridge risk. Between 2021 and 2024, wrapped token bridges suffered catastrophic exploits: Ronin (~$620M), Wormhole (~$320M), Nomad (~$190M), and Harmony Horizon (~$100M). By avoiding the wrapping paradigm entirely, Instaswap cross-chain swaps carry only the smart contract and economic security risk of the underlying cross-chain protocol, a fundamentally more robust security model.

For intra-chain swaps, Instaswap routes through single-chain DEXs and aggregators: on Ethereum via 1inch, Uniswap, SushiSwap, 0x Protocol, and Kyber Network; on Solana via Jupiter; on BNB Chain via PancakeSwap; on Avalanche via Pangolin and Trader Joe; on Arbitrum via Camelot. The same composite scoring function S(r) applies.

In certain cases, the optimal swap path traverses one or more intermediate assets. For example, DOGE to AVAX may route as DOGE to BTC via THORChain followed by BTC to AVAX. For large trades that would incur significant price impact in a single pool, the engine can split the trade across multiple pools or protocols.

Four primary AMM paradigms are represented: Constant Product Market Maker (CPMM) used by Uniswap V2 and SushiSwap; THORChain Continuous Liquidity Pool (CLP) with slip-based fee; Concentrated Liquidity used by Uniswap V3 and Camelot; and Chainflip Just-In-Time (JIT) AMM. Instaswap aggregation engine does not prefer any one design a priori, evaluating actual quoted outputs for specific trade parameters.

For cross-chain swaps routed through THORChain or Chainflip, the swap execution occurs within the cross-chain protocol own consensus environment, not in the public mempool, providing natural protection against sandwich attacks. For intra-chain EVM swaps, MEV protection depends on the specific protocol selected. Users can set slippage tolerance parameters bounding the maximum loss from price manipulation.

Bitcoin uses probabilistic finality (6 confirmations, ~60 minutes). Ethereum achieves deterministic finality after approximately 12.8 minutes. Solana achieves finality in approximately 400 milliseconds. Cross-chain swaps via THORChain typically complete within 10 to 60 minutes depending on chains involved. Intra-chain swaps complete within a single block confirmation.

The walletless mechanism operates through ephemeral (time-limited) deposit addresses generated by the underlying cross-chain protocol at swap initiation. Stage 1: user selects asset pair, provides a receiving address and a refund address. Stage 2: Instaswap coordinates with the selected protocol to generate a unique, time-limited deposit address. Stage 3: user sends source tokens to the displayed deposit address using any wallet. Stage 4: the cross-chain protocol executes the swap and delivers output tokens to the receiving address.

The walletless architecture has significant privacy implications. No wallet connection is established, so the protocol cannot associate the user source wallet address with their browser session, IP address, or any other client-side identifier. No account creation, email address, username, password, or identity is collected. KYT (Know Your Transaction) and AML verification is performed. This makes walletless swaps particularly popular for XMR-to-BTC and XMR-to-USDC conversions.

If a walletless swap fails, the underlying cross-chain protocol automatically refunds the user source assets to the refund address provided at initiation. This refund is executed by the protocol validator network and does not depend on Instaswap backend being operational.

Instaswap also supports conventional wallet-connected trading. Supported wallets include MetaMask, Ledger hardware wallets, Coinbase Wallet, and more than ten additional providers through injected provider detection, WalletConnect protocol integration, and wallet-specific adapter modules. Both modes maintain the same non-custodial, decentralized guarantee.

Six supported networks use the UTXO model combined with proof-of-work consensus: Bitcoin (BTC, SHA-256), Litecoin (LTC, Scrypt), Bitcoin Cash (BCH, SHA-256), Dogecoin (DOGE, Scrypt), Dash (DASH, X11), and Zcash (ZEC, Equihash).

Monero (XMR) uses the RandomX proof-of-work algorithm and three layered privacy technologies: ring signatures (mixing inputs with decoys to obscure the sender), stealth addresses (generating one-time receiving addresses), and RingCT (hiding transaction amounts using Pedersen commitments and range proofs).

Five supported networks use account-based transaction models: Ethereum (ETH, PoS), BNB Chain (BNB, PoSA), Avalanche (AVAX, Snowball consensus), TRON (TRX, DPoS), and Solana (SOL, Proof-of-History + PoS hybrid).

Two supported networks are Ethereum Layer 2 optimistic rollups: Arbitrum (fraud proof dispute resolution) and Base (OP Stack architecture, developed by Coinbase). Both use ETH as their native gas token.

The XRP Ledger uses federated Byzantine agreement. Polkadot uses a relay chain with Nominated Proof-of-Stake. Cosmos uses Tendermint BFT consensus with the Inter-Blockchain Communication (IBC) protocol.

15 non-custodial, decentralized protocols: 3 cross-chain DEXs (THORChain, Chainflip, Maya Protocol), 5 DEX aggregators (1inch, Jupiter, 0x Protocol, OpenOcean, Kyber Network), 7 single-chain or multi-chain DEXs (Uniswap, SushiSwap, PancakeSwap, Camelot, Pangolin, WOOFi, Trader Joe).

The user selects one of three trading modes: instant swap, spot trading, or perpetual trading. Each mode activates a distinct routing pipeline within the aggregation engine.

The user specifies the source and destination assets, trade amount, destination address, and refund address. The aggregation engine dispatches concurrent rate queries, applies S(r), and presents the best route including expected output, effective rate, selected protocol, estimated execution time, fee breakdown, and quote validity window.

Upon user confirmation, the protocol adapter constructs the appropriate transaction. The adapter continuously polls status endpoints and reports progress through the presentation layer.

Upon successful completion, swapped tokens are delivered to the user wallet. If a swap fails, the underlying protocol refund mechanism automatically returns source assets to the refund address, independently of Instaswap infrastructure.

The funding rate is a periodic payment exchanged between long and short position holders that anchors the perpetual contract mark price to the underlying spot price. When the mark price exceeds spot, long holders pay short holders; when below spot, short holders pay long holders.

Perpetual contracts allow traders to open positions with leverage, depositing a fraction of the position notional value as margin collateral. Each position has initial margin and maintenance margin thresholds. If unrealized losses reduce margin below maintenance, the position is subject to liquidation. All margin collateral is held by the protocol smart contracts, not by Instaswap.

Perpetual trading with leverage carries substantial financial risk and is intended exclusively for experienced participants who understand derivative mechanics. Liquidation can result in total loss of deposited margin collateral.

Instaswap does not charge a flat platform fee. Fees are embedded in the swap execution through the underlying liquidity protocol and reflected in the output amount presented during quoting. The observed range is approximately 0.3% to 1.0%, varying by protocol, asset pair, trade size, and current market conditions.

Network gas fees are determined by each chain current congestion level. For small-denomination swaps on expensive chains, gas fees can constitute a substantial fraction of the total trade cost. The aggregation engine GasCostScore factor accounts for this.

ChangeNow charges approximately 0.5% to 2.0% with custodial execution. FixedFloat charges 0.5% for fixed-rate swaps and 1.0% for floating-rate swaps, also with custodial execution. Neither aggregates across multiple DEX protocols. Instaswap advantages are the non-custodial, decentralized architecture and multi-protocol aggregation across 15 decentralized liquidity sources.

The foundational security property: at no point does the protocol take custody of user funds, hold private keys, or control user wallet addresses. An attacker who compromises Instaswap backend infrastructure gains access to routing logic and interface code, but not to user funds.

All communications are encrypted using TLS 1.2 or higher, providing confidentiality, integrity, and authentication.

Because Instaswap delegates all on-chain execution to integrated protocols and does not deploy its own smart contracts for swap execution, the on-chain security is determined entirely by the security of the selected routing protocol. Instaswap does not introduce additional smart contract risk.

When a swap cannot complete, the underlying protocol validator network autonomously initiates a refund. This logic operates independently of Instaswap backend.

Five primary threat categories: backend compromise (limited to routing and interface manipulation, not fund access), cross-chain protocol risk (mitigated by multi-protocol integration), DNS or certificate hijacking (mitigated by DNSSEC and certificate transparency), front-end supply chain attacks (mitigated by dependency auditing and SRI hashes), and blockchain-level attacks (mitigated by confirmation requirements).

A public transaction explorer at explorer.instaswap.com allows users to monitor swap activity. Every swap is publicly visible on the relevant blockchains and can be independently verified.

The API provides RESTful endpoints for quote retrieval, swap initiation, status polling, and asset enumeration. It uses the CHAIN.ASSET notation for asset identification. Full documentation is published at instaswap.com/api-integration.

The widget provides a plug-and-play swap interface embeddable via a single iframe element. Widget operators earn commission on swaps executed through their embedded instance.

The program defines three tiers based on monthly referral volume: Starter (up to $10,000, 30% commission), Growth ($10,000 to $50,000, 40%), and Pro (above $50,000, 50%).

The Partners Portal at partners.instaswap.com provides real-time analytics, integration management, 24/7 support, and co-marketing access to Instaswap community of over 25,000 active users.

The token is designed to function as the utility backbone of the Instaswap ecosystem, creating economic alignment between the protocol and its user community.

Four primary utility vectors are planned: fee discounts for holders and stakers, trading cashback proportional to swap volume, tiered benefits (Bronze, Silver, Gold, Platinum, Diamond) with escalating rewards, and governance participation.

A portion of platform fee revenue will be allocated to a buy-back-and-burn program. The protocol will periodically purchase tokens on the open market and send them to a verifiable burn address, permanently removing them from circulating supply. This mechanism creates deflationary pressure that scales with platform volume.

• 30% — Ecosystem and Rewards
• 20% — Team and Advisors (multi-year vesting)
• 15% — Private Sale
• 15% — Liquidity and Market Making
• 10% — Treasury and Operational Reserve
• 10% — Public Sale at TGE