FixedFloat

Operating since 2018 as a fully-automated, non-custodial instant swap service supporting 100+ cryptocurrencies with Bitcoin Lightning Network support, fixed (1% fee, rate locked for 10 minutes) and floating (0.5% fee) rate options, and a $1 minimum — among the lowest available on any swap service. Legal entity is FixedFloat OÜ, registered in Estonia, with FIU licence; not FCA or US-MSB registered. U.S. persons are prohibited. Trustpilot rating ~4.0/5 across 2,100+ reviews, generally fast settlement (~2 minutes), competitive fees, broad popularity in the privacy-focused community. No KYC for standard transactions — no signup, no documents under normal use. Per their own ToS section 7, orders may be suspended only when funds are "clearly related to criminal activity" based on information from business partners, public sources, victim complaints, or law enforcement requests, and FixedFloat reserves the right not to disclose the source of that information. Without providing evidence of honest receipt of funds plus full transaction details, unfreezing and refunds are not possible. KYC is offered as a way to reduce risk in unfreezing. Some transactions are also frozen pending OFAC clearance. BestChangeRatingFactsIn practice, the AML enforcement is among the most aggressive and least flexible in the swap-aggregator space. Reported cases include a user submitting 3 IDs, photo, video, and audio per FF's specific instructions, then being refused refund because they had watermarked the documents to prevent leaks; followed by demands for bank statements that the user had no way to provide because their bank doesn't deal with crypto; and a case where a user complied with all documentation requests since April 2025 and was still receiving "your case is on check" responses 5 months later with no resolution. There's also at least one Trustpilot account of $4,500 seized for over 8 months with the user being told to "get law enforcement to message their legal email". Major incident: the February 2024 hack. This is the critical caveat that disqualifies FF from the cleanest tier of services. On 16–18 February 2024, FixedFloat was drained for approximately $26.1 million — 1,728 ETH (~$4.85M) and 409 BTC (~$21M) in what the team eventually confirmed was an external attack exploiting vulnerabilities in their security structure / infrastructure flaws and insufficient protection. The platform's handling drew criticism: FixedFloat froze the protocol before publicly acknowledging the hack, spurring rugpull accusations; claimed it had no resources to provide information despite responding to tweets and rolling out a new website; provided details only privately to journalists via written responses. The exchange said user funds weren't affected, only its own internal hot wallets. Then in April 2024, a second incident saw "suspicious" transfers totaling over $3M in ETH and USDT moved to wallets on Ethereum and Tron, with ~$2M deposited to eXch (the same mixer used in the February hack); the website went down for "technical work" again.