Wagyu's order data leaked: deposits, Monero addresses and IPs from July to October
An extortion group published Wagyu.xyz order data after the operator refused to pay. About 38,600 orders and 10,100 IP addresses from 18 July to 26 October 2026; the operator confirmed it. What leaked, who is affected and what to do.
Wagyu.xyz is a no-account swap service that routes trades through Relay solvers; we tested it with our own money on 30 October and it paid. Three days earlier its order database had already been published.
What happened
On 27 October the WhiteArmor extortion group published order data it attributed to Wagyu.xyz, after the operator declined a demand of $5 million. Hudson Rock analysed the files: 38,628 order records and 10,139 distinct IP addresses, covering 18 July to 26 October 2026. In 4,580 completed cross-chain orders, one row ties together the incoming deposit transaction, the Monero address that received the payout and the IP address of the client.
According to xmr.club, the operator confirmed on 28 October that the last three months of data had leaked and that no funds were lost. The operator called keeping IP addresses standard practice. Orders that users had deleted were still in the data.
Who is affected
Anyone who swapped through Wagyu between 18 July and 26 October 2026. Our own test swap on 30 October falls after the leaked window.
Monero itself is not broken by this. What leaked is the record around it: which deposit paid for which XMR address, and from which IP the order was placed.
What to do if you used Wagyu in that window
- Treat the Monero address that received the payout as linked to your deposit and your IP. Receive future payments on a new address.
- If the IP was your home or work connection, assume it is now tied to that swap.
- For future swaps, prefer services that state they keep no IP logs, and use Tor. Our scores take a service’s IP logging and how long it keeps order data into account.
What we changed
- Wagyu’s status is now caution, and the leak is in our incident registry with its sources.
- Its score dropped: a data leak counts −1.0 under our methodology for twelve months.
- xmr.club lowered its grade for Wagyu from A- to C for the same reason.
Sources: Hudson Rock analysis as reported by Cyberpress; xmr.club review of Wagyu (operator statement of 28 October); our own test swap of 30 October.