VeilSwap
← All posts
Analysis2026-11-089 min read

Your Swap's Three On-Chain Traces: Deposit, Sweep, Payout

Eight paid orders traced: the deposit address is a mailbox, not a vault. One TRON collector took 200 deposits in 55 minutes, and every payout preceded the sweep.

What this is. I pulled eight orders from the production database that had reached paid — five on TRON, three on Bitcoin, dated 2026-09-25 to 2026-11-04 — and followed each past the deposit address on-chain. No user address or transaction hash appears here; counts and timings do. The aim is not to expose a provider but to show the shape a swap leaves behind, because that shape is what an analyst and any counterparty actually see.

Three addresses, one owner. A swap touches three addresses, and only the first is yours. The deposit address is generated by the pool per order and is the only chain point that belongs to your trade. The collector is where many deposits are swept: the pool's own hot wallet, or an exchange wallet it banks with — the chain cannot tell the two apart. The payout address is the one you typed; coins come from the pool's float on the destination chain, not from your deposit. On TRON the deposit address is a mailbox: it can receive, it cannot spend.

The clock. Order to deposit: 26 seconds at the fastest (198 USDT, 09-26 08:36:22 → 08:36:48), 13m56s at the slowest (0.002 BTC, 11-03 09:28:17 → 09:42:13). Deposit to paid: 23 seconds to 2m54s. Paid to sweep: 6m18s to 5h11m17s. Deposit to sweep: 7m21s, 7m39s, 8m45s, 9m12s, 11m30s, 15m38s, 58m42s, 5h11m40s — median 10m21s. In all eight, paid was written before the sweep. Settlement does not wait for treasury housekeeping. (XMR to USDT exit)

TRON sweeps per address, exact amount. Three USDT orders left 833, 198 and 14.5312 and the sweeps moved 833, 198 and 14.5312 — not a cent less — 9m12s, 8m45s and 58m42s later, all into the same collector. Each used exactly 64,285 energy; the receipt says SUCCESS and the fee field is empty, so the energy came from staked or rented resources rather than burned TRX. At 100 sun per unit that is 6.4285 TRX ≈ $2.06 at TRX $0.32 — prepaid rather than avoided. The two TRX orders left 0.1 TRX behind (50→49.9, 30→29.9). One more quirk: all three USDT addresses received tokens before the account existed — create_time is 6m57s–13m18s later, exactly when a 0.010001 TRX transfer arrived. Explorers that gate on activation show "not activated" while the USDT is already there. (XMR to USDT exit)

Bitcoin batches. The 0.0002 and 0.000273 BTC orders were swept 11m30s and 15m38s after arrival, each with 10 inputs collapsed into one output (1,728,296 and 2,397,558 sats). The 0.002 BTC order waited 5h11m40s and went out with 26 inputs into a single 260,077,691-sat output. Fees: 1,823 sat at 1.01 sat/vB, 2,859 at 3.01, 3,812 at 4.01 — $1.38, $2.16, $2.89 at BTC $75,698, or $0.05–$0.29 per deposit. Sweeping each 141–188 vB deposit alone at 1 sat/vB would cost $0.11–$0.14. Batching is cheaper for the pool and worse for the link graph: one transaction names 10 to 26 deposits as siblings.

The collectors are not small. The two Bitcoin destinations hold 201,662 and 1,384,462 funded outputs and 203,249 and 1,385,432 transactions; cumulative inflow was 31,377.8 BTC and 15.46 million BTC — throughput over years, not balance. On TRON the shared collector took 200 USDT transfers from 197 distinct addresses in 55 minutes (376,140.90 USDT, median 90.88, min 10, max 74,363.86) and sent 200 transfers to 188 destinations in 124 minutes (405,944.01). The same wallet receives deposits and pays withdrawals: your payout and a stranger's deposit are separated by a ledger entry inside one address, not by a chain boundary. (XMR to USDT exit)

The addresses are linked before you use them. Each of the three USDT addresses received 0.010001 TRX from the same operator 6m57s–13m18s after the deposit and returned it 24h03m–24h46m later. In a 31-minute window that operator sent 0.010001 TRX to 95 addresses and received 103 back — under $0.31 of TRX to map the pool's address space without touching a deposit. All eight sampled deposit senders had exactly one USDT transfer in and one out, identical to the cent. (XMR to USDT exit)

What this means, and five rules. An outsider can list the pool's addresses, every deposit's amount and time, and each batch. Without an off-chain anchor they cannot get your name; the anchor is usually a KYC exchange withdrawal into the same address or a payout address you reused. So let the pool generate a fresh deposit address, generate a fresh payout address, never top up a swept address, don't run several swaps in one hour if the batch link matters, and don't treat a one-time address as a mixer. Five misreads: "one in, one out" is the sweep, not theft; zero balance afterwards is not lost funds; a second payment to a swept address still reaches the pool but the order is closed and recovery is manual; "not activated" on TRON does not mean the USDT is absent; reusing one payout address is a stronger link than anything on the deposit side. (privacy coins vs mixers)

Costs and the live snapshot. The sweep is not free, only prepaid: 64,285 energy per TRON USDT sweep, 1,823–3,812 sat per Bitcoin batch. At 18:06 UTC on 2026-11-08 the site quoted 100 USDT-TRC20 at 0.14524308 XMR on one route (implied $688.5 per XMR against a $604.48 spot), 1 XMR at 599.405 USDT on two routes (208 bps ahead), 0.01 BTC at 1.23753 XMR on two routes (99 bps); the catalogue listed 440 assets on 65 networks, six needing an extra ID, and the mempool held 67,015 transactions and 26.87 MvB at 1 sat/vB. Quotes move; the page governs. The shape does not: a mailbox, a collector, and the one address you control. (XMR to USDT exit)

Frequently asked questions

Is my order still safe after the deposit address is swept?

Yes. Sweeping is treasury housekeeping, not settlement: in all eight traced orders the paid status was written before the sweep, 6m18s to 5h11m17s earlier. Funds leaving the one-time address do not reverse a finished payout; they only move the pool's own float between wallets.

Can I reuse the same deposit address for a second order?

Do not. In a 55-minute window the TRON collector received 200 transfers from 197 distinct addresses (98.5% one-time), and all eight sampled senders showed exactly one USDT in and one out. A second payment to the same address merges two orders into one sweep line and one amount pair — exactly the link a fresh address exists to avoid.

Does a one-time deposit address make the swap anonymous?

No. The address is one-time, but the amount is forwarded unchanged on TRON (833→833, 198→198), the timing is visible, and the same 0.010001 TRX funder tagged 95 addresses in 31 minutes. What actually decides whether you can be linked is the payout address: reuse one and every swap lands in the same cluster, no matter how fresh the deposit address was.

Ready to swap?

No account · No KYC · No email

Exchange now
Your Swap's Three On-Chain Traces: Deposit, Sweep, Payout