Wallet-connect went mainstream in 2026. Agentic wallets execute multi-step DeFi from natural language. So why does Cambio still use the simplest, oldest crypto-exchange flow on the planet — type a swap, get a deposit address, send your funds?
2026 was the year wallet-connect went truly mainstream. Bankr, Coinbase Smart Wallet, the deBridge MCP integrations, half a dozen agentic wallet products — all of them ask the user to connect a wallet to a dApp, grant session keys or sign permissions, and let software act on their behalf inside the wallet. The technology is impressive. For power users, it is genuinely the future.
Cambio does not use any of it. You do not connect a wallet to swap on Cambio. You do not sign a transaction. You do not grant a session key or a spend allowance. You type what you want, you get a one-time deposit address, you send crypto to it from wherever your crypto already lives, you receive the other crypto at the address you provided. This is the oldest, simplest crypto-exchange flow on the planet. It is the same flow ChangeNow used in 2018. It is the flow we deliberately chose to keep in 2026.
This post is the case for that choice. What the deposit-address flow gives up, what it gains, when you should use a wallet-connect product instead, and why this remains the right primary surface for a conversational AI swap product.
The deposit-address flow in one paragraph
You open the Cambio composer and type "swap 0.3 BNB to USDT on BSC." The composer parses the intent, fetches a quote, and shows you the live competitor strip alongside our rate. You click swap. We generate a fresh BNB deposit address for your order and a BEP20 USDT destination prompt. You paste your USDT destination address. You then go to wherever your BNB lives — could be Binance, could be Trust Wallet, could be a hardware wallet, could be a Metamask account on BSC — and you send 0.3 BNB to the deposit address. We see the deposit confirm, and our liquidity providers settle 0.3 BNB worth of USDT (at the quoted rate) on BSC to your destination address. Done.
There is no Metamask popup, no WalletConnect QR code, no signature request, no spend allowance prompt. Cambio never sees a private key. The Cambio site does not interact with your wallet at all. The deposit and the payout are both ordinary on-chain transactions that you can verify on a block explorer.
What you give up
Two real things, named honestly.
First, continuous custody. With a wallet-connect aggregator like 1inch, you keep custody of your funds until the moment the on-chain transaction executes — and after that, the swapped funds are in your wallet immediately. There is no window during which a counterparty holds them. With Cambio (and with every instant-exchange operator), there is a window — typically about 15 seconds on a same-chain swap, longer on cross-chain — during which your deposit has been received and the payout has not yet settled. During that window, our liquidity providers are settling your payout on the destination side. If the payout did not complete, you would have a recovery problem.
We mitigate that risk operationally: short windows, partner liquidity that is continuously monitored, hard-rejects at quote time when liquidity is short rather than partial-fill failures after the deposit lands. But it is still a real difference from a fully atomic on-chain swap. If you value the absolute zero-counterparty model of a DEX aggregator above all else, you should use one. We will not pretend that we offer the same custody guarantee.
Second, you give up the option of complex multi-step DeFi operations. Wallet-connect products can express things like "borrow against my ETH, swap the borrowed USDC to USDT, lend that to Aave, and pay back the original loan with the yield." Cambio does swaps. Just swaps. If you need a multi-step DeFi flow, you need a wallet-connect product or an agentic wallet. We will not stretch the deposit-address flow to cover those — it is the wrong tool.
What you gain
Four things. They are not small.
No seed exposure to a website
When you connect a wallet to a dApp, you create a relationship between that dApp and your wallet keys. Even if the wallet is the one signing transactions, the dApp can request signatures, can request permissions, can in many cases trigger transactions that move funds the moment you click "approve." The trust frontier is the dApp's code, the dApp's host, and your own ability to read what you are signing. With deposit-address, your seed and your wallet keys never touch Cambio. We do not have a connect button. We could not see your private key if we tried.
No phishing attack surface
The single largest source of crypto user losses in 2025 and 2026 has been wallet-connect phishing — a malicious site that mimics a legitimate dApp, captures a signature request, and drains an approved token allowance or executes a transaction the user thought was something else. The attack does not exist on deposit-address sites. The worst a phishing copy of Cambio can do is give you a bad deposit address so your crypto goes to the attacker. That is a real risk, but it requires the attacker to control a copy of our domain and trick you into typing it. A user who arrives at the real cambio.one and verifies the address has nothing to sign and nothing to approve. There is no attack vector that loses funds beyond the one swap you are about to make.
No gas tokens required
Wallet-connect swaps require you to hold the gas token of the chain you are swapping on. To swap on Ethereum mainnet via 1inch, you need ETH for gas. To swap on Arbitrum, you need ETH on Arbitrum. To swap on Solana, you need SOL. New users frequently hit a chicken-and-egg problem: they want to acquire SOL by swapping, but they cannot execute the swap because they have no SOL for gas. With deposit-address, you do not need any gas token on the destination chain. You send from wherever your source crypto lives — including a centralized exchange withdrawal, which does not require destination gas — and the payout lands without you paying gas yourself.
Works from places wallet-connect cannot
You can fund a Cambio swap from a centralized exchange withdrawal. You can fund it from a hardware wallet that does not run a dApp browser. You can fund it from a hot wallet on a different device. You can fund it from a custodial wallet on your phone that does not support wallet-connect. The deposit-address flow works from any wallet that can send a normal transaction — which is to say, from every wallet in the world. Wallet-connect requires a wallet that implements the wallet-connect protocol and a browser context that supports it. That is a much narrower set of starting points.
The phishing math
Worth dwelling on this one because it is the largest practical security argument for deposit-address.
Chainalysis and DeBank tracking suggests that around 65-75% of retail crypto theft in 2025 came from wallet-drain attacks — phishing sites, malicious browser extensions, malicious dApps that requested an "approve" signature for unlimited token spend, then drained the user as soon as funds arrived. The technique works because once a token allowance is granted, the malicious contract can move funds without further user action. Users do not always realise this. They sign a transaction that looks like a swap and it is actually a max-allowance grant.
The deposit-address flow does not have an allowance concept. There is nothing to sign. There is no pending permission that can be activated later. The worst-case attack is that you typed your destination address into a copy of cambio.one that was actually controlled by an attacker — and that attack costs only the amount of the single swap you are doing. There is no lateral movement to your other holdings, no allowance left lying around for the attacker to exploit days later, no other tokens drained.
That is not a small difference. For users who are not careful readers of every signature dialog — which is to say, for most users — deposit-address is structurally safer.
When you should use a wallet-connect product instead
We are not arguing wallet-connect is bad. We are arguing it is the wrong default for our user. There are real cases where you should use a wallet-connect product, not Cambio.
If you are swapping a large amount on a deep on-chain pair — say, $50,000 of ETH for USDC on Ethereum mainnet — use a DEX aggregator with your own wallet. The price improvement from aggregator routing on deep pairs typically exceeds the gas cost at that ticket size, and you keep custody throughout. Cambio caps individual swaps at $15,000 for retail; we are not the right product for that ticket.
If you need a multi-step DeFi operation — borrow, swap, deposit, withdraw — use an agentic wallet or build the steps yourself in a wallet-connect product. Cambio is a swap product; it does not handle multi-step DeFi.
If you are an experienced user who already has a Metamask account on the chain you want to swap on, you are comfortable reading signature requests, and the pair is in a deep aggregator pool — the aggregator will probably give you a tighter spread than we will. Use it.
Why deposit-address is the right primary surface for what we built
A conversational AI composer at the top of a homepage only makes sense if the entire flow can happen inside the conversation. The moment the user has to switch to a wallet app, scan a QR code, or sign a transaction in a popup, the conversational frame breaks. The wallet UI becomes the source of truth, and our chat composer becomes a glorified pre-fill widget.
Deposit-address keeps the entire interaction in Cambio's surface. The user types, sees a quote, sees the comparison, clicks swap, copies an address, and switches to send funds from wherever they live. The "switch" is from any wallet to anywhere — and crucially, it happens after the entire decision has been made inside our composer. We do not need wallet permissions to do our job. We just need an address to pay out to.
That is what lets the composer be the primary interface and not a wizard wrapped around a wallet-connect button. The architecture choice (partner-liquidity-backed) and the UX choice (deposit-address) and the AI choice (conversational composer) are all the same choice viewed from different angles. They depend on each other. Removing any one of them changes the product into something else.
A useful mental model
Think of it this way. Wallet-connect products are for users who already manage a wallet and want to do something inside it. Deposit-address products like Cambio are for users who want to move crypto from somewhere to somewhere else. The first one starts and ends in a wallet. The second one starts and ends with two addresses.
Most actual crypto swaps in 2026 are moves: from an exchange to a wallet, from one chain to another, from one stablecoin to a different one for an upcoming payment. Those are deposit-address-shaped problems. The wallet-connect framing is a fit when you live inside one wallet and want to operate on what is already there. It is a worse fit when you are moving between places.
Pick the tool that matches the shape of your job. For moves, deposit-address still wins.
The next post in the series tours the pricing pipeline — what happens in the 200 milliseconds between you pressing Enter and a quote appearing.
