Swapping Tokens Inside SSP vs Using a DEX
There are two ways to trade one crypto asset for another from SSP, and they are not variations on a theme. They are architecturally different machines with different counterparties, different failure modes, and different things that can go wrong with your money.
Most wallet documentation blurs them together under the word "swap." This guide pulls them apart, because choosing correctly requires knowing which one you're actually using.
What the in-wallet swap really is
Tap Swap in SSP and you get a from-asset, a to-asset, an amount, and a quote. It feels like a DEX. It is not a DEX.
Under the hood, SSP asks an aggregation service for quotes on your pair. That service polls a roster of centralized instant exchangers — the kind of service that takes coin A at an address and sends back coin B — and returns their competing offers. It currently routes through exchangers including ChangeNOW, Changelly, Exolix, SimpleSwap, ChangeHero, and XOSwap; the live roster is fetched by the wallet and changes over time.
Each offer carries a rate, the network fee the exchanger will pay to deliver your asset, and a minimum and maximum order size. You pick one, and the exchanger creates an order. That order comes back with something crucial: a deposit address.
And then SSP does the least glamorous, most important thing in this entire article. It hands you to the ordinary Send screen, with the exchanger's deposit address filled in as the recipient.
That is the swap. You are sending your crypto to a company, with a normal 2-of-2 multisig signature, exactly as if you were paying anyone else. They receive it, and they send the other asset back to your address on the destination chain.
This is why the wallet insists you sync the destination chain first: it needs a receiving address on that chain to give the exchanger. And it's why in-wallet swaps can cross chains at all — Bitcoin to Ethereum, say — which no single DEX can do.
The thing nobody tells you: you are trusting a custodian
Say it plainly. Between your send and their payout, a centralized exchanger has your money.
Your keys never left your devices. Both signatures were required to send. All of that is true and none of it helps you during the window when your Bitcoin has arrived at the exchanger and your Ethereum hasn't arrived at you. In that window, you are relying on a company to complete its side of a trade.
If it goes wrong, the recovery mechanism is not the blockchain — it's the exchanger's refund process. Every order carries a refund address, and a status the wallet can track (along with the deposit transaction, the payout transaction, and any refund transaction). Orders can also come back flagged as requiring identity verification: instant exchangers are subject to anti-money-laundering rules, and an order can be held for KYC after you've already sent. That surprise is worth knowing about before you send, not after.
None of this makes the in-wallet swap bad. It makes it a custodial trade with a non-custodial wallet on either end. That is a perfectly reasonable thing to use — as long as you know that's what you're doing.
What a DEX swap is instead
Connect SSP to a decentralized exchange — Uniswap is the canonical example — over WalletConnect, and the machine is different in kind.
There is no company holding your funds. You interact with a smart contract, and the trade is atomic: either the whole swap executes in one transaction, or it reverts and you keep what you started with, minus gas. There is no window in which a counterparty owes you an asset, because there is no counterparty — there's a liquidity pool and some code.
The costs of that guarantee are real:
- You will grant a token approval before an ERC-20 can be swapped, and you should revoke it afterwards if it's unlimited.
- You are exposed to slippage and price impact, which you manage with a tolerance setting.
- On a public mempool you are exposed to MEV — frontrunning and sandwich attacks.
- You cannot cross chains. A DEX trades assets on one chain; going between chains means a bridge, which is its own risk surface.
Every one of those risks is yours to manage — and every one of them is absent from the in-wallet swap, which has no approvals, no slippage setting, and no MEV exposure, because there is no on-chain trade to frontrun. You just sent coins to an address.
The comparison, honestly
| In-wallet swap | DEX via WalletConnect | |
|---|---|---|
| Counterparty | A centralized exchanger holds your funds in flight | A smart contract; the trade is atomic |
| If it fails | Order stalls or refunds to your refund address | Transaction reverts; you keep your input, minus gas |
| Cross-chain | Yes — BTC to ETH works | No — one chain only, absent a bridge |
| Token approvals | None | Yes, and unlimited ones should be revoked |
| Slippage / MEV | Not applicable — you get a quoted rate | Yes; set tolerance, mind sandwiches |
| Identity checks | Possible — an order can be flagged for KYC | None |
| Cost shape | Exchanger's spread baked into the rate | Pool price, LP fee, and gas |
Which one should you use
- Crossing chains (BTC → ETH, LTC → SOL): the in-wallet swap. A DEX simply cannot do this, and a bridge plus a DEX is usually more moving parts and more risk than one exchanger order.
- Same-chain ERC-20 swap, and you value non-custody above all: the DEX. Atomic settlement means no company can sit on your funds.
- Same-chain swap, modest size, you want it to just work: either. The in-wallet route is fewer steps and involves no approvals; the DEX route is trustless. Pick your preferred flavour of risk.
- Long-tail token that no exchanger lists: the DEX, necessarily.
- Large size: get quotes from both. Compare the amount that actually lands, not the headline rate. Consider splitting it.
Before you confirm either one
- Know which machine you're in. If you're on the Send screen with an address you didn't choose, you're doing a custodial swap. If you're signing a contract call from a dApp, you're doing an atomic one.
- Check the amount that lands, not the rate. Fees hide in different places in each model. The next article in this series, Fees and Spreads Explained, breaks down exactly where.
- Mind the minimum and maximum on exchanger orders. Under- or over-sending an order is a common way to end up in a refund flow.
- Read the destination address on your SSP Key. Both routes end with your two devices signing something. The second screen is your last honest look at where the value is going.
- Test with a small amount on a new pair or a new dApp. Always.
The custody constant in SSP is real and it is worth repeating: nothing leaves your wallet without both of your devices. But it describes the outbound leg of a swap, not the round trip. Once your coins are at an exchanger's address, the multisig has done its job and a company's promise is doing the rest. Choose accordingly.
