Risk Disclosure

Hackers could discover vulnerabilities and drain funds from the smart contracts. This has happened to many DeFi protocols.

Contract upgrades (if any) could introduce new bugs or be used maliciously by compromised admin keys.

Complex cryptographic operations (ZK proofs, commitments) could have subtle mathematical errors that compromise security.

Unlike traditional banks, there is no FDIC insurance or recourse if funds are lost due to smart contract failure.

Solana has experienced multiple network outages. During outages, you cannot deposit, withdraw, or transfer funds.

High network congestion can cause transactions to fail or be delayed. You may lose transaction fees without successful execution.

Blockchain forks or chain reorganizations could invalidate transactions or create inconsistent state.

If Solana validators collude or are compromised, the network security could be undermined.

Some countries ban or heavily restrict cryptocurrency use and privacy tools. Using ShadowPay may be illegal in your jurisdiction.

Anti-money laundering laws may require you to report transactions or undergo KYC. ShadowPay doesn't enforce compliance - that's YOUR responsibility.

You are responsible for reporting cryptocurrency gains/losses to tax authorities. Using privacy tools does NOT exempt you from taxes.

Interacting with sanctioned addresses or jurisdictions could result in legal prosecution, asset freezes, or criminal charges.

We may be forced to shut down by regulators, making the UI inaccessible (though smart contracts remain on-chain).

Our relayer service could go offline, be shut down, or experience technical issues. This would prevent ShadowWire transfers (though direct contract interaction remains possible).

Bugs in the web interface could cause incorrect transaction parameters, loss of funds, or failed operations.

RPC nodes, wallet providers, and other services we depend on could fail, be compromised, or shut down.

We don't have customer support for fund recovery. If you make a mistake (wrong address, lost keys, etc.), your funds are gone.

If you lose your wallet's private keys or seed phrase, your funds are permanently unrecoverable. No one can help you.

Sending funds to the wrong address (typo, copy-paste error) results in permanent loss. Blockchain transactions are irreversible.

Attackers may impersonate ShadowPay, trick you into approving malicious transactions, or steal your seed phrase.

Malware, keyloggers, or compromised hardware can steal your wallet credentials and drain your funds.

Approving malicious transactions in your wallet can grant attackers full access to your funds.

Cryptocurrency prices can swing 50%+ in a single day. The value of your assets can drop to zero.

Some tokens may have low liquidity, making it difficult or impossible to sell without massive slippage.

Tokens supported by ShadowPay could become worthless, be rugged, or have smart contract exploits.

There are no guarantees of returns, profits, or even principal preservation. You could lose everything.

Wallet addresses, transaction timestamps, and pool addresses are visible on Solana. Sophisticated analysis can still reveal patterns.

Your ISP, RPC nodes, and wallet providers can see your IP address. Use a VPN or Tor for additional privacy.

If you deposit and immediately withdraw, or have unique timing patterns, your transactions may be linkable.

Recipients of your transfers can see the amounts (unless using internal ShadowWire). Choose recipients carefully.