Risk Disclosure

Read this before your first deal.

1. Smart-contract risk. The Protocol has not been externally audited. It has 97 automated tests and clean static analysis, which reduces but does not eliminate the risk of bugs. A bug could result in total loss of escrowed funds.
2. Irreversibility. Settlement is atomic and final. There is no dispute process, no chargeback, no admin reversal.
3. Counterparty and asset risk. The Protocol guarantees the mechanics of the exchange, not the value of what you receive. A whitelisted token can still fall to zero, lose liquidity, or have its team disappear. Whitelisting is a technical review, not a recommendation.
4. Vesting risk. Vested tokens are delivered on a schedule you agreed to. You cannot accelerate it. The token's price during the vesting period may differ materially from the deal price.
5. Stablecoin risk. USDC and USDT are issued by centralised companies that can freeze addresses and may de-peg. The registry verifies the contract address, not the issuer's solvency or your address's standing with the issuer.
6. Dependency risk. Vesting relies on Sablier Lockup v4. A vulnerability in Sablier could affect streams created through OTCVault.
7. Key risk. Loss of your wallet keys is loss of your deposits, refunds, and Sablier NFT. Nobody can recover them.
8. Network risk. Arbitrum One is a rollup with a centralised sequencer and an upgradeable bridge governed by Arbitrum DAO. Network outages could delay, but not prevent, refunds after expiry.
9. Regulatory risk. Token trading may be restricted or taxed where you live. You are responsible for compliance.
10. Interface risk. The website could go offline or be compromised. Always verify the contract address you are interacting with matches the addresses published here and in the repository. The Protocol continues to function without this website.
11. Fee-on-transfer and rebasing tokens are unsupported. Deposits of such tokens will revert; if a whitelisted token later adds such behaviour, deals involving it may fail to settle and will refund at expiry.
12. Owner-key risk (current). Until ownership moves to a multisig, a compromised owner key could raise the fee for future deals to at most 1%, change the vesting rail for future deals, or alter the whitelist/registry. It could not move escrowed funds or alter existing deals.