Risk Disclosures

Last updated: October 30, 2026

These Risk Disclosures are part of the Carbium Terms of Service. They describe the main risks of using digital assets, public blockchains and the Carbium services. They do not list every risk. Do not use the services unless you understand and accept these risks.

1. Your transactions are final

When you use your own wallet, you sign every transaction yourself. Carbium cannot sign, cancel, reverse or undo it, and cannot recover assets sent to a wrong address, token or network. Check the token, amount, network and destination in your wallet before you approve. A confirmed blockchain transaction is permanent.

2. Digital assets can lose all of their value

Digital asset prices are volatile and can fall to zero. Liquidity can disappear without warning. Nothing on the services is investment, financial, legal or tax advice, and no listing, route, quote, chart or price is a recommendation to buy, sell or hold anything.

3. Anyone can create a token

Anyone can create a token on Solana, including tokens that copy the name, symbol or logo of another project. Carbium does not review, endorse or vouch for any token, and a token appearing on the services does not make it legitimate. Some tokens carry features that let their issuer or a third party freeze your balance, move tokens out of your account, charge a fee on every transfer or run their own code on every transfer (for example the freeze authority, permanent delegate, transfer fee and transfer hook features of Solana token programs). Newly launched tokens are especially prone to fraud, manipulation and sudden collapse. Some tokens may be securities or other regulated instruments, which can limit who may trade them and where.

4. Quotes are estimates

A quote shows the expected result of a swap when it was computed. What you receive can differ because prices move, other transactions execute first or liquidity changes before your transaction lands. Your slippage tolerance sets the worst result you accept: a high tolerance can give you a worse price, and a low one makes a failed transaction more likely. Price impact grows with the size of your trade compared to the liquidity available. Carbium does not guarantee the best available price.

5. Transactions can fail and still cost fees

A transaction can fail on-chain because of price movement, congestion, an expired blockhash, account limits or a program error. A failed transaction usually still costs a network fee. Some routes are sent without a pre-flight simulation to save time, which makes an on-chain failure more likely. Swapping your entire balance can fail when the route has to open token accounts that need rent.

6. Front-running and MEV

Transactions on public blockchains can be seen, reordered, front-run or sandwiched by validators and other participants looking for profit (maximal extractable value, or MEV). Carbium does not guarantee protection from these practices.

7. Smart contract and protocol risk

Swaps run through the Carbium router program and through third-party programs such as automated market makers and liquidity pools. Any of these programs can contain bugs, be exploited, behave in unexpected ways, or be paused or changed by whoever controls it. The Carbium router program can be upgraded: a single key held by Carbium can replace its code at any time without notice. The program keeps no funds between transactions and has no administrative functions, but a faulty upgrade could affect transactions sent after it. Third-party programs can be changed by their own authorities without notice to Carbium or to you. An audit, where one exists, lowers this risk but does not remove it.

8. Network and data risk

Solana and other blockchains can slow down, halt, fork, reorganise recent history or change their rules. Validators and RPC providers can fail, lag or return wrong data. Balances, prices and other data shown on the services come from these sources and can be delayed, stale or wrong.

9. Bridging risk

Bridging moves value between networks through third-party protocols. The Bridge feature uses deBridge, whose contracts and market makers carry out the transfer, and whose route on Solana can pass through other protocols. A bridge order can be delayed, stuck, partly filled or lost through a bug, an exploit, a market maker failure, or a wrong destination address or network. Carbium does not track, complete or recover bridge orders; use the order link to follow an order with deBridge. deBridge's own terms restrict use by persons in the United States and certain other places, and deBridge may refuse or delay orders it believes break them. On EVM networks the Bridge asks your wallet to approve an unlimited token allowance for the deBridge contract. That approval stays in force until you revoke it, and anyone who controls or exploits that contract could use it to move the approved token from your wallet.

10. Gasless swaps

When Gasless applies, a Carbium fee payer pays the network fee and any temporary account rent for your transaction, and the same transaction repays that amount out of your swap. If the transaction fails, the repayment does not happen and the fee payer bears the network fee. Carbium can limit, refuse or end Gasless at any time.

11. Wallet and device security

Anyone who gets your private key or recovery phrase controls your assets. Carbium will never ask for them. Phishing sites, fake support accounts, malicious browser extensions and compromised devices are common ways people lose funds. Check that you are on a Carbium site you trust, and check every transaction in your wallet before you approve it. Any website can be compromised, ours included, so your wallet's confirmation screen is your last check.

12. Developer services

Quotes, routes and data from the Carbium Swap API and RPC can be delayed, wrong or unavailable. Do not use them as the only price source for loans, liquidations, settlements or other financial contracts. Transactions built by the API are unsigned; review or simulate them before you sign.

13. Legal, regulatory and tax risk

Laws on digital assets differ between countries and change often. A new law, a court decision or enforcement action could restrict or end your use of the services or of particular assets, and could affect their value. You are responsible for the laws that apply to you and for your own taxes.

14. No deposit or investor protection

Digital assets are not bank deposits or securities accounts. They are not protected by the FDIC, the SIPC or any other deposit, investor or insurance scheme.

15. Third-party services

Wallets, bridges, liquidity venues, data providers and other third-party services are run by others under their own terms. Carbium does not control them and is not responsible for what they do, what they fail to do or any loss they cause.