Risk Disclosure

Effective Date: May 25, 2026 · Last Updated: May 25, 2026

1. Important Notice

Please read this Risk Disclosure carefully before using Vuken. Cryptocurrency and blockchain-based financial tools involve significant risks. This document outlines the key risks you should understand before using the Service. This is not an exhaustive list.

By using Vuken, you acknowledge that you have read, understood, and accepted the risks described in this document.

2. Non-Custodial Service

Vuken is a non-custodial platform. This means:

• You are solely responsible for your private keys and seed phrases. Vuken does not store, back up, or have access to your private keys.
• If you lose access to your wallet credentials, Vuken cannot recover your funds.
• All on-chain transactions are executed at your explicit instruction. Once submitted, blockchain transactions are irreversible.

3. Cryptocurrency Risks

3.1 Volatility

The value of cryptocurrencies, including TRX and TRC20 tokens, can fluctuate significantly in short periods. Past performance is not indicative of future results. You may lose some or all of the value of your digital assets.

3.2 Irreversibility of Transactions

All blockchain transactions are final and irreversible once confirmed. Errors in transaction amounts, recipient addresses, or timing cannot be undone. Vuken cannot reverse, cancel, or modify any on-chain transaction.

3.3 Smart Contract Risk

TRC20 tokens and related smart contracts may contain bugs, vulnerabilities, or unexpected behaviors. Vuken does not audit or guarantee the security of any external smart contracts.

3.4 Network Congestion and Fees

Blockchain network congestion may delay transaction processing or increase resource costs (e.g., TRON Energy and Bandwidth). Vuken does not control network conditions.

4. Operational Risks

4.1 Service Availability

While Vuken strives for high availability, the Service may experience downtime due to maintenance, infrastructure failures, or external attacks. Vuken is not liable for losses arising from Service unavailability.

4.2 API and Webhook Failures

External API calls and Webhook deliveries may fail due to network issues, incorrect endpoint configuration, or third-party service outages. You are responsible for implementing appropriate retry and fallback logic in your integrations.

4.3 RPC Dependency

Vuken relies on TRON RPC endpoints (including TronGrid) to interact with the blockchain. Outages or changes to these providers may temporarily affect platform functionality.

4.4 Address Generation

Sub-addresses are derived from an encrypted seed stored on Vuken's infrastructure. While every precaution is taken to secure this seed, any infrastructure-level security breach could potentially affect derived addresses.

5. Security Risks

5.1 Account Compromise

If your account credentials are compromised, an attacker may initiate withdrawals or collection tasks on your behalf. You are responsible for:

• Using a strong, unique password
• Keeping your API tokens confidential
• Rotating API tokens regularly
• Monitoring Webhook delivery logs for unexpected activity

5.2 Phishing and Social Engineering

Vuken will never ask for your password or API tokens via email or chat. Be vigilant against phishing sites that impersonate Vuken. Always verify you are on the correct domain before entering credentials.

5.3 API Token Security

Developer API Tokens grant full programmatic access to your wallet operations. A leaked token can result in unauthorized fund movements. Store tokens securely and revoke them immediately if compromised.

5.4 Webhook Signature Verification

Failing to verify Webhook HMAC-SHA256 signatures may expose your application to spoofed event notifications. Always validate signatures before processing Webhook payloads.

6. Regulatory and Legal Risks

6.1 Regulatory Uncertainty

The regulatory environment for cryptocurrencies is evolving rapidly and varies by jurisdiction. What is legal in one country may be prohibited in another. You are solely responsible for ensuring your use of Vuken complies with all applicable laws and regulations in your jurisdiction.

6.2 Sanctions Compliance

You represent that you are not subject to any sanctions programs or prohibited from engaging in cryptocurrency transactions under applicable law. Vuken reserves the right to suspend accounts that appear to violate sanctions obligations.

6.3 Tax Obligations

Cryptocurrency transactions may have tax implications in your jurisdiction. Vuken does not provide tax advice. You are responsible for reporting and paying any applicable taxes on your cryptocurrency activities.

6.4 Service Termination

Regulatory changes, legal requirements, or business decisions may result in the suspension or termination of the Service. Vuken will provide reasonable notice where possible, but cannot guarantee continued access.

7. No Financial Advice

Nothing in the Vuken platform, documentation, or communications constitutes financial, investment, legal, or tax advice. All decisions regarding the use of digital assets are made solely at your own risk and discretion.

8. Limitation of Liability

As stated in the Terms of Service, Vuken's liability for any losses arising from the risks described in this document is limited to the maximum extent permitted by applicable law. You acknowledge and accept that using a non-custodial cryptocurrency platform carries inherent risks that no service provider can fully eliminate.

9. Updates to This Disclosure

This Risk Disclosure may be updated periodically to reflect new risks or changes to the Service. Continued use of the Service after updates constitutes acceptance of the revised disclosure.

10. Contact

If you have questions about these risks, please contact: legal@vuken.io