Risks

A non-custodial account removes some risks and leaves others. We can’t move or freeze your money. A trade can still lose money, a venue or token can fail you, and a lost key matters. This page lists what each risk means for your funds.

Bad trades inside the rules

The contract checks where a trade can go, not whether its price is good. You can set a per-trade and a daily cap from your owner wallet; raising one takes effect an hour later. Lock trading when you step away.

Two-leg routes aren’t atomic

Some trades go through a middle token: leg 1 swaps your input for a token Q on one venue, and leg 2 swaps Q for what you asked for on another. Each leg is a separate contract call, and NEAR doesn’t undo leg 1 when leg 2 fails.

What that means for your funds:

• If leg 1 fails, nothing moved and you keep your input.
• If leg 2 fails, you hold Q instead of the output. It stays in your account. You can sell it like any token.
• On a buy, the fee was taken on the NEAR leg and stays taken. On a sell, the fee is taken only once leg 2 delivers NEAR.

Q’s price can move while you hold it.

Venues and tokens

A token’s own contract decides whether its transfers work: it can block sells, charge a hidden tax or mint more supply. The terminal shows what it knows about a token before you buy; it can’t vouch for one.

Venues are third-party contracts too. A fault in one can lose what is in a swap at that moment. Your minimum output protects the price at the moment of the trade, not the token’s value afterwards.

Withdrawals to other networks

A withdrawal to another network leaves NEAR through NEAR Intents and 1Click. Before anything moves, withdraw_cross_chain checks:

• the address is one your owner wallet listed at least an hour earlier;
• the quote carries a 1Click signature made with a key listed in the account’s own 1Click settings;
• the quote matches the request field by field.

Once the tokens reach 1Click’s deposit address, a solver and the other network finish the job. If 1Click can’t complete the swap at your quote, the quote’s own terms send the refund back to your trading account on NEAR.

A send to a wrong address can’t be called back. Check an address before you list it.

A lost device or wallet

A lost or stolen device

Trading keys can’t be copied out of the browser, but someone holding your device with trading unlocked can trade within the rules. They can’t withdraw to themselves: withdraw_to_owner pays only your owner wallet, and withdraw_cross_chain pays only an address you listed at least an hour earlier. Remove the old keys from your owner wallet as soon as you can. After the removal, NEAR refuses any transaction signed by the old keys before the contract runs.

A lost owner wallet

Your owner wallet’s key is the root of the account, and we can’t restore it. Trading keys keep working, but withdraw_to_owner pays the owner account you can no longer use, and new withdrawal addresses can’t be added. Back up your wallet.

A leaked 24/7 key

If you use 24/7 orders, the order service holds a key that can only call execute_order for orders you stored. It can’t add, change or withdraw anything. A trading key revokes it with revoke_automation, your owner wallet with owner_revoke_automation.

Outages

Your owner wallet can call the account directly. Stored 24/7 orders are sent by the order service; while it is down, a price can pass your trigger without a fill.

Sources

1. Nomicon, Access keys

Last verified 15 October 2026 against R4.