Risk Disclaimer
The user assumes all risk associated with use of the Service and shall conduct independent due diligence and research (DYOR). The user should read this disclaimer in full before deploying or operating a vault. It describes material risks of using Sigma Wallet so that the user may independently determine whether to use the Service. If the user does not understand or accept these risks, the user must discontinue use of the Service immediately and must not transfer real funds.
1. Operator
Sigma Wallet is developed and maintained by the anonymous maintainers of Sigma Wallet. There is no registered company or other legal entity behind the Service, and the identities and location of the maintainers are not publicly disclosed. If the tool causes loss, there may be no identifiable party with attachable assets against which recovery may be sought. The user should treat this circumstance as a material risk factor when deciding whether to use the Service.
2. Ownership of code, data and funds — vested in the user; not in the maintainers
- The user owns and controls the user's keys, browser-local data, vaults deployed by the user, and funds held in those vaults. The maintainers do not own, custody or have access to any of the foregoing.
- On-chain records under addresses controlled by the user are public and permanent. The maintainers cannot alter, reverse or delete them on the user's behalf.
- Losses arising from lost keys, approval of a malicious transaction, misconfiguration of co-owners, or an inappropriate threshold are borne by the user. No third party can reverse a confirmed blockchain transaction on the user's behalf.
3. Smart-contract and software risk — verification prior to decision
- The vault (
MultiSigVaultV4) and factory contracts have been subject to internal automated testing, including adversarial test cases. Internal testing has previously identified and remediated serious defects. - As of the effective date, the contracts have not been audited by an independent third-party security firm. Internal testing cannot guarantee that no vulnerabilities remain.
- Published contract source is verified on Polygonscan, enabling the user to review code corresponding to the on-chain bytecode. Source verification does not constitute a security audit, insurance arrangement or safety warranty. Before depositing real value, the user must still review the code (or engage a trusted third party to do so) and conduct independent due diligence and research.
- Blockchain transactions are irreversible once confirmed. Losses caused by contract logic, user error, lost keys or third-party attacks ordinarily cannot be reversed by any party.
4. Non-custodial nature: keys remain with the user
- Each vault is controlled by the co-owner addresses designated by the user. The maintainers do not hold, custody or have access to any vault's funds.
- The user bears full responsibility for the security of private keys, seed phrases and signing devices. Recovery of such keys on the user's behalf is not possible.
- Threshold mechanisms operate in both directions: if a sufficient number of co-owners lose their keys or become unreachable, funds in a vault may be permanently locked. The user should agree a key-custody arrangement with all co-owners prior to deployment.
5. Fees are non-refundable
Deployment fees and gas are incurred at the moment the network confirms the transaction, regardless of subsequent satisfaction. Prior to submission, the user should verify every co-owner address and vault type: a vault's core settings are fixed at deployment, or may thereafter be changed only through time-locked on-chain governance.
6. Regulatory uncertainty
- Nothing in this disclaimer constitutes investment, financial, tax or legal advice.
- Laws governing crypto-assets and smart-contract services vary by jurisdiction. The user is responsible for ensuring that use of the Service is lawful in the user's jurisdiction.
- The Service performs no identity verification (KYC) or anti-money-laundering screening. The Service must not be used for any unlawful purpose.
7. Disclaimer of warranties — risk assumed by the user
The Service is provided "as is" and "as available", without warranty of any kind. The user assumes all risk of use. See section 7 of the Terms of Service.
8. Due-diligence checklist prior to committing real funds
- The Service operates on Polygon mainnet only. There is no public testnet mode for rehearsal. Every action on the Service is real and irreversible.
- The user should review verified source on Polygonscan and, before signing, compare addresses displayed in the interface with information shown on the block explorer.
- The user should deposit only amounts the user can afford to lose in full.
- For material amounts or numerous co-owners, the user should obtain independent technical and legal advice.
- The user should carefully verify co-owner addresses, threshold and vault type. A single incorrect address may permanently lock or expose funds.
- If any matter remains unclear, the user must discontinue use and must not proceed until independent due diligence and research have been completed.