Read this before you move money.

01Contract, circuit and dependency risk

Bugs in the vault, the verifier, the circuits or their dependencies, including the in-browser proving library, could lead to loss of funds. Always verify contract addresses on a block explorer before interacting; addresses shown in the app come from its configuration.

02Strategy and liquidity risk

Deposits are supplied to Aave V3 and a Morpho ERC-4626 vault. Those protocols could suffer exploits, bad debt or temporary illiquidity that delays or reduces withdrawals. Losses in those protocols would affect the vault. Yield is variable and can fall to near zero.

The displayed TVL is gross backing value, not immediately withdrawable liquidity.

03USDC risk

Hushfund holds native Circle USDC. The issuer can freeze addresses, and the token could lose its peg. Dollar displays assume 1 USDC equals $1; no external price feed is used.

04Note, device and backup loss

Hushfund cannot reset note secrets or backup passwords. Without another saved copy, losing them can mean losing access to funds. A compromised device or browser extension can expose your notes, and anyone with a note can withdraw it. After a repayment only the replacement note is valid.

05Operational and sponsorship risk

The relayer, API or sign-in service can go down. Gas sponsorship is limited by per-wallet quotas and a shared daily budget, can end at any time, and some actions can fall back to requiring your own ETH. If a tab closes mid-flow, a submitted transaction may still confirm; import your note on My Notes to check its on-chain state.

06Owner powers

As documented for the contracts:

• The owner can pause new deposits and new loans. The contract does not allow pausing withdrawals or repayments.
• The owner can change the protocol fee per vault, capped at 100 bps (1%). The fee in effect at execution applies.
• The owner can propose a strategy migration, which waits at least 2 days after it is proposed, giving time to withdraw.

07Privacy risk

Privacy is limited and not guaranteed. Public deposits, amounts, timing, recipients and network metadata can reveal links. Read Privacy limits before relying on it.