Pushpendra Singh Is TxFlow safe? What is audited, and what is not
Non-custodial removes one risk and leaves four. The audit covers the bridge only, and the documented way to lose your deposit is your wallet type.
“Is it safe” is really several questions, and answering them as one is how people end up confidently wrong. Let me separate them.
It is not a scam, and that is not the question
TxFlow has named founders (Matt Hu, Harrison Rea, Jack Wang), functioning markets, real volume and a public documentation site that is candid about its own limitations, which is more than a lot of better-funded projects manage.
So the fraud question is settled. The remaining questions are harder, because a project can be entirely sincere and still lose your money. Most of the losses in this industry come from honest teams shipping code that turned out to be wrong under pressure.
What non-custodial actually removes
This is the genuine safety advantage and it is worth being precise about.
TxFlow never holds your balance. So the risks that have dominated the last two years of exchange failures simply do not apply: there is no treasury to be drained, no insolvency, no withdrawal freeze while a company decides what to tell you.
That is not abstract. CoinDCX confirmed a $16 million loss in October 2026 after first denying it, following a $44 million incident in July 2025. On a non-custodial venue that category of event cannot reach your coins. I wrote about how I weigh that on the CoinDCX page.
What it puts in its place
Four risks, and non-custodial does not help with any of them.
Smart contract risk. Your funds interact with contracts. A bug in margin logic, liquidation handling or settlement can lose money without anyone intending it.
Chain risk. TxFlow runs its own Layer 1. A halt, a reorg or a consensus bug is now your problem too, and a seven-month-old chain has had less adversarial attention than Ethereum has had in a bad week.
Liquidity risk. Thinner books than the majors. In a fast move you may not be able to close where you expect, which on a leveraged position is how an inconvenience becomes a liquidation.
No undo. The thing preventing the exchange from losing your money also prevents it from recovering your mistake. Wrong address, wrong wallet type, wrong network: nobody can reverse it.
The audit, read properly
OpenZeppelin audited the bridge contract. OpenZeppelin is a serious firm and the bridge is the correct thing to audit first, because bridges account for the largest single losses in crypto history.
But it is one contract. The matching engine, margin checks, liquidation logic and settlement path are where a perpetuals exchange actually fails, and they do not have equivalent public coverage.
“Audited” in marketing copy almost never distinguishes between some and all. When you see TxFlow described as audited, the accurate reading is “its bridge is audited”, and the difference is most of the system.
A second serious audit of the core contracts is the cheapest credibility a young protocol can buy. If months pass without one, that absence is itself information.
The self-published number
The 250,000 transactions per second figure appears in nearly every article about TxFlow and is always, ultimately, sourced to TxFlow.
I have not found an independent measurement. It may be entirely accurate. But a performance claim that no third party has verified is marketing, and the uniformity with which it is repeated across review sites tells you how much independent checking the coverage involved.
The same goes for one-block finality. Plausible for the architecture, and unverified.
The documented way to lose your deposit
This is the one with a real, named, avoidable failure mode, and it is why I wrote a separate article about it.
TxFlow’s own documentation advises against account-abstraction wallets, meaning smart contract wallets rather than standard key pairs, and states the worst-case outcome is funds stuck in the contract.
No documented recovery path. Non-custodial means nobody can reach in and fix it.
If your wallet recovers from a 12 or 24 word seed phrase, you are fine. If you sign in with an email or social account, or recovery runs through guardians or multiple signers, check before depositing anything. A hardware wallet is firmly in the safe category here. Ninety-second check in the wallet that gets your funds stuck.
Of every risk on this page, this is the one most likely to actually cost a reader money, and it is the one almost no review mentions.
The risk that is not technical
Gated access, a Discord, and an airdrop rumour is close to an ideal environment for fraud. The losses here happen outside the protocol, in the queue to get into it.
Fake Discord servers impersonating gated launches are routine and convincing, precisely because the real process already feels exclusive and slightly confusing. Reach the Discord from txflow.com only, never from a search result or a DM. Codes are free, no legitimate code requires a wallet signature to claim, and nothing ever requires a seed phrase. More in how to get a TxFlow access code.
So, how safe
Safe from the exchange stealing or losing your balance: yes, structurally. That is real.
Safe from code being wrong: unknown, and only partially audited.
Safe from your own mistakes: less than a centralised exchange, because nothing can be reversed.
Proven under stress: no. Seven months, no violent move yet. The information you most want about any venue is what it does on the worst day of the year, and that day has not happened.
The practical version
- Check your wallet type before depositing. The single highest-value thing on this page.
- Round-trip a small amount first. Deposit a few dollars, trade the minimum, withdraw it. Ten minutes, and it catches this and several other problems.
- Size it as speculative. Mine is small enough that if the chain stopped tomorrow it would annoy me rather than hurt me.
- Keep long-term holdings off it entirely. Not a TxFlow judgement. No trading venue is where holdings should live.
- Use a hardware wallet for anything meaningful. Standard key pair, safe category, keys never touch the browser.
Fuller assessment in the TxFlow review, and the honest version of the hype question in will TxFlow be the next hype.
Common questions
Is TxFlow a scam?
No. It is a functioning exchange with named founders, real markets and real volume, and it is non-custodial so it never holds your balance. But not being a scam is a low bar. The meaningful risks are smart contract risk, chain risk, thin liquidity and a documented wallet incompatibility.
Has TxFlow been audited?
Partially. OpenZeppelin audited the bridge contract. That is the right contract to audit first, since bridges account for the largest losses in crypto, but it is one contract and the broader system does not have equivalent public coverage.
What is the most likely way to lose money on TxFlow?
Using an account-abstraction wallet. TxFlow's own documentation advises against smart contract wallets and states the worst case is funds stuck in the contract, with no documented recovery path. This is avoidable in about ninety seconds of checking.
Is non-custodial safer than a centralised exchange?
For some risks, yes. No exchange holds your coins, so an exchange hack or insolvency cannot take them. It replaces those with smart contract risk, bridge risk and chain risk, and it removes any possibility of someone reversing your mistake. It moves the failure mode rather than deleting it.