# Is TxFlow safe? What is audited, and what is not

Non-custodial removes one risk and leaves four. The audit covers the bridge only, and the documented way to lose your deposit is your wallet type.

- URL: https://pushpendra.info/articles/is-txflow-safe
- Author: Pushpendra Singh
- Language: English
- Topics: txflow, security, dex, risk, audits

---

"Is it safe" is really several questions, and answering them as one is how people end up
confidently wrong. Let me separate them.

## It is not a scam, and that is not the question

TxFlow has named founders (Matt Hu, Harrison Rea, Jack Wang), functioning markets, real volume
and a public documentation site that is candid about its own limitations, which is more than a
lot of better-funded projects manage.

So the fraud question is settled. The remaining questions are harder, because **a project can
be entirely sincere and still lose your money.** Most of the losses in this industry come from
honest teams shipping code that turned out to be wrong under pressure.

## What non-custodial actually removes

This is the genuine safety advantage and it is worth being precise about.

TxFlow never holds your balance. So the risks that have dominated the last two years of
exchange failures simply do not apply: there is no treasury to be drained, no insolvency, no
withdrawal freeze while a company decides what to tell you.

That is not abstract. CoinDCX confirmed a **$16 million loss in October 2026** after first
denying it, following a **$44 million** incident in July 2025. On a non-custodial venue that
category of event cannot reach your coins. I wrote about how I weigh that on
[the CoinDCX page](/deals/coindcx).

## What it puts in its place

Four risks, and non-custodial does not help with any of them.

**Smart contract risk.** Your funds interact with contracts. A bug in margin logic, liquidation
handling or settlement can lose money without anyone intending it.

**Chain risk.** TxFlow runs its own Layer 1. A halt, a reorg or a consensus bug is now your
problem too, and a seven-month-old chain has had less adversarial attention than Ethereum has
had in a bad week.

**Liquidity risk.** Thinner books than the majors. In a fast move you may not be able to close
where you expect, which on a leveraged position is how an inconvenience becomes a liquidation.

**No undo.** The thing preventing the exchange from losing your money also prevents it from
recovering your mistake. Wrong address, wrong wallet type, wrong network: nobody can reverse it.

## The audit, read properly

**OpenZeppelin audited the bridge contract.** OpenZeppelin is a serious firm and the bridge is
the correct thing to audit first, because bridges account for the largest single losses in
crypto history.

But it is **one contract**. The matching engine, margin checks, liquidation logic and
settlement path are where a perpetuals exchange actually fails, and they do not have equivalent
public coverage.

"Audited" in marketing copy almost never distinguishes between some and all. When you see
TxFlow described as audited, the accurate reading is "its bridge is audited", and the difference
is most of the system.

A second serious audit of the core contracts is the cheapest credibility a young protocol can
buy. If months pass without one, that absence is itself information.

## The self-published number

The **250,000 transactions per second** figure appears in nearly every article about TxFlow and
is always, ultimately, sourced to TxFlow.

I have not found an independent measurement. It may be entirely accurate. But a performance
claim that no third party has verified is marketing, and the uniformity with which it is
repeated across review sites tells you how much independent checking the coverage involved.

The same goes for one-block finality. Plausible for the architecture, and unverified.

## The documented way to lose your deposit

This is the one with a real, named, avoidable failure mode, and it is why I wrote a separate
article about it.

TxFlow's own documentation **advises against account-abstraction wallets**, meaning smart
contract wallets rather than standard key pairs, and states the worst-case outcome is **funds
stuck in the contract.**

No documented recovery path. Non-custodial means nobody can reach in and fix it.

If your wallet recovers from a 12 or 24 word seed phrase, you are fine. If you sign in with an
email or social account, or recovery runs through guardians or multiple signers, **check before
depositing anything.** A hardware wallet is firmly in the safe category here. Ninety-second
check in [the wallet that gets your funds stuck](/articles/txflow-wallet-funds-stuck).

Of every risk on this page, this is the one most likely to actually cost a reader money, and
it is the one almost no review mentions.

## The risk that is not technical

Gated access, a Discord, and an airdrop rumour is close to an ideal environment for fraud. The
losses here happen outside the protocol, in the queue to get into it.

Fake Discord servers impersonating gated launches are routine and convincing, precisely because
the real process already feels exclusive and slightly confusing. Reach the Discord from
txflow.com only, never from a search result or a DM. Codes are free, no legitimate code
requires a wallet signature to claim, and nothing ever requires a seed phrase. More in
[how to get a TxFlow access code](/articles/txflow-access-code).

## So, how safe

**Safe from the exchange stealing or losing your balance:** yes, structurally. That is real.

**Safe from code being wrong:** unknown, and only partially audited.

**Safe from your own mistakes:** less than a centralised exchange, because nothing can be
reversed.

**Proven under stress:** no. Seven months, no violent move yet. The information you most want
about any venue is what it does on the worst day of the year, and that day has not happened.

## The practical version

1. **Check your wallet type before depositing.** The single highest-value thing on this page.
2. **Round-trip a small amount first.** Deposit a few dollars, trade the minimum, withdraw it.
   Ten minutes, and it catches this and several other problems.
3. **Size it as speculative.** Mine is small enough that if the chain stopped tomorrow it would
   annoy me rather than hurt me.
4. **Keep long-term holdings off it entirely.** Not a TxFlow judgement. No trading venue is
   where holdings should live.
5. **Use a hardware wallet for anything meaningful.** Standard key pair, safe category, keys
   never touch the browser.

Fuller assessment in [the TxFlow review](/articles/txflow-review), and the honest version of
the hype question in [will TxFlow be the next hype](/articles/will-txflow-be-the-next-hype).

---

Written by Pushpendra Singh, crypto educator and founder of SmartViewAI, Top Crypto Educator at
Consensus 2025. Not financial or tax advice. https://pushpendra.info