← All articles

Security

The wallet that gets your funds stuck on TxFlow

TxFlow's own docs advise against account-abstraction wallets and warn funds can get stuck in the contract. How to check your wallet in 90 seconds.

4 min read · Security

This is the shortest article on this site and probably the most valuable one, so I am putting the whole point in the first paragraph.

TxFlow’s own documentation advises against using account-abstraction wallets, and states that the worst-case outcome is funds stuck in the contract. I have read a dozen TxFlow reviews while researching this. One mentioned it. The rest listed the fee tiers twice.

What an account-abstraction wallet is

There are two kinds of crypto wallet, and most people have never needed to know which they have.

A standard wallet is a key pair. There is a private key, you got a 12 or 24 word seed phrase, and that phrase is the only thing that controls the address. MetaMask with a seed phrase, Rabby, a Ledger, a Trezor: all standard.

A smart contract wallet, usually called account abstraction or AA, is a contract on-chain that holds the funds and decides what to allow. That is what enables the nice features: logging in with email, recovering access through friends or guardians, multiple required signers, paying gas in a token other than the chain’s own. Safe multisigs, most embedded wallets inside apps, and anything with social recovery fall here.

Smart contract wallets are usually the safer, friendlier design. On TxFlow they are the dangerous one. Not because they are bad, but because the protocol does not reliably support them, and the failure mode lands on your deposit.

How to check, in about a minute

Three tests, cheapest first.

One: how do you recover it? If the answer is a 12 or 24 word phrase you wrote down, and that is the only route, it is a standard wallet. You are fine. Stop here.

If recovery goes through an email, a social login, a passkey, or other people acting as guardians, it is almost certainly a smart contract wallet.

Two: how did you create it? If you signed in with Google, Apple or an email and never saw a seed phrase, it is a contract wallet. If the app calls it “smart account”, “smart wallet”, “AA wallet” or “gasless”, same answer.

Three: look it up. This is the definitive test. Paste your address into the block explorer for whichever chain you funded it on. A standard wallet shows no contract code. A smart contract wallet shows contract code and usually a “Contract” tab. Thirty seconds, and no ambiguity.

If you use a hardware wallet, you are in the safe category. That is worth saying clearly, because the instinct when reading a warning like this is to assume the more serious-looking device is the riskier one. The opposite is true here. A Ledger or Trezor is a plain key pair, which is exactly what TxFlow expects.

Why this is worse than an ordinary bug

Most problems on an exchange are recoverable. Support reverses it, a patch ships, you wait.

This one has no documented recovery path. The funds are not lost in the sense of being stolen, they are inert: sitting at an address where the protocol will not process your withdrawal and nobody has a tool to help. And TxFlow is non-custodial, which is the feature people choose it for and also means there is no custodian with the ability to reach in and fix it. The thing protecting you from the exchange losing your money is the same thing preventing the exchange from recovering it.

It also fails late. You connect, it looks fine, you deposit, and the problem appears when you try to trade or withdraw. By then the money is already in.

Add to that the fact that TxFlow is access-code gated and reached through a Discord, and the support path for an edge case on a seven-month-old protocol is not one I would want to depend on.

What to do

1. Run the three checks above before depositing anything. Not after.
2. If you have a smart contract wallet, use a different wallet for TxFlow. A fresh standard wallet takes two minutes. Keep the smart wallet for what it is good at.
3. Test with a small amount first. Deposit a few dollars, place a tiny trade, and withdraw it. Only once the full round trip works should real size follow. This takes ten minutes and catches this problem and several others.
4. Prefer a hardware wallet for anything you would mind losing. Standard key pair, safe category, and the keys never touch the browser. I have written about choosing one and why buying from a reseller is a bad idea in the hardware wallet section.

Why I wrote this

I earn a referral fee if you sign up to TxFlow through my link. Which means the incentive runs toward a page that lists the fee tiers again and does not mention this.

But the asymmetry is absurd. My cut of your trading fees is a few dollars. The thing I would be withholding could cost you your whole deposit. Anyone who will not tell you about the one documented way to lose your money on a platform is not worth taking a recommendation from on anything else either.

The platform is interesting and the fees are competitive. Just arrive with the right kind of wallet. More honest assessment in will TxFlow be the next hype and TxFlow vs Hyperliquid.

txflowWalletsSecuritydexself-custody