Skip to main content

Safety and Risks

Raphael is non-custodial: transactions execute from your wallet and cannot normally be reversed. That independence is the point of the system, and it places the final responsibility for every signature with you. This page names the risks plainly.

Key risks​

  • Smart-contract risk: audited or reviewed code can still contain defects.
  • Token risk: tokens may be malicious, upgradeable, frozen, rebasing, fee-on-transfer or worthless.
  • Liquidity risk: a pool can become shallow, making exits expensive or impossible at an acceptable price.
  • Impermanent loss: LP positions can underperform simply holding the deposited assets.
  • Range risk: concentrated liquidity stops earning fees when the market moves outside the chosen range.
  • Oracle and pricing risk: displayed fiat values or APRs can be delayed, incomplete or manipulated.
  • Governance risk: votes, incentives or administrative permissions may change protocol behaviour.
  • Bridge risk: bridged assets depend on bridge contracts and operators in addition to the token and chain.
  • Transaction-ordering risk: public pending transactions may be observed and traded around.

Safer operating habits​

  • start with a small transaction;
  • verify contract addresses on the explorer;
  • review approvals and revoke unused allowances;
  • simulate transactions when possible;
  • use realistic slippage limits;
  • do not treat displayed APR as guaranteed yield;
  • keep enough ETH for gas and position management;
  • verify whether a pool, gauge or incentive is official, community-created or unaffiliated.
The final check is yours

No interface warning can identify every malicious token or unsafe market. If you cannot explain the assets, permissions and contracts involved in a transaction, do not sign it.

For the protocol's security posture, upstream audit history and incident guidance, see Security.