Risk Disclosure

Last updated: [EFFECTIVE DATE]

Read this before you use Coldfront. It is part of the Terms of Use.

Trading risk

Perpetual futures on Hyperliquid are leveraged. Prices can move fast, positions can be liquidated, and you can lose all the funds in your account. Coldfront does not reduce trading risk and does not give trading advice.

What the API key can do

A Hyperliquid API wallet cannot withdraw or transfer funds, but it can place, change and cancel orders on your account. Anyone who gets your API key while it is valid can trade your account, including trades that lose money. Revoke the API wallet on Hyperliquid's API page if you think the API key has leaked.

While Coldfront is unlocked

While unlocked, the API key is in the Hyperliquid app's memory in your browser. Coldfront cannot protect it from malware on your computer, a malicious browser extension, a compromised Hyperliquid website, or someone with access to your unlocked computer. Lock Coldfront when you are not trading, and use short auto-lock times.

Your passphrase

There is no recovery. If you forget your passphrase, the stored key cannot be decrypted. Your funds are not affected: revoke the API wallet on Hyperliquid and set up again.

Dependence on Hyperliquid

Coldfront works with the Hyperliquid app through a way of loading an API wallet that Hyperliquid has not documented for this use. Hyperliquid can change its app, its API, its terms or its referral program at any time. Coldfront may stop working without notice, and Hyperliquid may decide how its terms apply to this kind of use.

Software risk

Coldfront has been through security review rounds and runs over 150 automated checks. Software can still have bugs. Keep the Extension updated, install it only from the official Chrome Web Store link on cold-front.xyz, and check the extension ID: kihcdlneekddhjopligjhoflnkkeadgg.

Impersonation

Scammers copy popular crypto tools. Coldfront will never ask for your seed phrase, your main wallet's private key or your passphrase, and never asks you to sign a transaction to "verify" or "claim" anything.

Where you live

Hyperliquid's app is not available to people in the United States, Ontario, or sanctioned territories. You are responsible for following the laws where you are, including tax laws.