MARKET
Nirium← Home
Risk notice

Risk Disclosure

Last updated: November 9, 2026

Read this before using Nirium: it is experimental open-source software on Stellar. You sign your own transactions, and you can lose funds.

1. Autonomous rebalancing (Treasury)

If you enable autonomous rebalancing, you name Nirium's agent as the RebalanceManager of your own DeFindex vault. That role can only move funds between your vault and its strategies: it cannot withdraw them, and you can revoke it at any time. It can still act at a bad moment: the agent can decide wrongly, run late or stop, and the nodes that run it can go down. Someone who obtained the agent's key could move funds between your vault and its strategies, never out of the vault. On mainnet this is invite-only.

2. Smart contracts and third-party protocols

Vaults are DeFindex contracts, and their strategies lend through Blend. Both have third-party audits (DeFindex by OtterSec, March 2025), but an audit does not remove risk and does not cover each vault's configuration. Taking funds out of a lending strategy depends on that pool having enough liquidity at that moment. Nirium's own contracts (NiriumVault, NiriumProtocol) are not audited and run on testnet only.

3. Tokenized assets (USDC, CETES)

USDC is issued by Circle; tokenized CETES are issued by Etherfuse. Their value and redemption depend on those issuers and, for CETES, on the Mexican government bonds behind them. Nirium does not issue, hold or redeem either. Whether a tokenized CETES counts as a security (valor) under Mexico's Securities Market Law is an open legal question. Rates shown on this site are reference data, not a promise of return.

4. Payments and Payouts

Stellar transactions are final: a payment sent to a wrong address cannot be reversed by Nirium or by anyone else. You sign every payout with your own wallet, so check each recipient before signing. x402 payments settle through a third-party facilitator; if it is unavailable, the paid call fails.

5. Audit Trail records

Receipts are anchored on IPFS. A CID proves a document has not changed since it was anchored, not that its contents are true. A record stays reachable only while some provider keeps it pinned; Nirium pins them today but cannot promise it forever. In record mode, the JSON you send (up to 8 KB) is published on IPFS for anyone with the CID: never include personal data or secrets.

6. Legal and regulatory

Nirium provides software and does not custody funds. Whether autonomous rebalancing and Payouts fall under fraction XVI of article 17 of the LFPIORPI (virtual assets) is an open question, with no written legal opinion yet; both stay invite-only on mainnet until it is answered. Each party complies with the law for its own clients: this page does not move anyone's legal obligations onto someone else. Access is prohibited from comprehensively sanctioned jurisdictions, jurisdictions under a FATF call for action, and mainland China. In the EEA, the UK and the US, Payouts is not offered on any network and Treasury is not offered on mainnet. Full policy: /legal/restricted-jurisdictions-v1.md. This is not legal or financial advice.

Using Nirium means you have read these risks. Nothing on this page limits the rights the law gives you.