Chainflip exchange profile

Chainflip combines native-chain vaults with an independent State Chain that records balances and executes swaps. A user can exchange supported assets across chains and receive the output at a specified destination without receiving an intermediate wrapped representation. Assets nevertheless enter protocol-controlled vaults during the process; native settlement does not mean the original wallet retains exclusive control throughout.[13]

DefiLlama’s DEX snapshot at 20:43:48 UTC on 20 October 2026 recorded US$665,695,355 of rolling 30-day Chainflip spot volume. This approximately US$665.7 million is protocol activity, including routes originating through integrations, rather than solely the default frontend. It is not a count of active people and should not be added to the same trades reported by aggregators.[40]

The v2.3 reference gives BSC USDT 18 decimals, compared with six for USDT on several other chains; cbBTC uses eight. It also states that BNB, BSC USDT and cbBTC lack oracle price feeds for certain features. They cannot be assumed to support oracle-based strategies, lending collateral or the same default slippage protections as other assets.[22]

The just-in-time AMM lets liquidity providers adjust their bids as deposits approach execution. Swaps consume the best available range or limit liquidity and are grouped by direction and pool. Multi-asset routes can traverse USDC-denominated pools sequentially. Final pricing remains uncertain until execution; a one-sided inventory shock or thin competing liquidity can make a previously indicative quote unreliable.[14]

For a hypothetical US$200-equivalent swap subject to the ordinary 0.10% network rate, the percentage calculation is US$0.20-equivalent, so the US$0.50 minimum applies. This is the network component only, not the total route cost; pool fees, broker fees, gas, Boost and market effects are excluded.[5]

An October 19 marketing comparison models zero network costs. This conflicts with the protocol charges above. The reference mechanics govern this profile’s illustration; the complete live quote is necessary to resolve a specific route.[39][5]

A broker can impose an additional charge for its endpoint. The protocol reference caps that commission at 1,000 basis points, or 10%, rather than prescribing one universal retail rate. A deposit-channel broker also pays State Chain and channel-opening costs. The actual interface or integrator commission must therefore be included in the quote alongside protocol charges.[30]

When the default frontend licensing arrangement was announced in May 2025, its initial broker fee was 0.15%. That is a dated launch tariff, not proof that every October 2026 swap or third-party integration uses the same charge. The announcement assigns frontend operations to Crosschain Association under licence from Chainflip Labs.[6]

The SDK’s quote result separates included fees, pool information, estimated duration, estimated output and low-liquidity warnings. Amounts use the relevant token’s smallest units. Source and destination costs may be denominated in different assets, so a percentage comparison alone can conceal the cost of a small cross-chain transfer. A quoted duration is an estimate rather than a settlement deadline.[33]

Boost accelerates a deposit only when eligible pools can cover the complete amount within the selected fee ceiling. Otherwise it falls back to ordinary confirmation without a Boost charge. It is not an assurance of a fixed arrival time: source-chain inclusion, liquidity and destination payout still matter.[19]

The swap requires a refund address and retry duration. Minimum accepted price and supported oracle-deviation limits operate at the AMM layer; they do not incorporate deposit and broadcast charges in the same way as network and broker fees. If protection remains unsatisfied until retry expiry, the remainder returns to the source-chain refund address. A Boost fee already used is not refunded.[18]

An active LP first creates and funds a State Chain account, registers the LP role and normally runs the relevant RPC/API infrastructure. Passive users can onboard through the frontend without manual CLI registration. Depositing trading assets into a protocol account is separate from funding that account with FLIP for State Chain actions. The validator-auction minimum is not a universal minimum swap size.[28]

A FLIP redemption is different from an ordinary BTC or stablecoin payout. Bonded validator FLIP cannot be withdrawn, auction participation can restrict redemption, and vested FLIP has destination restrictions. Expired registered redemptions return through the documented account-crediting process. These rules concern the State Chain Gateway, not a blanket two-day hold on every customer swap.[20]

Vaults use a threshold-signature network described as 100 of 150 validators. The State Chain holds accounting records; native wallets or contracts on each supported chain hold the actual assets. Collective key compromise, accounting faults or external-chain events can therefore affect assets awaiting settlement and LP capital. Receiving native output avoids an intermediate wrapped claim but does not remove those protocol dependencies.[13]

Governance can upgrade runtime rules and alter parameters. The security reference describes a 3-of-6 governance council key and a separate 5-of-9 community council key for stronger emergency actions. Safe Mode can suspend functions while blocks continue; full red mode stops egress, including swap payouts and LP withdrawals. That capability can contain an incident while also delaying access to assets.[17]

The 15 September restart notice describes a staged runtime and engine upgrade. Tron processing was isolated while the other supported routes resumed first; Tron USDT balances and affected positions required accounting treatment. The patch restricts eligible memos to plain TRX or direct TRC-20 transfers, excluding wrapped contract-call cases. Integrations must therefore review transaction form, not just the displayed asset ticker.[8]

On 18 September, Proposal 008 approved using recoverable Tron USDT and surplus vault assets to restore affected LP claims, with USDC credited one-for-one for the remaining amount under the proposal. The announcement says the approved plan was ready to enact. It does not prove that every affected account had received its credit or completed a withdrawal. Proposed future reserves and case-by-case governance recovery also do not create a deposit-insurance entitlement.[9]

The official status RSS, inspected on 20 October 2026, labels the September incident resolved and says the protocol was restored by a network upgrade. That confirms the operator’s service-resolution classification. It is not evidence that every restitution payment was completed. The same feed records the June and August incidents as resolved.[12]

Boost providers exchange confirmation risk for fee income. If a prefunded deposit fails to finalise before its channel expires, the committed contribution can be lost proportionately. A hypothetical 2 BTC deposit supported entirely at a 5-basis-point Boost tier generates 0.001 BTC of Boost fees before ingress charges and other effects. Holding one asset avoids pair-rebalancing loss but does not eliminate vault or deposit-finality risk.[29]

Crosschain Association’s terms require legal-age, lawful users and prohibit sanctioned parties. The operator may restrict markets, request identity information and suspend access; the terms prohibit bypassing location controls. No comprehensive positive country-eligibility list was established. An available protocol route does not establish that every user may lawfully access the default interface.[1]

The privacy policy covers wallet addresses, IP geolocation, device information, support messages and verification information where requested. It states a general six-year retention period from the last interaction for contract-related data and three years for site-security data, with exceptions. Wallet-based use is therefore not a promise that no identifying data will be processed or retained.[2]

LP registration and deregistration are on-chain roles, not the same as a conventional exchange login. Complete exit requires clearing orders and withdrawing free balances before deregistering. The inspected setup guide did not establish a periodic retail inactivity tariff; an outstanding position or a service pause should be assessed under its own capital-release conditions.[28]

The official support page links private tickets through Discord and Telegram. Keep the swap or channel ID, source transaction hash, selected assets, destination and refund address when reporting a problem. The network status feed and explorer provide separate evidence about processing. No telephone dealing instruction or guaranteed manual intervention time was established.[4]

For certain failed Ethereum or Arbitrum payouts, the recovery guide describes an on-chain fallback payload that the recipient can retrieve and broadcast. It expires after one epoch, documented as approximately three days, so escalation is time-sensitive. The guide directs users who cannot interpret the payload to official Discord support. This is a specific failed-transfer mechanism, not a general reversal service for sending to the wrong address.[21]

The same recovery reference warns that some smart-contract recipients exceed the native-transfer gas allowance, token issuers can block an address, and TRX transfers to contracts are unsupported in that flow. Before retrying, distinguish an unsupported receiving address from an ordinary delay in witnessing or payout. A failed transfer can require a different recovery action from a failed swap.[21]

SDK status and quote methods allow an integration to keep the trade identifier and inspect progress after submission. The asset response includes current minimum swap amount, maximum where applicable, minimum egress and decimals. Read those values for the exact asset and chain; a single universal account minimum or fixed maximum cannot describe all routes.[33]

Chainflip’s October activity guide directs users to Scan for fee and volume history and to the LP interface for current pool returns. Daily, weekly and monthly observations serve different purposes; a short burst of volume is not a stable future yield. No complete, tax-ready customer statement or cost-basis export was established from that guide. Keep source and destination chain records together with State Chain events.[38]

Closing the frontend after funding does not cancel a protocol swap or stop a strategy. The SDK can obtain a quote, request the initiation data and monitor status; signing and sending funds is the financially operative step. During a security pause, follow the applicable incident notice and check progress before submitting another transfer against an old channel.[32]

The interface terms say Crosschain Association supplies access rather than acting as the trader’s broker or financial adviser. They limit contractual liability by reference to net fees received during the preceding twelve months, subject to non-excludable law. This does not establish insurance for the value of deposited crypto.[1]

Chainflip Labs’ legal notice identifies a German company and commercial register number HRB 219408 B at Amtsgericht Charlottenburg. Commercial registration identifies the business; it does not itself establish a financial-service permission. No current verified regulator entry covering the default swapping interface was established for this profile, so no positive financial-permission row is recorded.[3]

The default interface contract selects English law and English courts, with a provision allowing Crosschain Association to require LCIA arbitration seated in London. These are the stated contract routes. A protocol governance proposal or an informal support ticket is distinct from a contractual claim.[1]

Crosschain Association is described in the May 2025 announcement as a nonprofit Swiss association in Zug, licensed to operate the default frontend suite. Chainflip Labs supplies development and licensed technology. These roles are separate from the validator network that controls vault execution, and from third-party brokers embedding Chainflip into another application.[6]

The corporate legal notice names Chainflip Labs GmbH at a Berlin address and identifies its authorised representatives. The corporate website and the default swap interface therefore have distinct disclosed roles. An integration using Chainflip liquidity can add its own interface, fee and support relationship; protocol-wide volume cannot be treated as the licensed frontend’s standalone customer activity.[3]

Liquidity provision has professional and passive entry paths. Active providers normally operate their own market-making infrastructure, while passive strategies apply predefined order rules. Neither path means Chainflip Labs is managing a conventional segregated brokerage account for the user. A pool’s financial result depends on its assets, rule configuration, liquidity usage and the protocol’s operation.[23]

Operator

Crosschain Association operates the default swap interface; Chainflip Labs develops software

Exchange model

Decentralised

Service scope

Native cross-chain swaps, liquidity provision and related lending tools.

Client types

Retail clients; Professional clients; Institutional clients

Pricing publication

Public and quoted pricing

Pricing scope

Protocol, liquidity, broker and chain costs depend on the route.

Funding scope

Native-chain deposits; separate FLIP-funded accounts for protocol roles.

Custody and asset handling

Native assets enter jointly controlled protocol vaults; State Chain accounts track claims.

Client eligibility

Legal-age users subject to sanctions, local-law and interface restrictions.

Support

Official Discord and Telegram tickets, explorer and status feed.

Authorisation and registration scope

No verified financial-permission entry established for the default interface.

Exchange metadata checked 20 Oct 2026Source 1Source 6Source 13Source 12

Chainflip also documents overcollateralised lending against native assets held through the same vault infrastructure. Supplied assets, collateral balances and borrowed account funds are separate accounting states. This ancillary product introduces interest, liquidation and market-specific credit risk; its existence should not turn an ordinary spot-swap profile into a claim that borrowed positions are equivalent to cash balances.[34]

The borrowing guide requires depositing assets and then moving them into the collateral balance before creating a loan. Borrowed funds arrive in the State Chain account and need a separate external withdrawal. Repayment uses account balances; when debt reaches zero the loan closes and remaining collateral becomes withdrawable. Disconnecting the browser does not repay the debt or remove exposure to changing collateral value.[37]

The market-parameter page explicitly labels its displayed creation and liquidation thresholds as closed-beta settings subject to change for public launch. They are therefore not reproduced here as verified production limits. The same reference identifies possible socialised losses when collateral cannot cover liquidation, high-utilisation effects and oracle outages that can pause new activity. A deposit’s interest rate does not remove those risks.[36]

These strategies continue until explicitly closed. Their documented authority concerns preset order rules and the funded LP account; a separate discretionary AI investment mandate was not established.[24]