FortiSwap — Terms of Service
Effective date: 2026-08-22 Version: 5.1 Operator: FortiBlox Labs LLC Contact: [email protected] Canonical URL: https://app.fortiblox.com/terms
1. Preamble
These Terms of Service (the "Terms") form a binding agreement between you (the "User", "you", or "your") and FortiBlox Labs LLC ("we", "us", or "our"), the operator of FortiSwap. The Terms govern your access to and use of the software application published at app.fortiblox.com and any subdomain or successor domain we designate ("FortiSwap" or the "Interface").
FortiSwap is a non-custodial decentralised-exchange ("DEX") aggregator. It provides a front-end that helps you discover a price route for a token swap on the X1 blockchain and construct an unsigned on-chain transaction that you sign with your own wallet and broadcast yourself. Swaps route across independent third-party liquidity protocols — currently XDEX and Degen — that we do not operate or control. FortiSwap does not take custody of your funds at any point, does not hold or transmit fiat currency for swaps, does not hold your private keys, and cannot move, freeze, reverse, or recover your assets.
FortiSwap also surfaces an optional fiat on-ramp and off-ramp operated by independent third-party providers — currently Stripe, Coinbase, Transak, and MoonPay (each a "Fiat Provider") — that let you buy USDC with a card or bank payment, or sell supported crypto for fiat paid to your own account. Your use of the on-ramp or off-ramp is governed by Section 4 and by the applicable Fiat Provider's own terms; FortiSwap is not the seller or the buyer of the crypto and does not process your payment or your identity data in those flows.
FortiSwap also surfaces an optional cross-chain bridge for moving supported assets between other blockchains and X1. Cross-chain routes are quoted and built by independent third-party Bridge Route Providers — currently Rango and MoonPay Trade (operated by Swaps XYZ Ltd, a MoonPay company) — shown side by side in one comparison, and the Solana ↔ X1 leg settles through the X1 Warp bridge. Every leg is a transaction that you sign with your own Wallet; FortiSwap never holds or relays your assets in transit. Your use of the bridge is governed by Section 6 and by the applicable Bridge Route Provider's own terms.
FortiSwap uses Privy (privy.io) for sign-in and wallet infrastructure. Where you sign in by email one-time passcode, passkey, or a social provider (Google, X, Discord, GitHub, or Telegram), Privy may provision a user-owned, non-custodial embedded wallet for you; you may instead connect an external wallet directly. Signing in is optional for Swaps and for the cross-chain bridge, which work with a connected Wallet alone, and required to start a fiat on-ramp or off-ramp session, because each Fiat Provider session (including the provider quotes shown for it) is minted only for a signed-in user and is keyed to a pseudonymous reference derived from your sign-in; signing in does not create an account with FortiSwap. In every case FortiSwap remains a non-custodial interface — it never holds, and cannot recover, the private keys to your Wallet, and never takes custody of your funds — and your use of Privy's sign-in and wallet services is additionally subject to Privy's own terms of service and privacy policy.
You accept these Terms in one of three ways. First, by clicking any button, checkbox, or control on the Interface that reads "I agree", "Accept", "Swap", "Confirm", or wording of similar effect. Second, by signing and broadcasting a transaction constructed through the Interface. Third, by any use of the Interface after the effective date shown above. If you do not agree to any part of these Terms, you must not use the Interface. If you are entering into these Terms on behalf of an organisation, you represent that you have authority to bind that organisation, and "you" refers jointly to you individually and to that organisation.
These Terms incorporate by reference our Privacy Policy and our AML & Sanctions Statement, which describe, respectively, the limited data handling associated with the Interface and our sanctions posture.
We may amend these Terms in accordance with Section 13. The version and effective date at the top of this document identify the version currently in force.
2. Definitions
The following definitions apply throughout these Terms. Defined terms are capitalised on first substantive use.
- "Interface" or "FortiSwap" means the FortiSwap web application published at
app.fortiblox.com, its front-end, its supporting read-only and transaction-construction API routes (quoting, routing, and unsigned-transaction assembly), the on-ramp and off-ramp access described in Section 4, the cross-chain bridge access described in Section 6, its documentation, and any related feature we publish under that domain. - "X1" means the X1 public blockchain, a permissionless network on which digital assets are recorded and transferred. We are not the operator of X1, do not control X1, and do not guarantee X1's uptime, throughput, fees, finality, or continued existence.
- "Wallet" means the self-custodial blockchain wallet you connect to or use with the Interface, including any user-owned, non-custodial embedded wallet provisioned for you through the Wallet Infrastructure Provider. You alone control the private keys or seed phrase for the Wallet. We never see, generate, hold, back up, or have the technical ability to recover the private keys or seed phrase associated with the Wallet.
- "Swap" means an exchange of one token for another executed on-chain against one or more liquidity pools, constructed by the Interface as an unsigned transaction and signed and broadcast by you.
- "Third-Party Protocol" means an independent on-chain protocol, smart-contract system, automated market maker, or liquidity venue that we do not operate or control, including without limitation XDEX, Degen, and any other liquidity source the Interface routes across. The FortiBlox Guard program (an on-chain program that may be referenced in a route or transaction) is likewise a distinct on-chain program governed by its own published terms and code, and is treated as a Third-Party Protocol for the purposes of the risk disclaimers in these Terms.
- "Fiat Provider" means each independent third party whose fiat on-ramp and/or off-ramp service the Interface surfaces under Section 4 — currently Stripe (and/or its regulated onramp partner), Coinbase, Transak, and MoonPay, and any successor or additional provider we name in a future revision of these Terms. In an on-ramp flow the Fiat Provider is the party that sells you the crypto; in an off-ramp flow it is the party that buys your crypto and pays out fiat; in both flows it is the party that processes the fiat payment and performs identity verification and screening.
- "Bridge Route Provider" means each independent third party whose cross-chain quoting, routing, and transaction-construction service the Interface surfaces under Section 6 — currently Rango (rango.exchange) and MoonPay Trade (operated by Swaps XYZ Ltd, a MoonPay company, at swaps.xyz), and any successor or additional provider we name in a future revision of these Terms. A Bridge Route Provider quotes a cross-chain route, constructs the source-chain transaction for it, and — through the bridge protocols, decentralised exchanges, and relayers it selects — delivers the asset on the destination chain. A Bridge Route Provider is not a Fiat Provider and performs no fiat activity; neither current Bridge Route Provider supports X1.
- "Wallet Infrastructure Provider" means Privy (privy.io), the third party that provides FortiSwap's sign-in (by email one-time passcode, passkey, or a social provider — Google, X, Discord, GitHub, or Telegram; optional for Swaps and the bridge, required for the fiat on-ramp and off-ramp — see Section 4) and, for users who sign in without an existing wallet, provisions a user-owned, non-custodial embedded Wallet. The Wallet Infrastructure Provider is an authentication and signing service only; it does not take custody of your assets, and FortiSwap does not receive, hold, or control the keys to any Wallet it provisions. Your use of it is governed by its own terms of service and privacy policy.
- "Non-custodial" means, in respect of FortiSwap, that FortiSwap at no point (i) receives, holds, or transmits your fiat currency, (ii) receives, holds, or takes custody of your tokens or other digital assets, or (iii) receives, stores, or has the technical ability to recover the private keys to your Wallet. Every swap transaction is signed by you, in your own Wallet, and broadcast under your own control; any crypto you buy through the on-ramp is delivered directly by the Fiat Provider to a Wallet address you control; and any crypto you sell through the off-ramp is sent by you, from your own Wallet, directly to the Fiat Provider, with the fiat proceeds paid by the Fiat Provider directly to you.
- "Quote" means an indicative price and route displayed by the Interface for a prospective Swap. A Quote is an estimate computed from on-chain state at a point in time; it is not an offer, a guarantee of execution, or a guaranteed price.
- "Sanctions Lists" means the U.S. Department of the Treasury's Office of Foreign Assets Control ("OFAC") Specially Designated Nationals and Blocked Persons List published under 31 C.F.R. Parts 500–599, together with any consolidated sanctions programme administered by the European Union, the United Kingdom, the United Nations, or any successor authority.
3. What the Interface is — and is not
The Interface is a software tool. FortiBlox Labs LLC is a software provider. FortiSwap is not a bank, not a broker, not a dealer, not a securities exchange, not an investment adviser, not a money transmitter, and not a money-services business ("MSB"). FortiSwap does not accept, hold, transmit, or settle fiat currency for swaps; does not take custody of your tokens or other digital assets at any stage; does not operate an order book or a matching engine; does not act as a counterparty to your Swap; and does not act as your agent for the acquisition, safekeeping, or disposition of digital assets. The fiat on-ramp and off-ramp, and the cross-chain bridge, do not change this posture — as Sections 4 and 6 explain, the regulated activity in the fiat flows is performed by the applicable Fiat Provider, and cross-chain delivery is performed by the applicable Bridge Route Provider and the on-chain protocols it selects, not by FortiSwap.
The flow of a single Swap is as follows. You select a token to sell and a token to buy. The Interface reads public on-chain state, computes one or more candidate routes across Third-Party Protocols, and displays an indicative Quote. If you proceed, the Interface constructs an unsigned transaction and returns it to your Wallet. You review the transaction, you sign it with your own keys, and you broadcast it to X1. Execution occurs entirely on-chain against the relevant Third-Party Protocols. FortiSwap never holds your tokens, never signs on your behalf, and never has the ability to move your funds.
Because FortiSwap never takes custody of user funds and never holds or transmits fiat for swaps, the licensed money-services, custody, and payments obligations that attach to a custodial exchange do not apply to the Interface. Nothing in these Terms should be read as a representation that FortiSwap is registered or licensed as any such entity, because it is none of those things. Your relationship with each Third-Party Protocol is direct and on-chain; FortiSwap is not a party to it.
Once your transaction is confirmed on X1, the Interface's role for that Swap is complete. On-chain transactions are irreversible. FortiSwap cannot reverse, cancel, refund, or recover a confirmed transaction, and neither can any Third-Party Protocol.
4. Fiat on-ramp and off-ramp (third-party Fiat Providers)
FortiSwap offers an optional fiat on-ramp that lets you buy USDC with a supported card or bank payment method, and an optional fiat off-ramp that lets you sell supported crypto for fiat paid out to your own account. These features are provided by independent third-party Fiat Providers — currently Stripe (Crypto Onramp), Coinbase, Transak, and MoonPay. FortiSwap surfaces and facilitates access to each provider's flow; it does not itself sell or buy crypto or process payments. The following disclosures apply to each Fiat Provider and each flow, and by using the on-ramp or off-ramp you accept them.
- The Fiat Provider is the counterparty and the regulated party. In an on-ramp flow, the Fiat Provider is the party that sells you the crypto; in an off-ramp flow, the Fiat Provider is the party that buys your crypto and pays out the fiat. In both flows the Fiat Provider performs all identity verification, know-your-customer ("KYC"), anti-money-laundering ("AML"), payment processing, and fraud and sanctions screening. FortiSwap is not the seller or buyer of the crypto, is not a money transmitter or MSB, and does not perform KYC for the on-ramp or off-ramp.
- Your relationship is directly with the Fiat Provider. Your fiat, payment, and identity-verification relationship for an on-ramp or off-ramp transaction is directly with the Fiat Provider you transact with, under that provider's own terms of service and privacy policy. You must review and accept the provider's terms to use its flow. The provider's terms govern that transaction; where they conflict with these Terms in respect of the on-ramp or off-ramp, the provider's terms control the fiat and payment leg.
- FortiSwap does not receive your payment or identity data. FortiSwap does not receive, hold, or process your card number, bank details, or the personal identity information you provide to a Fiat Provider. That data is collected and handled by the provider, not by us. See our Privacy Policy for the data flow.
- Non-custodial delivery — both directions. Crypto you buy is delivered by the Fiat Provider directly to a Wallet address you control. Crypto you sell is sent by you, from your own Wallet, directly to the Fiat Provider, and the fiat proceeds are paid by the provider directly to you. FortiSwap does not take custody of the crypto or the fiat at any point in either direction, and does not receive fiat on your behalf.
- Availability, limits, and fees set by each provider. Eligibility, availability, supported payment and payout methods, purchase and sale limits, exchange rates, and any fees are determined by each Fiat Provider, may differ between providers and between the buy and sell directions, and may differ from the eligibility terms for the rest of the Interface in Section 5. FortiSwap does not guarantee that any provider's flow will be available to you, will complete, or will complete at any particular price. Where the Interface displays multiple providers, the ordering reflects quoted economics and availability and is not an endorsement.
- No responsibility for a Fiat Provider's performance. Your use of an on-ramp or off-ramp is a direct relationship between you and that Fiat Provider. To the fullest extent permitted by applicable law, FortiSwap disclaims responsibility for a Fiat Provider's acts, omissions, decisions (including a decision to decline, delay, refund, or reverse a purchase or sale), fees, and data handling.
- Sign-in required for the on-ramp and off-ramp. To start an on-ramp or off-ramp session — including to see the Fiat Providers' quotes — you must first sign in through the Wallet Infrastructure Provider (Privy). The session is bound to a pseudonymous reference derived from that sign-in so that the Interface can show you its status; no account with FortiSwap is created, and the sign-in is authentication only, not identity verification (which remains the Fiat Provider's). Swaps and the cross-chain bridge do not require sign-in and work with a connected Wallet alone.
- Settlement network and the X1 bridge. Each Fiat Provider delivers the USDC you buy — and receives the USDC you sell — as USDC on the Solana network, to or from a Solana Wallet address you control; no Fiat Provider supports X1 directly. Moving that USDC between Solana and X1 is a separate step that the Interface constructs as an unsigned transaction through the X1 Warp bridge (a Third-Party Protocol) and that you sign and broadcast yourself. Until you sign that step, the USDC simply remains in your own Solana Wallet; FortiSwap does not take custody of it at any point between the Fiat Provider's settlement and the bridge.
- MoonPay. MoonPay is the merchant of record for purchases and sales made through its widget: MoonPay sells you the USDC (on-ramp) or buys your USDC and pays out the fiat (off-ramp), performs its own identity verification (KYC) and screening, and shows its own fees, including any network fee, inside its widget before you confirm. The Interface opens MoonPay's hosted widget in a new browser tab with your Wallet address pre-filled; FortiSwap does not process your payment. A MoonPay purchase is delivered as USDC on Solana to that Wallet. For a MoonPay cash-out, MoonPay first issues a deposit address for your USDC; the Interface then builds the deposit transfer to that address, which you sign from your own Wallet — nothing leaves your Wallet until you sign. MoonPay requires the deposit to reach it within 48 hours of the cash-out being created, after which MoonPay marks the cash-out as failed and the Interface will not build the transfer. If MoonPay fails a cash-out after receiving a valid deposit, MoonPay refunds the crypto to the refund address on that transaction — your own Wallet, which the Interface pre-fills — and a deposit that does not match the cash-out is returned by MoonPay to the sending address. MoonPay pays out in USD, GBP, or EUR only, to a payout method you register with MoonPay. MoonPay's own eligibility rules apply in addition to Section 5: as at the effective date, MoonPay does not offer USDC on Solana to residents of Canada or the U.S. Virgin Islands, and does not offer cash-outs to residents of Louisiana, New York, Texas, or the U.S. Virgin Islands. MoonPay's terms of service and privacy policy govern your MoonPay transaction.
5. Eligibility, sanctions, and prohibited use
You may use the Interface only if all of the following are true.
You are at least eighteen (18) years of age and, if the age of majority in your jurisdiction of residence is higher than eighteen, you are at least that age. The Interface is not directed at minors, and we do not knowingly permit any person under eighteen to use it.
You have the legal capacity to enter into a binding contract in your jurisdiction of residence.
You self-certify that you are not a resident, national, or ordinarily located in any country or territory that is the target of comprehensive U.S. sanctions, including as at the effective date of these Terms Cuba, Iran, North Korea, Syria, the so-called Donetsk People's Republic, the so-called Luhansk People's Republic, and the Crimea region of Ukraine, and any successor list published by OFAC or an analogous authority in your jurisdiction. You further self-certify that you are not identified on, and are not owned or controlled by or acting on behalf of any person or entity identified on, any Sanctions List, and that no Wallet you use with the Interface is subject to a sanctions designation.
You are not a resident of, or ordinarily located in, the United Kingdom. The Interface is not currently offered to persons in the United Kingdom pending completion of the applicable pathway under the United Kingdom Financial Services and Markets Act 2000 (Financial Promotions Regime), as extended to cryptoasset promotions in October 2023. This is a regulatory exclusion, distinct from the sanctions-based exclusions above — the United Kingdom is not under U.S. sanctions, and its exclusion reflects only that FortiSwap has not yet completed the applicable U.K. financial-promotions pathway.
You are not a resident of, or ordinarily located in, a jurisdiction that imposes a comprehensive local prohibition or restriction on the acquisition, holding, exchange, or use of cryptoassets by residents. As at the effective date of these Terms, the jurisdictions in this category are the People's Republic of China, Bangladesh, Bolivia, Egypt, Morocco, Nepal, the Republic of Türkiye (in respect of the use of cryptoassets as payment), and Belarus. This list is reviewed periodically against public regulatory guidance and may be updated in a future revision. The authoritative machine-readable list is the constant EXCLUDED_COUNTRIES in the Interface source at src/middleware.ts, which short-circuits requests originating in these jurisdictions to a /region-not-supported page as a defence-in-depth measure. If you access the Interface from an excluded jurisdiction in circumvention of these controls, you do so at your own risk, and we do not authorise, target, or promote the Interface to you.
You must not use the Interface to launder proceeds of criminal activity, to finance terrorism, to evade sanctions, to commit tax evasion, to commit fraud, or for any activity that is illegal in your jurisdiction of residence. You must not attempt to interfere with the Interface by, without limitation, submitting automated requests designed to degrade the service, forging headers to circumvent the geographic controls in this Section, reverse-engineering the front-end for the purpose of exploiting a defect, or extracting data belonging to other users.
FortiSwap does not operate, and we have no obligation to operate, a know-your-customer ("KYC") identification programme for the swap Interface, because FortiSwap takes no custody of funds, holds no fiat for swaps, and is not the MSB or licensed party for any Swap. You interact with public on-chain protocols using your own Wallet. The only identity verification associated with FortiSwap is the KYC that a Fiat Provider performs for the fiat on-ramp or off-ramp under Section 4, which is that provider's programme, not ours. Our sanctions posture is described in our AML & Sanctions Statement.
6. Third-party protocol risk
Swaps route over Third-Party Protocols that we do not operate or control. When you swap through the Interface, your transaction executes against independent on-chain protocols — currently XDEX and Degen, and potentially others the Interface routes across, together with the FortiBlox Guard program where a route references it. Each of these is a distinct smart-contract system, deployed and governed independently of the Interface and subject to its own code, its own risks, and its own terms.
You acknowledge and agree that:
- We do not operate, control, audit, endorse, or warrant any Third-Party Protocol, and do not guarantee that any Third-Party Protocol is free of defects, vulnerabilities, or malicious behaviour.
- A Third-Party Protocol may contain bugs, may be exploited, drained, paused, upgraded, deprecated, or halted, may behave differently from its documentation, or may cease to exist, in each case without notice and outside our control.
- Liquidity in a Third-Party Protocol may be withdrawn, may be insufficient, or may be manipulated, causing a Swap to execute at a materially worse price than the Quote, to revert, or to fail.
- The FortiBlox Guard program, where referenced, is an on-chain program with its own code and behaviour; nothing in these Terms is a warranty that it will function as expected or that it protects you from any particular loss.
- Your use of any Third-Party Protocol is a direct, on-chain relationship between you and that protocol, governed by that protocol's own terms and code. We are not a party to it and disclaim responsibility for its performance to the fullest extent permitted by applicable law.
Cross-chain bridge routes (Bridge Route Providers). Where you use the Interface's optional cross-chain bridge, the Interface requests candidate routes from independent Bridge Route Providers — currently Rango and MoonPay Trade (operated by Swaps XYZ Ltd, a MoonPay company) — and displays them side by side in a single comparison, each tagged with the provider that quoted it, so that you can choose by net output, fees, or estimated time. The ordering is not an endorsement. A Bridge Route Provider aggregates bridges, decentralised exchanges, and relayers that it — not FortiSwap — selects. The following applies to each Bridge Route Provider and each route:
- Every leg is signed by you. A cross-chain route is constructed as an unsigned transaction on the source chain; the Interface simulates it before presenting it and bounds what can leave your Wallet, and you sign it with your own keys. FortiSwap never holds, forwards, or relays your assets. While a transfer is in flight, your assets are held by the bridge protocol or relayer chosen by the Bridge Route Provider — not by FortiSwap — and delivery on the destination chain is settled by that provider's bridge or relayer (for MoonPay Trade, by Swaps' relayer accounts) at no less than the provider minimum shown to you before you sign.
- X1 is never routed by a Bridge Route Provider. Neither Rango nor MoonPay Trade supports X1. A route into or out of X1 is therefore two steps: the cross-chain leg quoted by the Bridge Route Provider to or from USDC on Solana, and a separate Solana ↔ X1 leg through the X1 Warp bridge (and, where the route ends in another X1 token, a Swap on X1 through the on-chain FortiBlox Router, which carries the 0.25% FortiSwap fee described in Section 7), each constructed as an unsigned transaction that you sign.
- Provider terms, fees, and eligibility. Your use of a route is a direct relationship with the Bridge Route Provider and the on-chain protocols it selects, under their own terms (for MoonPay Trade, the terms of Swaps XYZ Ltd). Each provider's own fees, any bridge or relayer fees, and the network fees of the chains involved are set by those parties and are shown on the route before you sign. FortiSwap may charge its own fee on a bridge route — currently up to 0.25% on Rango routes and 0.20% on MoonPay Trade routes — which is taken from the route's output, disclosed on the review screen, and already included in the net output the comparison ranks by. A Bridge Route Provider may decline to quote a route for your region or for a Wallet it screens; the Interface then simply shows fewer routes.
- Quotes are indicative and may be re-quoted. A displayed bridge route is an estimate. The Interface re-quotes at the moment it builds the transaction and refuses to build if the fill has moved materially against you or the provider's minimum has regressed, in which case you may review the new route or abandon it. Cross-chain transfers are irreversible once signed and broadcast; where a provider's bridge or relayer cannot complete delivery, any refund is made by that provider's bridge or relayer on the source chain, not by FortiSwap.
The Interface also depends on other third-party infrastructure — including X1 RPC providers, the Fiat Providers described in Section 4, the Bridge Route Providers described above, the Wallet Infrastructure Provider (Privy) that supplies the optional sign-in and embedded-wallet infrastructure, and the operator of any wallet extension you choose to use. Where a Wallet is provisioned for you through the Wallet Infrastructure Provider, that Wallet is user-owned and non-custodial: FortiSwap does not hold or control its keys, does not act as a custodian of it, and your use of that provider's sign-in and wallet services is governed by that provider's own terms and privacy policy. We do not warrant the performance of any such provider and disclaim responsibility for a loss you suffer as a consequence of a third-party provider's act or omission, except where such disclaimer is prohibited by applicable law.
7. Swap risks
By using the Interface to construct and broadcast a Swap, you acknowledge and accept the following material risks, each of which is inherent to on-chain trading and outside our control:
- FortiSwap fee. FortiSwap charges a fee of 0.25% (25 basis points) of the output of each Swap. The fee is taken from the output token and is shown on the review screen before you sign, so the amount you receive is displayed after the fee. Where a route executes through the on-chain FortiBlox Router, the fee is enforced in-program by the Router and paid on-chain to the FortiBlox treasury wallet; otherwise it is included in the transaction you sign as a transfer to that wallet. The fee is separate from, and in addition to, X1 network fees and any fee charged by a Third-Party Protocol the route crosses. FortiSwap's fee on cross-chain bridge routes is described in Section 6.
- Slippage. The price at which your Swap executes may differ from the Quote because on-chain state changes between the time the Quote is computed and the time your transaction is included in a block. You are responsible for the slippage tolerance you set; a tolerance set too high exposes you to a worse execution price, and a tolerance set too low may cause your transaction to revert.
- MEV and sandwiching. Public mempools expose pending transactions to maximal-extractable-value ("MEV") strategies, including "sandwich" attacks in which an adversary trades immediately before and after your Swap to profit at your expense. We do not guarantee protection against MEV.
- Price impact. A Swap that is large relative to available liquidity moves the pool price against you. The Interface may display an estimated price impact, but the realised impact depends on the state of the pool at execution.
- Failed or reverted transactions. A transaction may revert or fail — for example, on exceeded slippage, insufficient liquidity, an expired route, or network congestion. A reverted transaction may still consume network fees. We do not refund network fees.
- Token and smart-contract risk. Any token you swap into may be malicious, may be a scam or "honeypot", may have transfer fees, freeze authorities, or mint authorities, may be illiquid, or may lose all value. We do not vet, endorse, or warrant any token, and the appearance of a token in the Interface is not an endorsement. You are solely responsible for verifying the token you are trading, including its mint address.
- Impermanent and indicative Quotes. A Quote is an estimate computed from on-chain state at a point in time and expires; it is not an offer or a guaranteed price. Routing decisions across Third-Party Protocols are automated and best-effort, and we do not warrant that any route is optimal.
- Irreversibility. On-chain transactions are final. A transaction sent to the wrong address, for the wrong amount, or for the wrong token cannot be reversed by us, by any Third-Party Protocol, or by X1. You are solely responsible for reviewing every transaction in your Wallet before you sign it.
- Volatility and regulatory risk. Digital assets are subject to extreme price volatility. Regulatory changes in your jurisdiction may make holding or transferring a given asset unlawful or costly. You accept all such risks.
8. No warranty
THE INTERFACE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTY OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE. To the fullest extent permitted by applicable law, we disclaim all warranties, including without limitation any implied warranty of merchantability, fitness for a particular purpose, non-infringement, title, quiet enjoyment, accuracy of data, and system integration.
We do not warrant that the Interface will be uninterrupted, timely, secure, or error-free; that any Quote is accurate; that any route is optimal; that any Swap will execute, execute at a particular price, or execute within a particular time; that the fiat on-ramp operated by the Fiat Provider will be available or will complete; or that the Interface, X1, or any Third-Party Protocol will be available or will perform as described.
9. Not financial advice
Nothing in the Interface constitutes financial, investment, tax, legal, or accounting advice. FortiSwap is not registered as an investment adviser under the U.S. Investment Advisers Act of 1940 or under any analogous non-U.S. regime, does not owe you a fiduciary duty, and does not opine on whether any Swap or any token is suitable for you. Quotes, routes, token listings, and any data presented by the Interface are provided for informational purposes only and must not be relied upon as advice. You are solely responsible for your own trading decisions and should consult your own advisers before trading digital assets.
10. Limitation of liability
To the fullest extent permitted by applicable law, our total aggregate liability to you for all claims arising out of or relating to the Interface or these Terms, whether in contract, tort (including negligence), warranty, statute, or otherwise, is limited to one hundred U.S. dollars (USD 100). This cap is a material term of these Terms and reflects the fee-light, non-custodial nature of the Interface and the allocation of risk between the parties. The cap applies in the aggregate across all claims you make against us and is not multiplied by the number of Swaps you construct, on-ramp purchases you make, or causes of action you assert.
In no event will we be liable for any indirect, incidental, consequential, exemplary, special, or punitive damages, or for lost profits, lost revenues, lost data, lost goodwill, business interruption, diminution in the market value of a digital asset, MEV or slippage losses, losses arising from a Third-Party Protocol exploit or failure, losses arising from the acts or omissions of the Fiat Provider, or the cost of substitute services, even if we have been advised of, or reasonably should have foreseen, the possibility of such damages. This exclusion is independent of, and applies in addition to, the aggregate-cap provision above.
Nothing in this Section limits or excludes any liability that cannot be limited or excluded under applicable law. For users resident in a jurisdiction that does not permit exclusion of implied warranties or limitation of incidental or consequential damages, the exclusions and limitations in this Section apply only to the maximum extent permitted by that jurisdiction's law. Nothing in this Section excludes our liability for fraud, for wilful misconduct, or for death or personal injury caused by our negligence.
The parties acknowledge that this allocation of risk reflects the fact that FortiSwap takes no custody of funds, is not the counterparty to any Swap, is not the seller or processor in the fiat on-ramp, and does not control X1, any Third-Party Protocol, or the Fiat Provider. Losses arising from your own transaction, from your own choice of token or slippage tolerance, from a Third-Party Protocol, from the Fiat Provider, or from an X1-level event are not caused by FortiSwap and are not our liabilities in the first place.
11. Indemnification
You agree to defend, indemnify, and hold harmless FortiBlox Labs LLC, its officers, directors, employees, contractors, service providers, and affiliates (each an "Indemnified Party") from and against any claim, action, demand, investigation, loss, liability, damage, penalty, fine, judgment, settlement, cost, or expense (including reasonable attorneys' fees) that is asserted against, incurred by, or suffered by any Indemnified Party and arises out of or relates to (a) your use of the Interface in breach of these Terms; (b) your violation of any law, regulation, or third-party right, including without limitation sanctions, tax, export-control, or anti-money-laundering laws; (c) any misrepresentation you made in the eligibility or sanctions self-certifications of Section 5, including a false representation regarding your age, jurisdiction of residence, or sanctions status; and (d) any third-party claim that your use of the Interface infringed a third party's rights or caused a third party loss.
12. Governing law and dispute resolution
Governing law. These Terms, and any dispute, claim, or controversy arising out of or relating to these Terms or the Interface, are governed by, and construed in accordance with, the laws of the State of Wyoming, United States of America, without regard to its conflict-of-laws principles.
Arbitration. Any dispute, claim, or controversy arising out of or relating to these Terms or the Interface that is not resolved through good-faith negotiation within thirty (30) days of written notice shall be resolved by binding arbitration administered by the American Arbitration Association ("AAA") under its Commercial Arbitration Rules then in effect, before a single arbitrator. The legal seat of the arbitration is Cheyenne, Wyoming; the proceedings shall be conducted remotely by videoconference unless the arbitrator directs otherwise, and in the English language. Judgment on the award may be entered in any court of competent jurisdiction. Each party shall bring claims only in an individual capacity and not as a plaintiff or class member in any purported class or representative proceeding (a class-action waiver).
Small-claims exception. Notwithstanding the foregoing, either party may bring an individual action in small-claims court where the amount in controversy is within that court's jurisdictional limit.
Injunctive relief. Notwithstanding the foregoing, either party may seek injunctive or equitable relief in any court of competent jurisdiction to prevent unauthorised use, disclosure, or infringement of intellectual-property rights or an ongoing violation of these Terms.
Non-U.S. mandatory consumer protection. If you are a consumer resident in a jurisdiction whose law grants you a non-waivable right to the courts of your habitual residence or to a specified consumer-protection forum, nothing in this Section deprives you of that right.
13. Modifications
We may modify these Terms from time to time to reflect changes in law, changes in the way the Interface operates, changes in the Third-Party Protocols it routes across, changes in the Fiat Providers or the on-ramp/off-ramp features, or evolution of our compliance posture. Where a modification is material, we will post the updated Terms at app.fortiblox.com/terms with a revised effective date and a change-log entry. Your continued use of the Interface after the effective date of a modification constitutes your acceptance of the modified Terms. If you do not agree to a modification, your sole remedy is to stop using the Interface. Because the Interface does not operate accounts, there is no account for you to close.
14. Miscellaneous
Entire agreement. These Terms, together with the Privacy Policy and the AML & Sanctions Statement, constitute the entire agreement between you and us in respect of the Interface and supersede any prior agreement on the same subject matter. Your use of the fiat on-ramp or off-ramp is additionally subject to the applicable Fiat Provider's own terms, your use of the cross-chain bridge is additionally subject to the applicable Bridge Route Provider's own terms, and your use of the optional sign-in and embedded-wallet infrastructure is additionally subject to the Wallet Infrastructure Provider's (Privy's) own terms.
Severability. If any provision of these Terms is held invalid, illegal, or unenforceable, that provision will be severed and the remaining provisions will remain in full force and effect.
No waiver. A failure or delay by either party to exercise a right under these Terms is not a waiver of that right.
Assignment. You may not assign or transfer these Terms without our prior written consent. We may assign these Terms to an affiliate or to a successor by merger, consolidation, or asset purchase.
No agency. Nothing in these Terms creates a partnership, joint venture, agency, or employment relationship between you and us.
Force majeure. Neither party will be liable for a failure or delay in performance caused by circumstances beyond that party's reasonable control, including without limitation government action, regulatory change, sanctions action, network or blockchain-level outage, Third-Party Protocol outage or exploit, Fiat Provider outage, or denial-of-service attack.
Headings. Section headings are for convenience only and do not affect interpretation.
Language. The English text of these Terms is authoritative. Any translation is provided for convenience only.
15. Contact
General enquiries and legal notices may be sent to [email protected]. For security-vulnerability disclosures, please use [email protected].
Change log
| Date | Version | Summary |
|---|---|---|
| 2026-07-24 | 1.0 | Initial published version. Terms of Service for the non-custodial DEX aggregator at app.fortiblox.com. Established the non-custodial, not-a-broker/dealer/exchange/adviser/MSB posture; eligibility and sanctions self-certification; third-party protocol risk (XDEX, Degen, FortiBlox Guard) disclaimers; swap risks; "as is" no-warranty; not-financial-advice; limitation of liability; and prohibited-use terms. |
| 2026-07-30 | 2.0 | FortiSwap rebrand + Stripe Crypto Onramp. Product presented as FortiSwap, operated by FortiBlox Labs LLC. New Section 4 (Fiat on-ramp — Stripe Crypto Onramp): the on-ramp is buy-side only for USDC; Stripe (or its regulated onramp partner) is the seller of the crypto and performs all KYC/AML, payment processing, and fraud/sanctions screening; FortiSwap merely surfaces the widget, does not receive the user's payment or identity data, and does not take custody; the user's fiat/KYC relationship is directly with Stripe under Stripe's terms and privacy policy; no off-ramp / cash-out. Non-custodial and no-MSB framing preserved and extended to cover the on-ramp. Added AML & Sanctions Statement cross-reference. Governing law and venue left as an explicit placeholder for owner and counsel with no jurisdiction or seat named. |
| 2026-08-18 | 4.0 | Off-ramp disclosed + all active Fiat Providers named + governing law finalised. Section 4 rewritten as "Fiat on-ramp and off-ramp (third-party Fiat Providers)": the Interface now surfaces both a buy-side on-ramp and a sell-side off-ramp, provided by Stripe, Coinbase, and Transak (the "On-Ramp Provider" defined term generalised to "Fiat Provider" throughout); in the off-ramp the Fiat Provider buys the crypto and pays fiat directly to the user — FortiSwap takes custody of neither leg, receives no fiat, and performs no KYC (unchanged posture, both directions). Superseded the v2.0 "buy-side only / no off-ramp" statement. Section 12 placeholder resolved by the owner: governing law Wyoming (USA); disputes to AAA arbitration (Commercial Rules), single arbitrator, legal seat Cheyenne, Wyoming, proceedings by videoconference, English language; class-action waiver, small-claims and injunctive-relief carve-outs, and non-U.S. mandatory consumer-protection saving all preserved. |
| 2026-07-31 | 3.0 | Privy sign-in + embedded-wallet infrastructure disclosed. Added a Preamble paragraph and a new "Wallet Infrastructure Provider" (Privy) definition: Privy provides the optional sign-in (email, passkey, or social — Google, X, Discord, GitHub, Telegram) and, for users without a wallet, provisions a user-owned, non-custodial embedded Wallet; Privy is an authentication/signing service only, takes no custody, and FortiSwap never receives or controls the keys. The "Wallet" definition now expressly includes such embedded wallets. Section 6 (third-party infrastructure) and Section 14 (entire agreement) updated to name Privy and confirm the non-custodial posture and that Privy's own terms additionally apply. No renumbering; non-custodial / not-a-custodian/broker framing preserved. |
| 2026-08-22 | 5.0 | MoonPay added as a Fiat Provider; cross-chain bridge and Bridge Route Providers (Rango, MoonPay Trade) disclosed. MoonPay named alongside Stripe, Coinbase, and Transak in the Preamble, the "Fiat Provider" definition, and Section 4, with a MoonPay-specific disclosure: MoonPay is the merchant of record, performs its own KYC/screening, shows its own fees in its widget, delivers USDC on Solana, requires a cash-out deposit within 48 hours (after which the Interface will not build the transfer), refunds a failed cash-out to the user's own Wallet, pays out USD/GBP/EUR only, and applies its own regional exclusions (Canada / U.S. Virgin Islands for USDC on Solana; Louisiana, New York, Texas, U.S. Virgin Islands for cash-outs). New Section 4 bullet states the settlement shape common to every Fiat Provider: USDC on Solana, with the Solana ↔ X1 leg a separate user-signed Warp bridge step. New "Bridge Route Provider" definition and a new Section 6 block disclose the optional cross-chain bridge: routes from Rango and MoonPay Trade (Swaps XYZ Ltd, a MoonPay company) compared side by side; every leg user-signed and simulated; assets in flight held by the provider's bridge/relayer, never FortiSwap; X1 never routed by either provider (Warp + FortiSwap router, 0.2% on-chain fee, own the Solana ↔ X1 leg); FortiSwap's own bridge fee (up to 0.25% Rango / 0.20% MoonPay Trade, taken from output and disclosed before signing); re-quote-before-build and provider-side refunds. Preamble, Section 3, Section 6 infrastructure sentence, and Section 14 updated accordingly. No renumbering; non-custodial / not-an-MSB posture unchanged. |
| 2026-08-22 | 5.1 | FortiSwap swap fee disclosed; sign-in requirement stated precisely. New Section 7 bullet discloses the 0.25% FortiSwap fee on every Swap (taken from output, shown before signing, enforced in-program by the on-chain FortiBlox Router or otherwise included in the signed transaction); the Section 6 bridge bullet corrected from 0.2% to 0.25% to match the deployed Router and the swap card. Preamble, "Wallet Infrastructure Provider" definition, and a new Section 4 bullet state that sign-in through Privy (email one-time passcode, passkey, or Google / X / Discord / GitHub / Telegram; or an external wallet connected directly) is optional for Swaps and the bridge but required to start an on-ramp or off-ramp session, which is keyed to a pseudonymous reference and creates no FortiSwap account. No renumbering. |
Last updated: 2026-08-22 </content> </invoke>
