CryptoGuardzIndependent crypto register
Read the binding document, check it against the issuing register, publish the disagreement18+ · Gambling carries risk of loss

Choose a language

The register is published in these languages. If this page has no version in one of them, you go to that language’s home page.

Photo: Jason Dent / UnsplashRegister entry · xverse.app

Is Xverse safe? What its own terms say

Hacked, support scams, fees: is Xverse safe? The incident and support page.

In short, from the documents

Is Xverse safe to use for casino deposits?

Xverse's terms disclaim custody and access to your keys, so by their account only you can sign a deposit. Its terms name no gambling rule (xverse.app, read 2026-10-07), which is an absence, not a permission. Contracting party: Secret Key Labs Limited, place of incorporation not stated. 9 points are not verified. No primary-source incident is recorded. Chains named: Bitcoin.

Documents last checked Reviewed by CryptoGuardz Register Desk, editorial desk

Xverse: keys held by you. Self-custodial, by the terms.Who holds the keysYouDeviceSharedProviderMarked: YouSelf-custodial, by the terms.Xverse: who can block an address: none disclosed in the documents read.Who can block an addressNobodyProviderThird partyMarked: NobodyNone disclosed in the documents read.Xverse: gambling clause: not disclosed, read 2026-10-07. The terms name no gambling rule, which is an absence, not a permission.Gambling clauseBannedSilentAllowedMarked: Silent, not disclosedThe terms name no gambling rule, which is anabsence, not a permission. Read 2026-10-07.Xverse: 0 primary-source incidents recorded.Incidents on record0incidentsOnly incidents a primary source records.
Xverse: keys held by you; who can block an address: none disclosed in the documents read; gambling clause: not disclosed; 0 primary-source incidents recorded. From its own terms, documents last checked . Not a rating. Drawn by the CryptoGuardz Register Desk from the record.

Disclosure: CryptoGuardz has no commercial relationship with Xverse, earns nothing if you install it, and has not contacted the company or given it notice of this entry. Every statement below is either a verbatim quote from a document Xverse publishes or a statement about a public record, and both carry the date they were read. Corrections go to the corrections page.

4 clauses quoted verbatim · 4 sub-service clauses · 9 recorded gaps · 0 primary-source incidents · no numeric score

1. What this means for you

Consequences first, in the conditional, each one produced by a clause in a document Xverse publishes itself. Every line links to that clause, quoted in full and dated. None of them is a claim that Xverse can move your coins on chain: the terms disclaim that power and this register takes them at their word on it.

What can happen to you, and what in the document allows it

4 conditions, each one read out of a document Xverse publishes itself, out of the register of the authority that licensed it, or out of the limits of what this register has measured. Each link lands on the evidence.

2. What this entry records, and what it does not

This register publishes no number for a wallet. The payout score on the casino register has five defined components and a published arithmetic; no equivalent instrument exists here. What follows is a field-by-field account of what was read, where and when.

Binding termsRead in full4 clauses captured verbatim across 4 topics, retrieved 2026-10-07
Contracting entitySecret Key Labs LimitedNo jurisdiction of incorporation stated in the binding document
Custody position in the termsDisclaims custody and disclaims access to key materialAsserted from the clauses. The agreement states the Company does not have access to the wallet, and the privacy policy states it does not have access to or keep keys or seed phrases.
Sub-services4 clauses recordedSwap · Staking · Fiat on-ramp. A count of recorded clauses, not of distinct companies.
Code auditNot measuredNo security audit, source review or reproducible-build check has been carried out or read by this register. A wallet's safety is largely decided there, and nothing on this page speaks to it.
First-party testNot measuredNo transaction has been signed, no swap executed and no recovery flow run through this product by this register.
Default node providerNot disclosedNo RPC or node provider is named in any primary document retrieved.

3. What we could not verify

Every entry carries this section. The gaps are published because a reader deserves the limits of the check as well as its results.

  • Whether the issuers of the stablecoins held in Xverse Cash (USDC on Starknet, USDB on Spark, USDCx on Stacks) can freeze balances, and whether Xverse discloses this anywhere. Not disclosed in the documents read; the homepage says nobody can freeze funds.
  • The terms governing Xverse Cash and the Due direct-deposit service, including any KYC. Not found in the agreement or privacy policy.
  • The third-party Token Swap provider. Not named in the agreement.
  • The Access Fee rate on stacking rewards. The agreement leaves it to the Company's discretion.
  • Sanctions or geographic restrictions. None found in the agreement.
  • The agreement's and privacy policy's last-updated dates. Neither page showed one.
  • The full limitation of liability clause. Captured in two fragments because of a quote-length limit in retrieval.
  • Secret Key Labs Limited's place of incorporation. Not stated.
  • Documented incidents. No primary-source incident was located. Absence here is absence of a search result, not evidence of no incident.

4. Who you are contracting with

The binding document names a company. It does not name a jurisdiction of incorporation, which is a different and smaller gap: a reader can find the counterparty but not the register it sits in.

Named counterpartySecret Key Labs Limitedsource · retrieved 2026-10-07
JurisdictionHong Kong governing law and exclusive Hong Kong venue. No place of incorporation or address is stated in the agreement.
Relationships disclosedNone in the agreement or privacy policy. An Xverse blog post names Due as the provider of direct-deposit bank details for Xverse Cash, and Spark as the source of yield on USDB.
Governing lawRetrieved 2026-10-07
A choice of law is not a statement of incorporation
This Agreement is governed by and construed in accordance with the internal laws of Hong Kong without giving effect to any choice or conflict of law provision or rule.
xverse.app

5. The custody claim, and what the binding document says

The homepage claim that nobody can freeze funds is recorded as Xverse's marketing, not as a fact. The same product holds stablecoins (USDC on Starknet, USDB on Spark, USDCx on Stacks) inside Xverse Cash, and no Xverse document read discloses whether those issuers can freeze balances. The keys-never-leave-the-device line appears in the context of connecting a Ledger or Keystone.

Xverse: the claim and the clause
What it says where you read it
Nobody can freeze, seize, or access your funds. Not even us.
xverse.app · 2026-10-07
What the binding document says
Only you have access to the wallet, and the Company does not have access to the wallet. The Company is not responsible and is not able to recover any lost wallet keys.
xverse.app · 2026-10-07
A second marketing statement on the same pointRetrieved 2026-10-07
Your keys never leave the device.
xverse.app
A second clause on the same pointRetrieved 2026-10-07
we DO NOT have access and/or keep your cryptographic key, private key, and/or seed phrase(s).
xverse.app

Provider holds key material: no. Asserted from the clauses. The agreement states the Company does not have access to the wallet, and the privacy policy states it does not have access to or keep keys or seed phrases.

6. Recovery, and where the terms and the marketing differ

Cloud or hosted backup offeredyes
What is storedThe seed phrase, encrypted with a key derived by Argon2 from a strong password the user sets.
WhereThe user's iCloud (Apple) or Google Drive (Android).
Changes the custody positionnoRecorded as false because the help centre states the encryption key is derived from the user's password alone and neither Apple, Google nor Xverse can access the seed phrase.
Recovery, in the provider's own wordsRetrieved 2026-10-07
Neither Apple, Google, nor Xverse can access your seed phrase.
support.xverse.app
What the binding document says about recoveryRetrieved 2026-10-07
Only you have access to the wallet, and the Company does not have access to the wallet. The Company is not responsible and is not able to recover any lost wallet keys.
xverse.app
Where the binding document and the published product disagree

The agreement does not mention cloud backup; the help centre describes an encrypted iCloud and Google Drive backup. No contradiction about key access. The larger gap is elsewhere: the homepage says nobody can freeze funds, and the agreement says nothing about stablecoin issuers, Xverse Cash or the Due direct-deposit service at all.

7. The app is not the wallet

4 clauses, each one a place where the product routes a user to a counterparty the user never contracts with by name, under terms the user never opens. The count is of recorded clauses and not of distinct companies: two entries can name the same counterparty and each still be a separate thing the terms permit.

Swap · 1 of 4Retrieved 2026-10-07
An unnamed third-party provider, per the agreement's Token Swap Feature clause
Our Application contains a feature which allows you to swap a desired amount of cryptocurrency
xverse.app
Staking · 2 of 4Retrieved 2026-10-07
Stacking delegation, with an Access Fee taken by the Company from rewards at a rate the Company may change at its discretion
You agree to pay such Access Fee from your stacking rewards; and understand and agree such
xverse.app
Fiat on-ramp · 3 of 4Retrieved 2026-10-07
Due, named as the provider of direct-deposit bank details for Xverse Cash
ACH/Fedwire or SWIFT details, powered by Due
xverse.app
Staking · 4 of 4Retrieved 2026-10-07
Spark, named as the source of yield on USDB in Xverse Cash
3.5% APY on USDB through Spark.
xverse.app

8. Withdrawing your access to the interface

Your keys are yours. The software you reach them through is licensed, and the licence can be withdrawn. 1 clauses are recorded on this point.

Interface termination · clause 1Retrieved 2026-10-07
You may terminate this Agreement by deleting the Application and all copies thereof from your Device. Company may terminate this Agreement at any time without notice.
xverse.app

9. Who can block an address

Xverse claims no power to block an address in the documents read. No clause in the documents read discloses that another party in the stack can freeze or blacklist an address either. That is an absence of disclosure, not a guarantee that no such party exists.

10. What the terms say about gambling

Position recorded: not disclosed. No clause naming gambling, betting, casinos or wagering was found in the documents read. That is an absence in the documents, not a permission, and the general prohibition on unlawful use still applies.

The Xverse End User License Agreement was searched for gambling, betting, casino and wagering. None appears. Searched xverse.app, retrieved 2026-10-07.

The card side of the same question is on the card register, and the casino side on KYC on withdrawal.

11. Chains it names

Of the eight chains this register filters on, Xverse names 1: Bitcoin. Not named on the pages read: Ethereum, Solana, TON, Tron, BNB Chain, Base, Polygon. Bitcoin is the only network in the register's filter that Xverse names as supported. Starknet, Stacks and Spark are also named and sit outside the filter. An Xverse blog post of 24 July 2026 describes converting into Xverse Cash from Ethereum or Solana; that is a conversion route, not wallet support for those chains, so neither is recorded.

Chains · evidence 1Retrieved 2026-10-07
Xverse connects you to Starknet, Stacks, and Spark. The full security of Bitcoin L1 with the speed
xverse.app

12. Liability, amendment, arbitration and where you can use it

The aggregate liability clause caps every claim you could bring at a stated cap, whatever the balance involved. It is the clause that decides what the rest of the document is worth.

Liability · clause 1Retrieved 2026-10-07
DIRECT DAMAGES IN AMOUNTS THAT IN THE AGGREGATE EXCEED THE AMOUNT ACTUALLY PAID BY YOU FOR THE APPLICATION.
xverse.app

Closing words of the limitation clause, which opens "TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE COMPANY IS EXCLUDED FROM LIABILITY FOR ANY". Direct damages are capped at the price paid for the Application; for a free app that is zero. The full clause was not captured in one quote.

Unilateral amendment · clause 1Retrieved 2026-10-07
We may need to change these terms to reflect changes in law or best practice or to deal with additional features which we introduce.
xverse.app
Arbitration · clause 1Retrieved 2026-10-07
A courts clause, not an arbitration clause. No arbitration agreement was found.
Any legal suit, action, or proceeding arising out of or related to this Agreement or the Application shall be instituted exclusively in Hong Kong.
xverse.app

A courts clause, not an arbitration clause. No arbitration agreement was found.

13. Public record

No incident is recorded for Xverse. That is not a clean bill of health. No primary source, meaning a company disclosure, a public vulnerability register entry or a regulator action, was located within this collection. Absence of a record here is the absence of a search result.

14. Who should avoid Xverse

Anyone who needs a named party to be answerable for a loss. The liability position is a stated cap, and the terms disclaim responsibility for every third-party service the app routes you into.

Arculus getarculus.com2 sub-service clauses recorded. Names Bitcoin, Ethereum, Solana, TON, Tron, BNB Chain, Base, Polygon.Atomic Wallet atomicwallet.io3 sub-service clauses recorded. Names Bitcoin, Ethereum, Solana, BNB Chain, Tron.Backpack backpack.app2 sub-service clauses recorded. Names Solana, Ethereum, Base, BNB Chain, Polygon.Bitget Wallet web3.bitget.com2 sub-service clauses recorded. Names Bitcoin, Ethereum, BNB Chain, Polygon, Tron, Solana.Blockstream Jade (Blockstream app) blockstream.com2 sub-service clauses recorded. Names Bitcoin.Coinbase Wallet wallet.coinbase.com2 sub-service clauses recorded. Names Bitcoin, Ethereum, Solana, Base.COLDCARD coldcard.com0 sub-service clauses recorded. Names Bitcoin.D'CENT dcentwallet.com3 sub-service clauses recorded. Names Bitcoin, Ethereum, Solana, Tron.Exodus exodus.com4 sub-service clauses recorded. Names Bitcoin, Ethereum, BNB Chain, Solana.Keplr keplr.app3 sub-service clauses recorded. Names Ethereum, Bitcoin.Keystone keyst.one2 sub-service clauses recorded. Names Bitcoin, Ethereum, Solana, Polygon, Base, Tron.Ledger Wallet (Ledger Live) ledger.com3 sub-service clauses recorded. Names Bitcoin, Ethereum, BNB Chain, Solana, Tron.OKX Wallet web3.okx.com1 sub-service clauses recorded. Names Bitcoin, Ethereum, Solana, BNB Chain, Polygon, Tron, TON.Rabby Wallet rabby.io2 sub-service clauses recorded. Names Ethereum, BNB Chain, Base, Polygon.Robinhood Wallet robinhood.com4 sub-service clauses recorded. Names Ethereum, Bitcoin, Solana, BNB Chain, Base, Polygon.SafePal safepal.com4 sub-service clauses recorded. Names Bitcoin, Ethereum, BNB Chain, Tron, Polygon, Solana.Solflare solflare.com2 sub-service clauses recorded. Names Solana.Sparrow Wallet sparrowwallet.com1 sub-service clauses recorded. Names Bitcoin.Tangem tangem.com5 sub-service clauses recorded. Names Bitcoin, Ethereum, Solana, TON, Tron, BNB Chain, Base, Polygon.Tonkeeper tonkeeper.com3 sub-service clauses recorded. Names TON, Tron, Ethereum, Bitcoin, Base, BNB Chain.Trezor (Trezor Suite) trezor.io3 sub-service clauses recorded. Names Bitcoin, Ethereum, Solana, Tron.Uniswap Wallet wallet.uniswap.org5 sub-service clauses recorded. Names Ethereum, Base, BNB Chain, Polygon, Solana.Wallet in Telegram wallet.tg2 sub-service clauses recorded. Names TON, Tron, Ethereum, Solana.Wasabi Wallet wasabiwallet.io2 sub-service clauses recorded. Names Bitcoin.Zengo zengo.com1 sub-service clauses recorded. Names Bitcoin, Ethereum, BNB Chain, Solana, Tron, TON, Base, Polygon.Zerion zerion.io4 sub-service clauses recorded. Names Ethereum, Solana, Tron, BNB Chain, Base, Polygon.Trust Wallet trustwallet.com9 sub-service clauses recorded. Names Bitcoin, Ethereum, Solana, BNB Chain, Tron, TON.Phantom phantom.com7 sub-service clauses recorded. Names Solana, Ethereum, Bitcoin, Base, Polygon.MetaMask metamask.io8 sub-service clauses recorded. Names Ethereum, Bitcoin, Base, Solana, Tron, Polygon, BNB Chain.

Or read the whole wallet register, the card register, the same method applied to exchanges and to crypto casinos, the clause library at clause watch, or how this register works.

15. Sources

Compiled by the CryptoGuardz register team. First published 2026-10-07, last reviewed 2026-10-07. Every quotation on this page is verbatim from the document named beside it. Research and drafting are AI-assisted and reviewed by a named editor before publication. Corrections: corrections.