Safety Center

Hbarter is a peer-to-peer platform for trading NFTs on the Hedera network. You can list NFTs you own, browse listings, and receive offers. An offer can be NFTs or — when that option is turned on — HBAR, and some listings let a buyer offer either one as alternatives for the owner to choose from. A completed swap settles one type only — NFTs or HBAR, never both together. When you accept an offer, both sides sign a Secure Swap in their own wallet, and Hbarter completes the trade once everyone has signed.

Hbarter is not a centralized exchange, broker, escrow provider, wallet, custodian, insurer, or guarantor. It coordinates the listing, offer, and swap workflow — your wallet authorizes the transfer from your account.

Hbarter operates on Hedera Mainnet.

No. Hbarter does not take custody of your NFTs or HBAR into an Hbarter-controlled account, and it does not hold your wallet keys. Your assets stay in your Hedera account unless and until a transfer you authorized is confirmed on the network.

In a swap, the transfer from your account requires your own signature on the exact transaction. Hbarter's own server keys also sign, but only to create and submit the swap and pay the network fee; they never authorize moving your assets on your behalf.

A listing advertises NFTs you own and what you'd like in return. Others can send you offers. When HBAR offers are turned on, an offer can be NFTs or HBAR, and some listings let a buyer propose either one as alternatives for the owner to pick from. The listing owner reviews the offers and accepts one deal, and a completed swap settles one type only — NFTs or HBAR, never both together. Creating a listing or making an offer does not transfer anything on-chain and does not move your assets.

While an offer is being coordinated into a swap, Hbarter applies an application-level lock so the same NFTs are not committed to two swaps at once. This lock is internal to Hbarter — it organizes the workflow and is not an on-chain freeze. Ownership is re-checked against the Hedera network before the swap transaction is built.

A Choice Swap lets a listing show a pool of NFTs, and the other side selects which ones the deal is for. Only the NFTs selected in the accepted deal are included in the swap.

Unselected NFTs stay in the owner's wallet. They are not locked, transferred, or included in the completed trade — only the selected NFTs move, and only if the swap succeeds.

When HBAR offers are turned on, someone can offer HBAR instead of NFTs. An HBAR offer uses the same safe wallet-signing flow as an NFT trade, and if it succeeds it moves the agreed assets. Before signing, check:

• The exact HBAR amount in the offer.
• The connected wallet account.
• The NFT being traded — by token ID and serial number.
• Any fees or warnings your wallet shows.
• The network (this should be Hedera Mainnet today).

HBAR offers are only available when that option is turned on, and not every listing will have them.

Accepting an offer starts a guided, fail-closed sequence rather than an instant transfer:

• Hbarter creates a Secure Swap for the accepted offer.
• You sign your part in your own wallet and the other person signs theirs, within a safe signing window. With a Secure Swap, that window is long enough that you don't need to be online at the same time.
• Before completing, Hbarter re-checks ownership, balance, and token association where they apply.
• The swap completes only after both sides have signed; then Hbarter finalizes it on Hedera in one all-or-nothing transaction that moves the agreed assets, along with the platform fee shown to you before you signed.
• If the swap expires, is cancelled, or fails, nothing moves — every asset stays where it was.

It depends on the stage:

• A listing can be cancelled while it is active, before a swap is being submitted.
• An offer can be cancelled before it is accepted.
• While a swap session is being coordinated, it can be cancelled before the transaction is submitted; cancelling releases Hbarter's application locks.
• Once the swap transaction has been submitted and confirmed on Hedera, it is final — a confirmed transfer cannot be undone.

If a transaction expires before submission, it can no longer be signed or submitted; restarting builds a fresh transaction that needs new signatures.

Self-custodial means you keep control of your own wallet keys. Hbarter coordinates the listing, offer, and swap workflow, but the transfer of your NFTs only happens after you approve and sign the transaction in your own wallet.

Each transfer of your assets out of your account requires your approval. Always review the transaction shown by your wallet before approving it. Hbarter coordinates the workflow, but it does not review the assets on your behalf.

Hbarter supports HashPack through its wallet-connection flow so you can connect a Hedera account and approve the transaction required for a swap. The signing request is handled by your wallet; Hbarter receives the resulting signature, not your private key or recovery phrase.

Using HashPack does not imply any exclusive partnership, endorsement, certification, or security guarantee from HashPack.

You are signing the specific Secure Swap Hbarter built for your accepted offer. Before approving in HashPack, review what your wallet shows you:

• The connected account.
• The NFTs being sent from your account — by token ID and serial number.
• The NFTs you expect to receive — by token ID and serial number.
• The HBAR amount, if the offer involves HBAR.
• The other side of the deal, and the network (this should be Hedera Mainnet today).
• Any fees or warnings displayed.
• Whether the request is close to expiring.

Hbarter does not ask for or store your private key or recovery phrase. HashPack states that it is non-custodial and that wallet data is encrypted on the user's device rather than shared with HashPack. You should still protect your device, browser, wallet password, recovery phrase, and private keys.

Never enter your private key or recovery phrase into any website, message, form, or person — including anyone claiming to be Hbarter support. No legitimate request will ever need them.

Nothing is transferred. If you reject the wallet request, no valid signature is recorded for that transaction, so the swap cannot be submitted from it. If the swap session is still active, it stays in its prior safe state and you can try again while it remains valid.

If the underlying transaction has expired, you will need to restart it, which builds a fresh transaction to sign.

Hbarter compares the connected wallet account with the account required for the swap and blocks signing with the wrong account where it can detect this in the browser. The server also validates the account and signature, which is the authoritative check.

Client-side detection alone is not a security guarantee, so always confirm the displayed account is the one you intend to use before approving.

Connecting lets Hbarter receive public account information and request approval for a specific transaction. In the current integration, connecting does not grant Hbarter general spending authority over your wallet.

Each transfer from your account still requires the necessary wallet approval for that exact transaction. You can end the connection using the controls provided by your wallet.

Hbarter completes a trade using a single Hedera transfer that contains both directions of the deal — what leaves your account and what comes to you. On Hedera, such a transfer is all-or-nothing: if any part is invalid or a required signature is missing, the whole transaction is rejected and nothing transfers. If an offer involves HBAR, the same all-or-nothing rule covers the whole deal. When an Hbarter platform fee applies, it is settled inside this same transaction, so it is only ever paid when the swap fully succeeds.

This applies to the on-chain transfer itself. Hbarter separately finalizes its own listing, offer, and session records after the network confirms the result, and reconciles if a submission outcome is uncertain.

On Hedera, moving an asset out of an account requires that account's authorization. Because a swap can move assets from both accounts in one transaction, each side must sign to authorize their own part — no one can move assets from only one side. Multiple parties can sign the same transaction before it is submitted, each in their own wallet.

Hbarter's own server keys also sign, but only to create and submit the transaction and pay the network fee — not to authorize anyone's transfer.

The swap is not completed, and no partial transfer occurs — no assets move from either side. A signature is tied to that specific transaction; it cannot be reused on a different transaction.

If the transaction expires or the session is cancelled or restarted, the earlier signature can no longer be used and a fresh transaction must be signed.

Hedera transactions are only valid for a short window. Once that window passes, the old transaction can no longer be validly completed through Hbarter, and the signing and submission controls for it are removed or blocked.

To continue, you restart, which builds a brand-new transaction. Previous signatures are not reused on the new transaction.

A Hedera Mirror Node provides read-only access to network data; it does not take part in consensus. Hbarter reads from the Mirror Node to verify things like current NFT ownership and token status before a swap.

HashScan is a public explorer for viewing Hedera transactions, accounts, and tokens. Hbarter links to HashScan so you can inspect a confirmed transaction. Neither tool replaces reviewing the request in your wallet before you sign.

Once an NFT transfer has been confirmed on Hedera, Hbarter cannot provide an “undo.” A successfully confirmed transfer reaches network finality, so the only way to move an NFT back would be a new, separately authorized transfer by its current owner.

Always review the assets and accounts in your wallet before signing — that review is your main protection, because a confirmed transfer cannot be taken back.

Keep three separate kinds of cost in mind — they are not the same thing:

• Hedera network transaction fee — paid to the network to process the transaction. In the current Mainnet flow, Hbarter's operator account pays this.
• Collection custom fees (such as royalty or fallback fees) — defined on the token by its creator, not by Hbarter.
• Hbarter platform fee — Hbarter currently charges a successful-swap platform fee. Each participant pays 2 HBAR (4 HBAR in total per swap) to the Hbarter treasury, and only if the atomic swap succeeds.

The platform fee is settled inside the same all-or-nothing swap transaction, and the exact amount is shown to you before you sign. If the swap fails, expires, or is cancelled, no platform fee is charged.

This is the current Hbarter platform fee policy. If it changes, the updated fee will be shown before you sign.

A royalty fee is a custom fee a collection creator can configure on a token. For NFTs, Hedera describes the royalty fee as paid by the account receiving the NFT when it is exchanged for fungible value. These rules live in the token's configuration, not in Hbarter.

There is no single universal royalty percentage, and Hedera notes royalty fees are a convenience feature the network cannot enforce if parties structure transfers to avoid them.

A fallback fee is a fixed fee attached to an NFT royalty configuration. Hedera can assess it to the new NFT owner when the NFT sender receives no fungible value in the transfer. In a pure NFT-for-NFT swap, no HBAR or fungible token is exchanged as payment for either NFT, so a configured fallback fee can be triggered.

Hbarter blocks the swap before construction when a participating collection has a royalty fallback fee, because the current swap transaction does not provide the additional fallback payment. Not every collection has a fallback fee.

Hbarter is fail-closed: if a safety check cannot pass, the swap does not proceed. Real reasons a swap can be blocked include:

• A collection has a royalty fallback fee that the swap cannot satisfy.
• Custom-fee data cannot be read or verified at that moment.
• The project is not active in Hbarter's registry.
• Ownership changed and a party no longer holds the NFT.
• A receiver's account is not associated with the token.
• The swap session is in an invalid or stale state.

Fee rules are configured on the Hedera token or NFT collection, not created by Hbarter. Depending on the token configuration and the type of transfer, those rules may also apply when the asset is transferred or traded through other compatible wallets, marketplaces, or tools.

Exact outcomes depend on how each transfer is structured, so the same fee will not necessarily apply identically everywhere.

A network transaction fee is what Hedera charges to process a transaction. It is separate from Hbarter platform fees, collection royalties, fallback fees, and any separate token-association transaction fee when an association is required.

In the current Mainnet implementation, Hbarter's operator account pays the swap transaction's network fee. Network fees can vary, and this operator-paid arrangement may change; a materially different fee arrangement must be disclosed before it applies.

Before approving any wallet request, take a moment to check:

• You intentionally opened the correct Hbarter website and verified the exact domain instead of trusting a link from a message.
• The connected account is the one you intend to use.
• Every NFT you are sending — by token ID and serial number, not just the image or name. In a Choice Swap, check the specific NFTs selected for the deal.
• Every NFT you expect to receive — also by token ID and serial number.
• The exact HBAR amount, if the offer involves HBAR.
• That the deal matches what you accepted on Hbarter.
• The sender and receiver details, and the network, your wallet shows.
• Any fees or warnings displayed.
• The transaction or session state, including whether it is close to expiring.

Do not sign under time pressure, and reject anything you did not expect.

Never share any of these with Hbarter or anyone else:

• Your private key.
• Your seed phrase or recovery phrase.
• Your wallet password.
• One-time security or authentication codes.
• Remote-control access to your device.

Your Hedera account ID and your on-chain activity are not secret — they can be viewed publicly on the ledger. The items above are what must stay private.

A few practical habits go a long way:

• Check the exact website domain before connecting your wallet.
• Do not trust unsolicited direct messages, even if they look official.
• Hbarter support will never ask for your wallet secrets.
• Read each wallet request yourself, independently of any chat or instructions telling you to approve it.
• Avoid clicking links shared by unknown accounts; navigate to the site yourself.

Stop using the affected site or device and do not approve any new wallet request. A compromised website, browser extension, device, or wallet can show misleading information or request a transaction you did not intend to sign.

• Reject any pending wallet request you do not fully recognize.
• Disconnect the wallet session using your wallet controls.
• Use a trusted, clean device to review your account and recent transactions on HashScan.
• If wallet secrets may have been exposed, follow your wallet provider's official recovery guidance and consider moving assets to a newly secured account.
• Contact Hbarter at hbarter.app@gmail.com with non-secret details about the incident. Never send a private key, recovery phrase, wallet password, or one-time code.

No website, wallet, browser, or device can be guaranteed to be completely secure. Your final protection is to verify each wallet request and reject anything unexpected.

Yes. Depending on how a Hedera token was created, authorized token keys may allow actions such as pausing transfers, freezing an account for that token, updating certain token settings, or wiping tokens from an account. Not every collection has every key, and the available controls depend on that token's configuration.

Hbarter's Verified Project status does not remove or override token-level controls. Before trading, review the token ID and available token information through Hbarter and the linked Hedera explorer.

A Verified Project is a collection that an Hbarter administrator has added to Hbarter's approved registry. Only NFTs from verified projects can be used in listings and offers. Verification means the token was reviewed and enabled for use on Hbarter according to its current process.

Verification is about eligibility on Hbarter — it is not a guarantee of value, authenticity of every related account, or safety.

Being verified on Hbarter does not mean any of the following:

• It does not guarantee value, price, or liquidity.
• It is not investment advice or an endorsement.
• It does not verify the creator's real-world identity or audit any contract.
• It does not guarantee that external links or community accounts are safe.
• It does not protect against a compromised owner account.
• It is not a substitute for checking the token ID and serial number of each NFT.

If a request, listing, or message seems off:

• Stop, and do not approve the wallet request.
• Reject the request in your wallet.
• Do not proceed with the swap.
• Re-check the website domain and the connected account.
• Only continue once you can confirm the details yourself.

Never share your private key, recovery phrase, or password with anyone, including anyone claiming they can help recover or fix your account.