Safety Center
Learn how Hbarter, HashPack, and Hedera work together—and what to review before every swap.
Hbarter
Hbarter is a peer-to-peer platform for trading NFTs on the Hedera network. You can list NFTs you own, browse listings, and receive offers. An offer can be NFTs or — when that option is turned on — HBAR, and some listings let a buyer offer either one as alternatives for the owner to choose from. A completed swap settles one type only — NFTs or HBAR, never both together. When you accept an offer, both sides sign a Secure Swap in their own wallet, and Hbarter completes the trade once everyone has signed.
Hbarter is not a centralized exchange, broker, escrow provider, wallet, custodian, insurer, or guarantor. It coordinates the listing, offer, and swap workflow — your wallet authorizes the transfer from your account.
Hbarter operates on Hedera Mainnet.
No. Hbarter does not take custody of your NFTs or HBAR into an Hbarter-controlled account, and it does not hold your wallet keys. Your assets stay in your Hedera account unless and until a transfer you authorized is confirmed on the network.
In a swap, the transfer from your account requires your own signature on the exact transaction. Hbarter's own server keys also sign, but only to create and submit the swap and pay the network fee; they never authorize moving your assets on your behalf.
A listing advertises NFTs you own and what you'd like in return. Others can send you offers. When HBAR offers are turned on, an offer can be NFTs or HBAR, and some listings let a buyer propose either one as alternatives for the owner to pick from. The listing owner reviews the offers and accepts one deal, and a completed swap settles one type only — NFTs or HBAR, never both together. Creating a listing or making an offer does not transfer anything on-chain and does not move your assets.
While an offer is being coordinated into a swap, Hbarter applies an application-level lock so the same NFTs are not committed to two swaps at once. This lock is internal to Hbarter — it organizes the workflow and is not an on-chain freeze. Ownership is re-checked against the Hedera network before the swap transaction is built.
A Choice Swap lets a listing show a pool of NFTs, and the other side selects which ones the deal is for. Only the NFTs selected in the accepted deal are included in the swap.
Unselected NFTs stay in the owner's wallet. They are not locked, transferred, or included in the completed trade — only the selected NFTs move, and only if the swap succeeds.
When HBAR offers are turned on, someone can offer HBAR instead of NFTs. An HBAR offer uses the same safe wallet-signing flow as an NFT trade, and if it succeeds it moves the agreed assets. Before signing, check:
- The exact HBAR amount in the offer.
- The connected wallet account.
- The NFT being traded — by token ID and serial number.
- Any fees or warnings your wallet shows.
- The network (this should be Hedera Mainnet today).
HBAR offers are only available when that option is turned on, and not every listing will have them.
Accepting an offer starts a guided, fail-closed sequence rather than an instant transfer:
- Hbarter creates a Secure Swap for the accepted offer.
- You sign your part in your own wallet and the other person signs theirs, within a safe signing window. With a Secure Swap, that window is long enough that you don't need to be online at the same time.
- Before completing, Hbarter re-checks ownership, balance, and token association where they apply.
- The swap completes only after both sides have signed; then Hbarter finalizes it on Hedera in one all-or-nothing transaction that moves the agreed assets, along with the platform fee shown to you before you signed.
- If the swap expires, is cancelled, or fails, nothing moves — every asset stays where it was.
It depends on the stage:
- A listing can be cancelled while it is active, before a swap is being submitted.
- An offer can be cancelled before it is accepted.
- While a swap session is being coordinated, it can be cancelled before the transaction is submitted; cancelling releases Hbarter's application locks.
- Once the swap transaction has been submitted and confirmed on Hedera, it is final — a confirmed transfer cannot be undone.
If a transaction expires before submission, it can no longer be signed or submitted; restarting builds a fresh transaction that needs new signatures.
Self-custodial means you keep control of your own wallet keys. Hbarter coordinates the listing, offer, and swap workflow, but the transfer of your NFTs only happens after you approve and sign the transaction in your own wallet.
Each transfer of your assets out of your account requires your approval. Always review the transaction shown by your wallet before approving it. Hbarter coordinates the workflow, but it does not review the assets on your behalf.
HashPack
Hbarter supports HashPack through its wallet-connection flow so you can connect a Hedera account and approve the transaction required for a swap. The signing request is handled by your wallet; Hbarter receives the resulting signature, not your private key or recovery phrase.
Using HashPack does not imply any exclusive partnership, endorsement, certification, or security guarantee from HashPack.
You are signing the specific Secure Swap Hbarter built for your accepted offer. Before approving in HashPack, review what your wallet shows you:
- The connected account.
- The NFTs being sent from your account — by token ID and serial number.
- The NFTs you expect to receive — by token ID and serial number.
- The HBAR amount, if the offer involves HBAR.
- The other side of the deal, and the network (this should be Hedera Mainnet today).
- Any fees or warnings displayed.
- Whether the request is close to expiring.
Hbarter does not ask for or store your private key or recovery phrase. HashPack states that it is non-custodial and that wallet data is encrypted on the user's device rather than shared with HashPack. You should still protect your device, browser, wallet password, recovery phrase, and private keys.
Never enter your private key or recovery phrase into any website, message, form, or person — including anyone claiming to be Hbarter support. No legitimate request will ever need them.
Nothing is transferred. If you reject the wallet request, no valid signature is recorded for that transaction, so the swap cannot be submitted from it. If the swap session is still active, it stays in its prior safe state and you can try again while it remains valid.
If the underlying transaction has expired, you will need to restart it, which builds a fresh transaction to sign.
Hbarter compares the connected wallet account with the account required for the swap and blocks signing with the wrong account where it can detect this in the browser. The server also validates the account and signature, which is the authoritative check.
Client-side detection alone is not a security guarantee, so always confirm the displayed account is the one you intend to use before approving.
Connecting lets Hbarter receive public account information and request approval for a specific transaction. In the current integration, connecting does not grant Hbarter general spending authority over your wallet.
Each transfer from your account still requires the necessary wallet approval for that exact transaction. You can end the connection using the controls provided by your wallet.
Hedera
Hbarter completes a trade using a single Hedera transfer that contains both directions of the deal — what leaves your account and what comes to you. On Hedera, such a transfer is all-or-nothing: if any part is invalid or a required signature is missing, the whole transaction is rejected and nothing transfers. If an offer involves HBAR, the same all-or-nothing rule covers the whole deal. When an Hbarter platform fee applies, it is settled inside this same transaction, so it is only ever paid when the swap fully succeeds.
This applies to the on-chain transfer itself. Hbarter separately finalizes its own listing, offer, and session records after the network confirms the result, and reconciles if a submission outcome is uncertain.
On Hedera, moving an asset out of an account requires that account's authorization. Because a swap can move assets from both accounts in one transaction, each side must sign to authorize their own part — no one can move assets from only one side. Multiple parties can sign the same transaction before it is submitted, each in their own wallet.
Hbarter's own server keys also sign, but only to create and submit the transaction and pay the network fee — not to authorize anyone's transfer.
The swap is not completed, and no partial transfer occurs — no assets move from either side. A signature is tied to that specific transaction; it cannot be reused on a different transaction.
If the transaction expires or the session is cancelled or restarted, the earlier signature can no longer be used and a fresh transaction must be signed.
Hedera transactions are only valid for a short window. Once that window passes, the old transaction can no longer be validly completed through Hbarter, and the signing and submission controls for it are removed or blocked.
To continue, you restart, which builds a brand-new transaction. Previous signatures are not reused on the new transaction.
A Hedera Mirror Node provides read-only access to network data; it does not take part in consensus. Hbarter reads from the Mirror Node to verify things like current NFT ownership and token status before a swap.
HashScan is a public explorer for viewing Hedera transactions, accounts, and tokens. Hbarter links to HashScan so you can inspect a confirmed transaction. Neither tool replaces reviewing the request in your wallet before you sign.
Once an NFT transfer has been confirmed on Hedera, Hbarter cannot provide an “undo.” A successfully confirmed transfer reaches network finality, so the only way to move an NFT back would be a new, separately authorized transfer by its current owner.
Always review the assets and accounts in your wallet before signing — that review is your main protection, because a confirmed transfer cannot be taken back.
Fees
Keep three separate kinds of cost in mind — they are not the same thing:
- Hedera network transaction fee — paid to the network to process a transaction. For the swap transaction itself, in the current Mainnet flow, Hbarter's operator account pays this.
- Token-association network fee — if your account needs to be associated with a token before it can receive it, you approve that separate transaction in your own wallet and pay its Hedera network fee. Hbarter does not pay it for you.
- Collection royalty — a share of a sale set by an NFT collection's creator and assessed by the network. Where it applies, it reduces what the seller receives.
- Collection fallback fee — a fixed HBAR fee some collections charge the account receiving an NFT when the sender receives no payment in return. It applies to NFT-for-NFT trades.
- Hbarter platform fee — Hbarter currently charges a successful-swap platform fee. Each participant pays 2 HBAR (4 HBAR in total per swap) to the Hbarter treasury, and only if the swap succeeds.
The platform fee is settled inside the same all-or-nothing swap transaction, and the exact amount is shown to you before you sign. If the swap fails, expires, or is cancelled, no platform fee is charged.
Each participant pays their own share of the platform fee in HBAR. That applies to every kind of trade — so if you are buying an NFT with an Approved Payment Token, you still need enough HBAR of your own for your share.
This is the current Hbarter platform fee policy. If it changes, the updated fee will be shown before you sign.
A royalty fee is a custom fee a collection creator can configure on a token. For NFTs, Hedera describes the royalty fee as paid by the account receiving the NFT when it is exchanged for fungible value. These rules live in the token's configuration, not in Hbarter.
There is no single universal royalty percentage, and Hedera notes royalty fees are a convenience feature the network cannot enforce if parties structure transfers to avoid them.
On a sale — where a buyer pays HBAR or an Approved Payment Token for an NFT — a royalty comes out of the seller's side. The buyer pays the agreed amount, the network assesses the collection's royalty, and the seller receives the amount paid less that royalty. Where a royalty applies, the completed receipt shows all three figures: the amount paid, the royalty assessed, and the seller's net proceeds.
Hbarter supports only certain royalty configurations. A collection that can still change its fee schedule after both sides agree is not eligible for a sale, because the royalty could be raised before the trade settles. A collection whose live fee terms no longer match what Hbarter recorded when it was verified is blocked, as is a collection carrying more than one royalty. Where a configuration is not supported or cannot be read, the trade does not proceed.
A royalty is set by the collection and assessed by the Hedera network. Hbarter neither sets it nor receives it.
A fallback fee is a fixed fee attached to an NFT royalty configuration. Hedera can assess it to the new NFT owner when the NFT sender receives no fungible value in the transfer. In a pure NFT-for-NFT swap, no HBAR or fungible token is exchanged as payment for either NFT, so a configured fallback fee can be triggered.
This fee is set by the NFT collection, not by Hbarter — Hbarter never receives it. When it applies, the Hedera network charges it to whoever receives that NFT, separately from the Hbarter platform fee and the Hedera network fee.
Where a fallback fee is supported for an NFT-for-NFT trade, the participant receiving that NFT owes it in HBAR, and the amount is shown before signing. Not every collection has one.
- It applies to NFT-for-NFT trades only. On a sale the seller receives payment, so a fallback fee does not arise.
- Only HBAR-denominated fallback fees are supported. A fallback fee denominated in a token is not supported and blocks the trade.
- Only certain configurations are supported. A collection that can still change its fee schedule, or whose fee terms cannot be read or verified, is blocked.
The fee is set by the collection and assessed by the Hedera network. Hbarter never receives it and never adds a transfer of its own for it.
Hbarter is fail-closed: if a safety check cannot pass, the swap does not proceed. Real reasons a swap can be blocked include:
- A collection has a royalty fallback fee that the swap cannot satisfy.
- Custom-fee data cannot be read or verified at that moment.
- The project is not active in Hbarter's registry.
- Ownership changed and a party no longer holds the NFT.
- A receiver's account is not associated with the token.
- The swap session is in an invalid or stale state.
Fee rules are configured on the Hedera token or NFT collection, not created by Hbarter. Depending on the token configuration and the type of transfer, those rules may also apply when the asset is transferred or traded through other compatible wallets, marketplaces, or tools.
Exact outcomes depend on how each transfer is structured, so the same fee will not necessarily apply identically everywhere.
A network transaction fee is what Hedera charges to process a transaction. It is separate from Hbarter platform fees, collection royalties, fallback fees, and any separate token-association transaction fee when an association is required.
In the current Mainnet implementation, Hbarter's operator account pays the swap transaction's network fee. Network fees can vary, and this operator-paid arrangement may change; a materially different fee arrangement must be disclosed before it applies.
Safety
Before approving any wallet request, take a moment to check:
- You intentionally opened the correct Hbarter website and verified the exact domain instead of trusting a link from a message.
- The connected account is the one you intend to use.
- Every NFT you are sending — by token ID and serial number, not just the image or name. In a Choice Swap, check the specific NFTs selected for the deal.
- Every NFT you expect to receive — also by token ID and serial number.
- The exact HBAR amount, if the offer involves HBAR.
- That the deal matches what you accepted on Hbarter.
- The sender and receiver details, and the network, your wallet shows.
- Any fees or warnings displayed.
- The transaction or session state, including whether it is close to expiring.
Do not sign under time pressure, and reject anything you did not expect.
A few practical habits go a long way:
- Check the exact website domain before connecting your wallet.
- Do not trust unsolicited direct messages, even if they look official.
- Hbarter support will never ask for your wallet secrets.
- Read each wallet request yourself, independently of any chat or instructions telling you to approve it.
- Avoid clicking links shared by unknown accounts; navigate to the site yourself.
Stop using the affected site or device and do not approve any new wallet request. A compromised website, browser extension, device, or wallet can show misleading information or request a transaction you did not intend to sign.
- Reject any pending wallet request you do not fully recognize.
- Disconnect the wallet session using your wallet controls.
- Use a trusted, clean device to review your account and recent transactions on HashScan.
- If wallet secrets may have been exposed, follow your wallet provider's official recovery guidance and consider moving assets to a newly secured account.
- Contact Hbarter at hbarter.app@gmail.com with non-secret details about the incident. Never send a private key, recovery phrase, wallet password, or one-time code.
No website, wallet, browser, or device can be guaranteed to be completely secure. Your final protection is to verify each wallet request and reject anything unexpected.
Yes. Depending on how a Hedera token was created, authorized token keys may allow actions such as pausing transfers, freezing an account for that token, updating certain token settings, or wiping tokens from an account. Not every collection has every key, and the available controls depend on that token's configuration.
Hbarter's Verified Project status does not remove or override token-level controls. Before trading, review the token ID and available token information through Hbarter and the linked Hedera explorer.
A Verified Project is a collection that an Hbarter administrator has added to Hbarter's approved registry. Only NFTs from verified projects can be used in listings and offers. Verification means the token was reviewed and enabled for use on Hbarter according to its current process.
Verification is about eligibility on Hbarter — it is not a guarantee of value, authenticity of every related account, or safety.
Being verified on Hbarter does not mean any of the following:
- It does not guarantee value, price, or liquidity.
- It is not investment advice or an endorsement.
- It does not verify the creator's real-world identity or audit any contract.
- It does not guarantee that external links or community accounts are safe.
- It does not protect against a compromised owner account.
- It is not a substitute for checking the token ID and serial number of each NFT.
If a request, listing, or message seems off:
- Stop, and do not approve the wallet request.
- Reject the request in your wallet.
- Do not proceed with the swap.
- Re-check the website domain and the connected account.
- Only continue once you can confirm the details yourself.
Never share your private key, recovery phrase, or password with anyone, including anyone claiming they can help recover or fix your account.
Where payment-token offers are available, a buyer can pay with an Approved Payment Token instead of NFTs or HBAR. Before you sign, check the token itself — not just how it is labelled.
- Check the Hedera token ID. That is what identifies a token. A name, symbol, logo, or social account can be copied by anyone.
- Check the amount together with the token's decimals. The same digits mean very different values at different decimal places.
- Check who is sending and who is receiving, and that the receiving account is the one you intend to use.
- Check whether your account is already associated with the token. If it is not, you will need to approve an association first.
- Remember that the token's issuer may be able to freeze accounts, require KYC, or pause transfers. Those controls stay with the issuer.
A token being approved on Hbarter means it is eligible for use here. It is not an endorsement, a valuation, or a promise that it will keep its value, stay liquid, or remain available.
A Hedera account cannot receive a token it is not associated with. If you are due to receive an NFT from a collection your account has never held, or an Approved Payment Token your account has never held, you may need to associate with it first.
- Association is a separate transaction from the swap. It is never bundled into it.
- You review and approve it in your own wallet — it changes your account, so only you can authorise it.
- You pay the Hedera network fee for that association transaction. Hbarter does not pay it for you.
- It applies to the account that will receive the token. On a sale, that can be the seller receiving the payment token, not only the buyer receiving an NFT.
Associating a token does not transfer anything and does not commit you to a trade. It only allows your account to hold that token.
Before a trade can settle, each side has to be able to complete their part of it. Hbarter checks that when you open the swap, and tells you what is outstanding on your side.
Things you can resolve yourself:
- A token association you still need to approve.
- Not enough HBAR for your share of the platform fee.
- Not enough of the payment token your offer proposed.
When the outstanding item is yours alone, it blocks you and not the other participant. They may be able to sign first and wait for you. Resolving it takes time and may involve a Hedera network fee, and the trade can still expire or be cancelled while you deal with it — nothing is reserved for you in the meantime.
Things that end the attempt:
- An NFT in the trade is no longer held by the account that offered it.
- An account is frozen for the token, or a KYC requirement is not met.
- A collection's fee configuration is not supported, cannot be read, or no longer matches what Hbarter verified.
These cannot be worked around inside Hbarter. The attempt ends and every asset stays where it was.
You only ever see what is outstanding on your own side. Hbarter does not show your balances, or what you still need to do, to the other participant or to the public.
The figures Hbarter shows before you sign — amounts, fees, and any royalty or fallback fee — are review information, based on what could be read at that moment. They help you decide whether to sign. They are not the result.
Once a trade settles, the confirmed Hedera transaction is what actually happened, and the Hbarter receipt reports it. Where a collection royalty applied, the receipt shows the amount paid, the royalty assessed, and the seller's net proceeds.
Just after a successful trade, the network's record of assessed fees can take a short time to become readable. Until then a fee figure may be shown as still being confirmed rather than as a final number. That is the record catching up, not the trade changing.
Keep the transaction ID from your receipt. It is public, safe to share, and lets anyone verify the trade independently on a Hedera explorer.
Sources and further reading
Official documentation, provided for reference. Linking here does not imply these sources endorse Hbarter.
HashPack
Hedera Token Service custom fees
Hedera token controls