Risks & limitations

Read this before you transact. Murk is powerful, but no software is risk-free and privacy has limits.

Software risk

• Smart-contract & circuit risk. Murk is independently audited and backed by a large adversarial test suite (see Trusted setup & audits), but no audit eliminates all risk — contracts and circuits can still contain undiscovered flaws, and non-custodial code has no undo button.

Financial risk

• Volatility. Digital assets can lose all value.
• Swaps. Subject to slippage, MEV, routing risk, and DEX liquidity. You're guaranteed only your minimum-out.
• Fees. Every action costs SOL; a heavily fragmented balance costs more (consolidation fees).

Privacy limitations

• Deposits and withdrawals are public. They're the boundary between private and public — correlating them (same amounts, quick timing, linked addresses) can deanonymize you.
• Probabilistic, not absolute. Your privacy depends on the anonymity set and your operational security. A small/new pool offers weaker privacy.
• Metadata. A relayer or network observer sees timing and coarse action metadata (and your IP without a VPN/private RPC).
• Off-chain reuse. Reusing addresses or leaking note details elsewhere undermines on-chain privacy.

Custody & recovery

• Your keys, your responsibility. Losing your wallet means losing access to your Murk funds — there is no recovery service.
• The admin pause can halt new activity (it can't take your funds). The program's upgrade authority is held by a Squads multisig.
• Archival dependency. Full from-scratch recovery needs an archival RPC with historical events.

Legal

• You are responsible for complying with the laws of your jurisdiction, including tax and sanctions rules. Do not use Murk where prohibited, or if you are a sanctioned person. See the Terms of Service.

The short version

Murk gives you real, cryptographically-enforced privacy on Solana — but privacy is a discipline, not a switch. Learn the tool and follow good hygiene.