1STOPCRYPTO RISK DISCLOSURE

Version 1.0

Effective Date: July 5, 2026

Last Updated: July 5, 2026

IMPORTANT NOTICE

This Risk Disclosure ("Risk Disclosure") describes significant risks associated with using the 1StopCrypto platform and engaging in transactions involving Digital Assets, blockchain technology, decentralized finance ("DeFi"), smart contracts, and related technologies.

This Risk Disclosure forms part of the 1StopCrypto Terms of Service.

By using the Platform, you acknowledge that you have carefully reviewed this Risk Disclosure, understand the risks described herein, and voluntarily assume those risks.

This Risk Disclosure cannot identify every possible risk.

Blockchain technology continues to evolve rapidly.

New technological, financial, legal, regulatory, operational, cybersecurity, and economic risks may emerge at any time.

You remain solely responsible for evaluating whether use of the Platform is appropriate for your particular circumstances.

If you do not understand these risks, you should not use the Platform.

1. NON-CUSTODIAL PLATFORM

1StopCrypto is a non-custodial software platform.

This is one of the most important characteristics of the Platform.

Unlike centralized cryptocurrency exchanges, 1StopCrypto does not:

hold Digital Assets;
maintain custody of user funds;
possess wallet Private Keys;
possess Recovery Phrases;
execute blockchain transactions on behalf of users;
control user wallets.

You remain solely responsible for:

protecting your wallet;
protecting your Private Keys;
protecting your Recovery Phrase;
reviewing transactions before signing;
securing your devices;
maintaining access to your Digital Assets.

Loss of wallet credentials generally results in permanent loss of access to your Digital Assets.

The Company cannot recover lost Private Keys or Recovery Phrases.

2. GENERAL DIGITAL ASSET RISKS

Digital Assets are highly speculative.

Digital Asset markets remain significantly more volatile than many traditional financial markets.

The value of Digital Assets may increase or decrease dramatically over short periods of time.

You may lose some or all of the value of your Digital Assets.

Factors affecting Digital Asset prices include, without limitation:

market sentiment;
liquidity;
trading volume;
macroeconomic conditions;
interest rates;
technological developments;
protocol upgrades;
regulatory announcements;
security incidents;
exchange listings or delistings;
stablecoin failures;
smart contract vulnerabilities;
market manipulation;
fraud;
social media activity;
geopolitical events.

Past performance does not predict future results.

No Digital Asset should be considered a guaranteed investment.

3. LOSS OF DIGITAL ASSETS

Use of blockchain technology involves the possibility of permanent loss of Digital Assets.

Losses may occur due to:

user error;
forgotten wallet credentials;
lost Recovery Phrases;
stolen Private Keys;
phishing attacks;
malware;
ransomware;
hardware failure;
software defects;
smart contract vulnerabilities;
blockchain failures;
bridge failures;
incorrect wallet addresses;
incorrect blockchain selection;
unsupported token transfers;
compromised devices;
social engineering;
protocol exploits.

Unlike many traditional financial transactions, blockchain transactions generally cannot be reversed.

The Company cannot recover Digital Assets lost through these events.

4. BLOCKCHAIN TECHNOLOGY RISKS

Blockchain technology remains relatively new.

Blockchain networks may experience:

software bugs;
consensus failures;
blockchain reorganizations;
validator failures;
mining disruptions;
governance disputes;
forks;
protocol upgrades;
network congestion;
denial-of-service attacks;
security vulnerabilities;
unforeseen technical failures.

Any supported blockchain may experience operational failures that affect your ability to access or transfer Digital Assets.

The Company does not control blockchain networks.

5. IRREVERSIBLE TRANSACTIONS

Most blockchain transactions are irreversible once confirmed.

If you:

send cryptocurrency to an incorrect wallet;
send assets using an unsupported blockchain;
approve a malicious smart contract;
authorize a fraudulent transaction;
approve an incorrect transaction amount;
interact with a malicious decentralized application;
your Digital Assets may be permanently lost.

The Company generally has no ability to reverse blockchain transactions.

Users should carefully verify all transaction details before signing.

6. WALLET SECURITY RISKS

Wallet security is the sole responsibility of the User.

Wallet risks include:

stolen devices;
compromised computers;
compromised smartphones;
malware;
browser exploits;
fake wallet software;
counterfeit wallet applications;
fake browser extensions;
phishing websites;
malicious QR codes;
clipboard malware replacing wallet addresses;
unauthorized remote access software;
SIM-swapping attacks.

Users should carefully verify the authenticity of wallet software before installation.

The Company strongly recommends using hardware wallets for significant Digital Asset holdings.

7. PRIVATE KEY AND RECOVERY PHRASE RISKS

Private Keys and Recovery Phrases provide complete control over Digital Assets.

Anyone obtaining your Private Key or Recovery Phrase may permanently transfer your Digital Assets without your permission.

The Company does not receive, store, back up, or recover these credentials.

If you lose your Recovery Phrase or Private Keys, the Company cannot restore access to your wallet.

Users should:

store Recovery Phrases offline;
avoid digital screenshots;
avoid cloud storage;
avoid email storage;
avoid sharing credentials with anyone;
maintain secure backups in physically separate locations.

8. SMART CONTRACT RISKS

The Platform enables interaction with blockchain smart contracts developed by independent third parties.

Smart contracts may contain:

programming errors;
logic flaws;
arithmetic errors;
security vulnerabilities;
upgrade vulnerabilities;
governance weaknesses;
oracle dependencies;
permission errors.

Even professionally audited smart contracts may later be exploited.

Users acknowledge that interacting with smart contracts always involves risk.

The Company does not guarantee the safety or reliability of any third-party smart contract.

9. DECENTRALIZED FINANCE (DeFi) RISKS

The Platform may facilitate access to decentralized finance protocols.

DeFi protocols present additional risks including:

liquidity shortages;
protocol insolvency;
governance attacks;
flash loan attacks;
oracle manipulation;
impermanent loss;
collateral liquidation;
automated liquidation cascades;
smart contract exploits;
bridge exploits;
validator collusion;
economic attacks;
protocol abandonment.

Many DeFi protocols are not regulated.

Users should independently evaluate all protocols before interacting with them.

10. LIQUIDITY RISKS

Digital Assets may become illiquid.

Limited liquidity may prevent Users from:

selling Digital Assets;
purchasing Digital Assets;
completing swaps;
exiting positions;
obtaining quoted prices.

Liquidity conditions may change rapidly during periods of market volatility.

The Company does not guarantee the availability of liquidity for any Digital Asset.

11. STABLECOIN RISKS

Although certain Digital Assets are commonly referred to as "stablecoins," no stablecoin should be assumed to maintain a constant value under all market conditions.

Stablecoins may lose their intended value due to:

insufficient reserves;
reserve mismanagement;
counterparty failures;
banking disruptions;
redemption suspensions;
market panic;
liquidity shortages;
smart contract vulnerabilities;
regulatory actions;
governance failures;
cyberattacks;
issuer insolvency.

A stablecoin may temporarily or permanently trade above or below its intended reference value.

Historical examples demonstrate that stablecoins may experience substantial de-pegging events, resulting in significant financial losses.

The Company makes no representation regarding:

the quality of reserves;
redemption rights;
regulatory status;
solvency of any issuer;
long-term viability of any stablecoin.

12. TOKEN RISKS

Digital Assets differ significantly in their technical design, governance, liquidity, legal treatment, and economic characteristics.

Each Digital Asset presents unique risks.

Such risks may include:

abandonment by developers;
insufficient community support;
protocol vulnerabilities;
inflationary tokenomics;
governance disputes;
unrestricted token issuance;
concentration of token ownership;
insider holdings;
market manipulation;
inadequate liquidity;
technological obsolescence.

Support for a Digital Asset by the Platform does not constitute:

an endorsement;
investment advice;
a recommendation;
an assessment of quality;
an opinion regarding regulatory status.

Users remain solely responsible for evaluating every Digital Asset they choose to acquire, hold, transfer, or exchange.

13. WRAPPED ASSET RISKS

Certain Digital Assets represent tokenized or "wrapped" versions of assets existing on another blockchain.

Wrapped assets depend upon additional infrastructure beyond the underlying blockchain.

Risks include:

custodian failure;
bridge failure;
reserve inadequacy;
redemption suspension;
protocol exploits;
governance attacks;
validator compromise;
de-pegging;
smart contract vulnerabilities.

Failure of the wrapping mechanism may significantly reduce or eliminate the value of a wrapped asset.

14. CROSS-CHAIN BRIDGE RISKS

Cross-chain bridges facilitate movement of Digital Assets between blockchain networks.

Bridges introduce significant additional risk because they depend upon multiple systems operating correctly.

Bridge-related risks include:

smart contract vulnerabilities;
validator compromise;
bridge operator misconduct;
relayer failures;
message verification failures;
replay attacks;
double-spend attacks;
chain reorganizations;
liquidity shortages;
wrapped asset failures;
governance attacks;
protocol exploits;
software defects.

Historically, bridge exploits have resulted in substantial losses across the blockchain industry.

The Company does not control independent bridge providers and assumes no responsibility for bridge-related losses.

15. MINER EXTRACTABLE VALUE (MEV) AND MAXIMAL EXTRACTABLE VALUE

Blockchain transactions submitted to public networks may be observed before confirmation.

Validators, miners, searchers, or other market participants may exploit pending transactions through techniques commonly referred to as Miner Extractable Value ("MEV") or Maximal Extractable Value.

MEV-related activities may include:

front-running;
back-running;
sandwich attacks;
transaction reordering;
arbitrage extraction;
liquidation optimization.

These activities may result in:

less favorable execution prices;
increased transaction costs;
failed transactions;
reduced transaction value.

The Company cannot prevent MEV-related activity occurring on public blockchain networks.

16. SLIPPAGE RISKS

Digital Asset prices may change between the time a transaction is initiated and the time it is confirmed on a blockchain.

Price movement during this interval is commonly referred to as "slippage."

Slippage may result from:

market volatility;
limited liquidity;
large transaction size;
network congestion;
delayed confirmations;
MEV activity;
arbitrage;
changing market conditions.

Actual execution prices may differ materially from quoted prices.

Users should carefully review slippage tolerance settings before approving transactions.

17. GAS FEE RISKS

Most blockchain networks require payment of transaction fees commonly referred to as "Gas Fees."

Gas Fees may fluctuate rapidly depending upon:

network congestion;
validator demand;
market conditions;
transaction complexity;
protocol upgrades.

Users acknowledge that:

Gas Fees may exceed expectations;
failed transactions may still consume Gas Fees;
Gas Fees are generally non-refundable;
the Company does not determine Gas Fees;

Gas Fees are paid to blockchain validators or miners rather than the Company.

18. ORACLE RISKS

Many blockchain applications depend upon external data providers commonly referred to as "oracles."

Oracle failures may result from:

inaccurate data;
delayed data;
malicious manipulation;
infrastructure failures;
network outages;
governance attacks;
software defects.

Oracle failures may affect:

smart contract execution;
collateral valuations;
liquidations;
token pricing;
protocol functionality.

The Company does not control third-party oracle providers.

19. GOVERNANCE RISKS

Many blockchain protocols are governed by decentralized communities, foundations, token holders, or decentralized autonomous organizations ("DAOs").

Governance decisions may significantly affect Digital Assets and protocols.

Governance actions may include:

protocol upgrades;
parameter changes;
inflation adjustments;
treasury expenditures;
validator requirements;
software changes;
hard forks;
soft forks.

Governance decisions may reduce the value, utility, liquidity, or functionality of Digital Assets.

Users acknowledge that governance outcomes are uncertain and outside the Company's control.

20. HARD FORKS AND SOFT FORKS

Blockchain networks periodically undergo protocol modifications.

These modifications may take the form of:

hard forks;
soft forks;
emergency upgrades;
security patches;
consensus changes.

Forks may result in:

multiple competing blockchains;
duplicated Digital Assets;
network instability;
replay attacks;
wallet incompatibility;
unsupported assets;
temporary suspension of services.

The Company is not obligated to support every resulting blockchain, Digital Asset, or fork.

The Company may determine, in its sole discretion, whether and when to support assets created by a fork.

21. THIRD-PARTY PROVIDER RISKS

The Platform integrates with independent third-party providers that may include:

Buy Crypto providers;
decentralized exchanges;
liquidity aggregators;
wallet providers;
identity verification providers;
payment processors;
blockchain infrastructure providers;
analytics providers;
bridge providers.

The Company does not control these providers.

Third-party providers may:

suspend services;
discontinue products;
experience insolvency;
experience cybersecurity incidents;
modify pricing;
modify eligibility requirements;
change APIs;
become unavailable without notice.

Users acknowledge that failures of third-party providers may affect Platform functionality.

22. CYBERSECURITY RISKS

Blockchain ecosystems are frequent targets of sophisticated cyberattacks.

Cybersecurity risks include:

phishing;
malware;
ransomware;
keyloggers;
clipboard hijacking;
malicious browser extensions;
fake wallet applications;
supply chain attacks;
DNS hijacking;
SIM swapping;
credential theft;
insider threats;
social engineering;
zero-day exploits;
denial-of-service attacks.

No online system can guarantee complete security.

Users remain responsible for implementing appropriate cybersecurity practices.

23. REGULATORY AND LEGAL RISKS

The legal and regulatory treatment of Digital Assets continues to evolve rapidly across jurisdictions.

Changes in laws, regulations, guidance, court decisions, or governmental policies may materially affect:

the availability of the Platform;
the legality of certain Digital Assets;
access to third-party providers;
taxation;
licensing requirements;
reporting obligations;
transaction restrictions;
sanctions compliance;
consumer protection requirements.

Regulatory developments may require the Company to modify, suspend, or discontinue certain Platform features without prior notice.

The Company does not guarantee that any Digital Asset or blockchain activity will remain lawful in any jurisdiction.

24. TAX RISKS

Transactions involving Digital Assets may have complex tax consequences.

Tax treatment varies depending upon:

jurisdiction;
transaction type;
holding period;
applicable tax law;
future legislative developments.

Taxable events may include, without limitation:

purchases;
sales;
swaps;
staking rewards;
airdrops;
forks;
governance rewards;
NFT transactions;
bridge transfers.

The Company does not provide tax advice.

Users should consult qualified tax professionals regarding their individual circumstances.

25. OPERATIONAL RISKS

The Platform depends upon numerous technologies, service providers, and public infrastructure that may experience operational failures.

Operational risks include, without limitation:

software defects;
programming errors;
database failures;
cloud infrastructure outages;
internet connectivity failures;
domain name system ("DNS") failures;
distributed denial-of-service ("DDoS") attacks;
hardware failures;
telecommunications outages;
blockchain node failures;
validator outages;
software deployment errors;
data synchronization issues;
third-party API failures;
maintenance windows;
human error.

The Company uses commercially reasonable efforts to maintain the availability and integrity of the Platform. However, uninterrupted operation cannot be guaranteed.

Platform interruptions may occur with or without prior notice where reasonably necessary to:

perform maintenance;
deploy software updates;
address security vulnerabilities;
comply with legal obligations;
investigate suspicious activity;
mitigate operational risks.

The Company shall not be responsible for losses resulting from operational interruptions beyond its reasonable control.

26. MARKET RISKS

Digital Asset markets operate continuously and may experience extreme volatility.

Market risks include:

rapid price fluctuations;
flash crashes;
prolonged market declines;
liquidity crises;
exchange failures;
large-scale liquidations;
concentrated ownership;
market manipulation;
coordinated trading activity;
geopolitical events;
macroeconomic developments;
changes in monetary policy;
changes in interest rates;
systemic financial instability.

Digital Assets may experience price movements significantly exceeding those typically observed in traditional financial markets.

There is no assurance that a Digital Asset will retain any value.

Users should carefully consider their financial circumstances and risk tolerance before engaging in Digital Asset transactions.

27. TECHNOLOGY EVOLUTION RISKS

Blockchain technology continues to evolve rapidly.

Future developments may include:

new consensus mechanisms;
cryptographic advances;
quantum computing developments;
interoperability standards;
protocol redesigns;
wallet technology changes;
new regulatory technical requirements;
changes to internet infrastructure.

Future technological developments may render existing technologies obsolete or introduce new security considerations.

The Company cannot predict future technological changes or guarantee long-term compatibility with all blockchain networks or wallet technologies.

28. OPEN-SOURCE SOFTWARE RISKS

Many blockchain networks, wallets, libraries, and protocols rely upon open-source software.

Although open-source development provides significant benefits, it also presents risks.

Open-source software may contain:

undiscovered vulnerabilities;
undocumented behavior;
incompatible updates;
abandoned components;
malicious contributions;
inadequate documentation.

Updates to third-party open-source software may introduce unexpected changes affecting Platform functionality.

The Company cannot guarantee the continued maintenance or security of software developed by independent third parties.

29. AVAILABILITY OF THIRD-PARTY SERVICES

The Platform relies upon independent service providers to support various functions.

These providers may include:

blockchain node providers;
RPC providers;
cloud hosting providers;
wallet connectivity providers;
analytics providers;
content delivery networks;
payment providers;
identity verification providers.

These providers operate independently of the Company.

Interruptions affecting third-party services may affect:

wallet connectivity;
blockchain data availability;
portfolio information;
transaction broadcasting;
transaction monitoring;
customer support systems.

The Company cannot guarantee uninterrupted availability of third-party services.

30. NO INVESTMENT, LEGAL, TAX, OR ACCOUNTING ADVICE

The Platform is a technology platform.

Nothing provided through the Platform constitutes:

investment advice;
securities advice;
financial planning;
portfolio management;
legal advice;
tax advice;
accounting advice;
fiduciary services;
brokerage services.

Any market information, charts, educational materials, analytics, blockchain data, or commentary made available through the Platform are provided solely for informational purposes.

Users should obtain independent professional advice before making financial, legal, tax, or investment decisions.

The Company does not recommend the purchase, sale, or holding of any Digital Asset.

31. LIMITATION OF COMPANY RESPONSIBILITY

Users acknowledge that many significant risks associated with Digital Assets arise from circumstances beyond the Company's control.

Without limitation, the Company is not responsible for losses resulting from:

blockchain failures;
smart contract exploits;
protocol failures;
validator misconduct;
mining failures;
bridge exploits;
oracle failures;
liquidity shortages;
third-party provider failures;
market volatility;
regulatory actions;
governmental restrictions;
sanctions;
tax consequences;
phishing attacks;
compromised user devices;
malware;
ransomware;
social engineering;
stolen credentials;
lost Recovery Phrases;
lost Private Keys;
user negligence;

unauthorized wallet access not caused by the Company's gross negligence or willful misconduct.

Nothing in this Risk Disclosure modifies or limits any rights that cannot be waived under applicable law.

32. USER ACKNOWLEDGEMENTS

By using the Platform, each User acknowledges and agrees that:

Digital Assets are speculative and involve substantial financial risk.

The Company operates solely as a non-custodial software platform.

The Company does not possess the User's Private Keys or Recovery Phrases.

Blockchain transactions are generally irreversible.

Public blockchain records are generally permanent.

Smart contracts may contain vulnerabilities.

Stablecoins may lose their intended value.

Wrapped assets may fail.

Cross-chain bridges present significant additional risks.

Blockchain technology remains experimental in many respects.

Regulatory treatment of Digital Assets remains uncertain and subject to change.

The User may lose some or all of their Digital Assets.

Past performance of any Digital Asset does not predict future performance.

The Company does not guarantee profitability, appreciation, or preservation of value.

The Company does not provide investment, legal, or tax advice.

The User has independently evaluated whether use of the Platform is appropriate for the User's financial circumstances, technical knowledge, and risk tolerance.

The User accepts full responsibility for all blockchain transactions authorized through the User's Connected Wallet.

33. CHANGES TO THIS RISK DISCLOSURE

The Company may update this Risk Disclosure periodically to reflect:

technological developments;
changes in blockchain ecosystems;
new categories of Digital Assets;
new Platform functionality;
changes in applicable law;
changes in regulatory guidance;
evolving cybersecurity risks;
operational improvements.

Material revisions will be reflected by updating the Last Updated date appearing at the beginning of this Risk Disclosure.

Continued use of the Platform after an updated Risk Disclosure becomes effective constitutes acknowledgment of the revised Risk Disclosure.

34. CONTACT INFORMATION

Questions regarding this Risk Disclosure may be directed to:

1StopCrypto

Legal Entity: BLUE SOFT LLC

Business Address: 10200 S Roberts Rd Unit #4235 Palos Hills, IL 60465

Legal Email: [email protected]

Support Email: [email protected]

Website: https://1stopcrypto.com

35. FINAL ACKNOWLEDGEMENT

BY ACCESSING OR USING THE PLATFORM, CONNECTING A DIGITAL WALLET, OR INITIATING A BLOCKCHAIN TRANSACTION THROUGH THE PLATFORM, YOU ACKNOWLEDGE THAT:

YOU HAVE READ THIS RISK DISCLOSURE IN ITS ENTIRETY;
YOU UNDERSTAND THE RISKS ASSOCIATED WITH DIGITAL ASSETS, BLOCKCHAIN TECHNOLOGY, SMART CONTRACTS, DECENTRALIZED FINANCE, AND NON-CUSTODIAL SOFTWARE PLATFORMS;
YOU UNDERSTAND THAT DIGITAL ASSET TRANSACTIONS MAY RESULT IN THE LOSS OF SOME OR ALL OF YOUR DIGITAL ASSETS;
YOU UNDERSTAND THAT 1STOPCRYPTO DOES NOT HOLD YOUR DIGITAL ASSETS, PRIVATE KEYS, OR RECOVERY PHRASES;
YOU ACCEPT THESE RISKS AS A CONDITION OF USING THE PLATFORM.