Risks and limitations

Wallet testing and compatibility

The project’s recorded end-to-end flow used a fake connector; it does not establish a successful flow with a real wallet. Not tested by this project does not mean that no compatible wallet exists. No wallet brand is endorsed here.

The app discovers connector 4.x wallets, and the SDK targets connector 4.1 and ledger 9. Discovery or a successful connection does not prove that proving, balancing, or submission will work. Confirm the wallet’s current ledger and connector support with its provider; do not test compatibility with real funds.

Midnight networks and Shielded Pools availability

As checked on 10 November 2026, Midnight’s official Environments and endpoints page lists Preview, Preprod, and Mainnet on ledger 9. Its release notes say Preview was reset on 6 November 2026. The app README’s older statement that Preview runs ledger 8 is outdated.

A Midnight network’s ledger capability does not establish Shielded Pools support or a deployed pool. The app configuration reviewed for these docs offers Mainnet and Preprod; a particular build still needs a configured contract and working services. These docs do not establish a Shielded Pools Preview deployment. Check the network and availability shown in the app. See Sources and verification for the dated network check and source-review limits.

Proof-server trust

A proof server receives the wallet’s coin secret key. Its operator could spend the wallet’s wrapped tokens. The wallet decides how to prove, and the app cannot determine whether that happens locally or remotely. Verify this setup with the wallet provider.

Contract bugs and immutability

The app disables wrapping unless it can confirm the contract is immutable; the SDK repeats that check. A changeable contract’s maintainer could replace its circuits and take what it holds. An unreadable authority is not treated as safe to wrap into.

Immutability prevents circuit replacement; it does not establish correctness. A bug in an immutable contract cannot be repaired in place. The app’s notes say users would need to move to a new deployment. There is no guarantee that funds will remain recoverable in every failure scenario.

Public activity and operational failures

Wrap and unwrap addresses and amounts are public. Shielded-token privacy does not guarantee anonymity; see Privacy and public information.

Wallets, proof services, indexers, and network connectivity can fail or lag. Transactions can have unknown outcomes, including cases where only part of a transaction took effect. A page timeout or reload does not cancel an already submitted transaction. Check balances and history before retrying.

Scope of the 1:1 ratio

The 1:1 ratio describes NIGHT locked or released against sNIGHT issued or retired. It is not a market-price peg guarantee, yield promise, availability guarantee, or commitment to instant redemption. Network DUST costs are separate. The app’s Cardano bridge is a disabled interface, not an implemented bridge.

Implementation references are listed in Sources and verification.