Frontier GRAM ⇄ LUNC Swap - Terms of Use

Version 1.0 · 2 November 2026 · Delfos Hub

The swap currently runs on test networks with test coins only. These terms apply as written when it opens on the main networks.

These Terms of Use govern the GRAM and LUNC swap service in Frontier Wallet. They set out the operation of the service, the commitments of buyers and sellers, applicable fees, and the support and compensation policy. An offer reservation and a smart contract lock are separate: releasing a reservation does not release funds locked on a blockchain.

1. About the service

The service enables users to exchange GRAM on the TON network for LUNC on Terra Classic directly with one another. It is operated by the Delfos Hub team ("Delfos Hub", "we", "us" or "our"). By using the service, you accept these Terms of Use. In these terms, the buyer provides GRAM to acquire LUNC, and the seller provides LUNC to receive GRAM.

Wallet control. Your wallet keys remain on your device, encrypted with your PIN. Delfos Hub does not take custody of your funds and cannot transfer them at its discretion.

Smart contract custody. During a swap, funds are held in hash time locked contracts (HTLCs). Each contract specifies an expiry time and the addresses entitled to receive claims or refunds. The contracts are immutable: neither Delfos Hub nor any other party can change their terms or redirect their payouts.

Native assets. The service does not create wrapped tokens or bridge assets between networks. GRAM remains on TON and LUNC remains on Terra Classic.

Transactions between users. Sellers publish offers and buyers accept all or part of them. Delfos Hub is not a party to these trades and does not determine their prices.

2. How a swap works

The buyer locks funds first. The seller locks funds only after verifying the buyer’s lock on the blockchain. A swap proceeds as follows:

1. The seller publishes a signed offer specifying the amount of LUNC, the price in GRAM and the minimum amount a buyer may accept.

2. The buyer accepts an amount from the offer. The buyer’s wallet generates and stores a secret on the device, then locks the required GRAM, service fee and network reserve in a TON smart contract. A claim requires the corresponding secret.

3. The seller verifies the buyer’s lock and responds by locking the required LUNC, together with the Terra Classic burn tax, in a contract linked to the same secret.

4. The relayer or the buyer’s wallet claims the LUNC for the buyer using the secret. This claim publishes the secret on Terra Classic.

5. The relayer or the seller’s wallet uses the published secret to release the GRAM to the seller’s designated TON address.

Publishing the secret through a claim on one network enables the corresponding claim on the other. Funds that remain unclaimed may be refunded after the relevant lock expires, as described in section 7. The relayer submits claims and refunds through the contracts’ publicly callable functions; the dependencies associated with its operation are described in section 6.

3. Time limits and unanswered swaps

Each lock has an expiry time fixed at creation and enforced by its blockchain. The seller’s response window begins when the offers service records the buyer’s acceptance after verifying the GRAM lock.

If the seller does not respond, the buyer’s GRAM remains locked until the GRAM lock expires, approximately 30 hours after payment. Expiry of the 30 minute response window does not permit an early refund. This prevents a buyer from recovering the GRAM while still being able to claim LUNC locked by the seller.

Late responses. Frontier disables the Answer button after the 30 minute response window. The offers service may nevertheless accept a response submitted through another route if the offer has sufficient remaining capacity. The buyer’s wallet does not process that late response through its normal claim flow. Acceptance by the offers service therefore does not establish that the swap can complete in Frontier. Each party may recover any unclaimed funds after its own lock expires.

The seller’s LUNC lock expires at least 24 hours before the buyer’s GRAM lock, providing a claim window after the secret becomes public. Each wallet checks the other party’s lock before proceeding.

4. Offers, reservations and seller commitments

Offer duration. An offer remains available for no more than 24 hours and then expires automatically. A seller wishing to continue selling must publish a new offer.

Cancellation and performance. An offer cannot be edited. The seller may cancel it to prevent further acceptances, but cancellation does not remove the obligation to fulfil valid acceptances already made. Once a buyer has locked funds for a valid acceptance, the seller may not refuse that transaction. Publishing an offer constitutes a commitment to sell on its stated terms; the service provides no refusal function.

Fixed transaction terms. The price and amounts are determined by the seller’s signed offer. The buyer’s lock commits to that offer and the accepted amount.

When a reservation starts

A reservation is recorded only after the offers service verifies the buyer’s GRAM lock on TON. Selecting an amount or expressing an intention to buy does not reserve any part of an offer. The reserved amount is deducted immediately from the available balance. For example, accepting 30,000 LUNC from an offer of 100,000 LUNC leaves 70,000 LUNC available to other buyers.

The capacity check and reservation are performed in a single database operation to prevent simultaneous buyers from reserving the same amount. Reservations are stored off chain in the offers service’s Cloudflare database and persist through service restarts. The funds themselves remain in the immutable smart contracts.

Reservation release and sold amounts

The seller has 30 minutes to respond. If an acceptance remains unanswered, its reservation is released at the next scheduled check, which runs every 5 minutes. The amount then becomes available in the offer again. This release does not unlock the buyer’s GRAM; a refund remains subject to expiry of the GRAM lock.

An acceptance to which the seller has responded is recorded as sold by the offers service, even if the swap later fails and the seller recovers the LUNC. That amount is not automatically restored to the offer’s available balance.

Balances, limits and unanswered buys

Seller balance. An offer is accepted only if the seller’s balance covers that offer together with the seller’s other offers and pending acceptances. The seller must also maintain sufficient additional LUNC for the burn tax and network gas. A seller may have at most 5 live offers at a time.

Abuse prevention. The offers service permits no more than 3 waiting acceptances per address and 20 announcements per minute per IP address. Each acceptance requires an actual GRAM lock lasting approximately 30 hours. Buyers must check their pending transactions before authorising any further payment.

Unanswered acceptances. An unanswered acceptance counts as a miss. A seller’s offers are hidden when, over the preceding 30 days, the seller has at least 3 misses and those misses are more than one fifth of all acceptances received in that period, answered or not. Offers become visible again automatically when these conditions cease to apply, whether through additional responses or expiry of older misses from the 30 day period. Sellers may enable Telegram alerts in the wallet to help them respond on time.

Buyer commitment. Accepting an offer commits the buyer’s GRAM on chain before the seller is notified. Funds are released through a successful swap or, if unclaimed, through a refund after expiry.

5. Fees and network costs

The wallet displays the applicable amounts before you sign. No charge may be applied unless it was shown on the confirmation screen.

The service fee is payable only upon completion of a swap. A refunded GRAM lock returns the service fee in full. Network fees and the Terra Classic burn tax are determined by the respective networks, may change and are not refunded merely because a swap does not complete. No other service fee is charged.

6. The relayer

Delfos Hub operates a relayer that submits the transactions needed to complete swaps on behalf of both parties. During normal relayer operation, users do not need to remain online or hold the other network’s native coin to pay claim gas. The fallback procedures and dependencies below continue to apply.

Functions. The relayer uses the secret supplied by the buyer’s wallet to claim LUNC for the buyer, then releases GRAM to the seller. It also submits refunds after expiry for the swaps it is aware of, which are the swaps a seller has answered.

Payout restrictions. The relayer cannot redirect contract payouts. Claimed LUNC is paid only to the buyer, claimed GRAM only to the seller, and refunds only to the party that originally locked the funds. These restrictions do not eliminate the dependencies associated with secret handling and transaction timing.

Timing and availability. The relayer is intended to publish the secret only through a claim of the buyer’s LUNC while the seller can still claim the GRAM. If the relayer becomes unavailable before the secret has been disclosed, unclaimed funds remain refundable after expiry. If the secret is already public, the seller’s wallet can claim the GRAM before the GRAM lock expires.

Secret handling. A buyer who supplies the secret to the relayer relies on it not to disclose that secret without claiming the LUNC. As a fallback, the buyer’s wallet attempts to claim the LUNC itself if the relayer has not done so in time, provided the wallet remains open.

Configured endpoint. Frontier communicates only with the relayer endpoint built into the application.

7. Refunds and recovery

If a swap does not complete, funds that remain unclaimed may be refunded after the relevant lock expires. For the swaps it is aware of (those a seller has answered), the relayer submits refunds automatically. When a seller never answers an acceptance, which is the most common case, nothing is refunded automatically: the buyer requests the refund in Frontier after the GRAM lock expires. Users may always initiate a refund in Frontier:

• Buyer: select "Get my GRAM back" after the GRAM lock expires. The lock pays its own network fee; no separate payment is required.

• Seller: select "Refund" after the LUNC lock expires. The transaction requires a small amount of LUNC for network gas.

Anyone may submit a refund transaction, but the contract pays only the original depositor. Refunds therefore remain possible if Frontier or the relayer is unavailable. The relevant contract can be identified using the buyer’s lock address or the seller’s lock number recorded in the transaction history.

Local wallet data. The buyer’s wallet stores the swap secret on the device that created it and supplies it to the relayer when using that service. The wallet recovery phrase does not restore the locally stored swap secret. Loss of that local data may prevent completion, but any GRAM that remains unclaimed can be refunded after the lock expires.

8. Your responsibilities

Recovery phrase and PIN. Keep your recovery phrase and PIN confidential and secure. Delfos Hub cannot recover a lost phrase or PIN or reverse a transaction that you have signed.

Transaction verification. Before signing, verify all amounts, addresses and the selected network on the confirmation screen. Transactions recorded on chain are final.

Seller’s TON address. The seller must provide a correct TON address under their control to receive GRAM. Exchange deposit addresses should be avoided because an exchange may not credit transfers received from a smart contract.

Seller response. Maintain enough LUNC to fund the lock, burn tax and gas, and respond to valid acceptances within 30 minutes.

Pending swaps. Open the wallet when a swap requires action. While open, Frontier can perform the relevant claim if the relayer has not done so.

Compliance and taxation. Use the service only where lawful for you and only if you are not subject to sanctions. You are responsible for the taxes applicable to your transactions.

Eligibility. You must be at least 18 years old or have reached the legal age applicable where you live.

9. Risks

Use of the service involves the following risks, which users accept when using the swap:

Smart contracts. The contracts have undergone several rounds of internal review and testing by the team and have no owner or upgrade mechanism. The team continues to address errors and potential exploits. Code may nevertheless contain flaws that result in losses. Responsibility and compensation for system malfunctions are addressed in section 11.

Networks. TON or Terra Classic may stop operating temporarily, experience delays or change network rules, fees or burn taxes. Delays close to an expiry time may prevent a swap from completing.

Locked funds. If the seller does not respond, the buyer’s GRAM remains locked for approximately 30 hours, as explained in section 3.

Market prices. The price is fixed when an offer is accepted. Market prices may change while a swap is pending.

Relayer and claim timing. Timely claims depend on the relayer or an open wallet performing the required actions, as described in section 6.

Device security. Malware, device loss or a compromised PIN may expose wallet keys. Clearing wallet data may also remove an open swap’s locally stored secret.

Impersonation and fraud. Support staff will never ask you to disclose your recovery phrase, PIN or swap secret. Use only the official Frontier Wallet bot. The wallet’s automated transmission of a secret to the configured relayer is described in section 6.

10. Your data

The swap does not request your name, email address or telephone number as a condition of use. It processes the following information:

On your device: encrypted wallet keys, locally stored swap secrets and transaction states. Wallet keys remain on your device; secret transmission to the relayer is described in section 6.

Offers service hosted on Cloudflare: offers and acceptances, including the associated wallet addresses, amounts and timestamps.

Optional Telegram alerts: the association between your wallet address and Telegram account, used to send notifications. Disabling alerts deletes that association immediately.

Relayer hosted on a server in Germany: the swaps it processes, including lock identifiers and the secret used to complete a claim. The relayer receives the secret before claiming, as described in section 6.

Hosting providers and public blockchain nodes: your IP address may be visible to the providers and nodes contacted by the wallet and is processed under their respective policies.

Public blockchains: locks, wallet addresses, amounts and published secrets are public and permanently recorded. These records cannot be deleted by Delfos Hub.

The swap does not include analytics or tracking. Requests concerning data held by our services, including applicable retention periods and deletion of data associated with your wallet address, may be submitted through the official support channels described in section 11. Email may be used for deletion requests. Such requests cannot remove public blockchain records.

11. Support, warranties and compensation

Official communication channels

Delfos Hub commits to providing an initial response to inquiries received through its official communication channels within a maximum of fifteen (15) calendar days after receipt.

Telegram is the preferred support channel and generally allows more direct and faster exchanges with the team.

Email is also available for inquiries requiring special handling, formal follow-up or more detailed correspondence.

The official channels are:

• Telegram: t.me/DelfosHub
• Email: [email protected]

Any change to these channels will be announced in Frontier Wallet and through the official Telegram channel. Include the lock address or number, relevant public wallet addresses, transaction links and a description of the issue. Support staff will never request your recovery phrase, PIN or swap secret.

Initial response and resolution

The initial response must include the start of handling by the team. An automated acknowledgement does not constitute the team’s initial response or the start of handling.

The fifteen (15) calendar day commitment concerns the initial response only. It does not guarantee full resolution within that period.

Some inquiries require more time to resolve. A resolution period exceeding fifteen (15) calendar days does not, by itself, create a right to compensation or a claim under this response commitment.

The service does not include a guaranteed urgent support channel, continuous monitoring or a response within hours. Use of Telegram does not establish a separate response deadline. Automated alerts, including relayer downtime alerts, do not create an urgent support commitment.

This provision does not affect any applicable statutory deadlines or legal requirements.

Service malfunctions and compensation claims

Any claim for compensation relating to a service malfunction, including a bug in one of the Delfos Hub smart contracts, will be reviewed on a case-by-case basis by the Delfos Hub team, taking into account the circumstances of the incident, the harm established and its causal connection to the malfunction. Failure of a swap to complete does not, by itself, establish a malfunction or an entitlement to compensation.

Delfos Hub acknowledges a claim and starts its review within the initial response time set out above.

Following this review, the team will provide the user with a reasoned response and, where appropriate, a compensation proposal specifying its terms. Decisions on claims are made by the Delfos Hub team. Any compensation is paid from the Delfos Hub treasury through its multisig wallet.

Submitting a claim does not automatically establish an entitlement to compensation. This procedure does not limit the user’s rights or Delfos Hub’s liabilities under applicable mandatory provisions of law.

Losses caused by the user’s own error are not compensated. These include accepting an unfavourable or overpriced offer, misreading figures or entering an incorrect amount, including a misplaced or omitted zero that causes a user to pay ten times more or sell for one tenth of the intended price.

A smart contract refund is the return of locked funds and is distinct from compensation. Market movements, the conduct of other users and network events do not, by themselves, establish a malfunction of the Delfos Hub system.

These terms do not establish a common compensation fund. Any future fund financed from a portion of profits will be governed by separately communicated funding, management, claim review and payment arrangements. The absence or subsequent establishment of such a fund does not change the review of claims under this section.

Availability and statutory rights

To the extent permitted by law, the service is provided "as is" and "as available". Delfos Hub does not guarantee uninterrupted availability, execution of every offer or software free from errors. These qualifications do not affect the review of compensation claims under this section. Nothing in these terms limits rights or liabilities that cannot lawfully be limited.

Frontier Wallet does not provide investment, financial or tax advice.

12. Service limits, amendments and closure

Transaction limits. Applicable transaction limits are those activated and displayed in the service before a transaction is initiated. During the launch period, each swap must be between 5 and 500 GRAM; the offers service and Frontier both enforce this range.

Changes to service parameters. Delfos Hub may change transaction limits, time limits and service fees for new offers and swaps. A swap already initiated remains subject to the immutable parameters recorded in its locks.

Amendments to these terms. Changes will be announced in the application and through the official Telegram channel before they take effect. The announcement will specify the effective date. Each version will carry a number and date, and earlier versions will remain available. Sellers must accept the applicable version when publishing an offer, and buyers must accept it before their first swap under that version. A user who does not accept a new version may still cancel offers and complete or refund existing swaps. Acceptance is required irrespective of whether an automated version acceptance control is available.

Closure of the service. Delfos Hub will announce a planned closure in advance, specifying the closure date, and stop accepting new offers and purchases. The relayer will remain in operation until all open swaps have been completed or refunded. Unclaimed funds remain refundable through the smart contracts after expiry, independently of Frontier and the relayer, as described in section 7.