Phantom:
the most polished wallet in this series, running closed code with a real, unresolved lawsuit attached.
We tore apart Phantom, the default recommendation in the Solana ecosystem, across the same seven weighted categories as this series; from genuinely industry-leading onboarding, Blowfish-powered transaction previews, real named third-party security scores, and Ledger integration across both Solana and EVM chains, to fully closed-source code that can't be independently verified, and a real, unresolved 2025 lawsuit, disputed by Phantom and unproven either way, alleging a vulnerability in how the wallet handles keys in browser memory, tied to a reported $500,000 theft; and landed on a score the marketing page won't show you.
Our take, up front: Phantom, built by San Francisco-based Phantom Technologies, launched as a Solana-first wallet and genuinely earned its reputation as the default recommendation in that ecosystem; the 2026 product has expanded to natively support Solana, Ethereum, Base, Polygon, Sui, Monad, Bitcoin (Native SegWit and Taproot), HyperEVM, and Robinhood Chain. Real, Blowfish-powered transaction previews show a human-readable summary of what a transaction actually does before you approve it, comparable to protections we found reviewing MetaMask, Zengo, and Trust Wallet. Real, named third-party security scores exist, CertiK Skynet rates the wallet 85 and Coinspect rates it 65, alongside real audits from named firms including Kudelski. Real Ledger hardware wallet integration spans both Solana and supported EVM chains. What we can't set aside: the core codebase remains fully closed-source, meaning none of these claims can be independently verified by outside researchers. And here's a real, unresolved concern worth precise treatment: in January 2025, a security researcher publicly criticized Phantom over an alleged vulnerability in how the wallet handles key material in browser memory; this escalated into a formal lawsuit claiming roughly $3.1 million in damages tied to a reported $500,000 theft. Phantom disputes the allegations entirely, states no protocol-level breach occurred, and as of our research the litigation remains open, with no independent confirmation of the alleged flaw either way. That's a meaningfully different situation than a confirmed, company-admitted vulnerability, and we've scored it accordingly rather than treating disputed and confirmed incidents the same way. We weighted all of it below.
Phantom is genuinely non-custodial, with local encryption (ChaCha20-Poly1305 authenticated encryption, per at least one detailed source) and an audited Shamir Secret Sharing library protecting the encryption key. Real, Blowfish-powered transaction previews show a human-readable summary of what a transaction actually does before you approve it. Real, open-source community blocklist flags known scam domains and malicious contracts. Real Ledger hardware wallet integration keeps keys offline with physical confirmation required, across both Solana and supported EVM chains. Real, named third-party security scores exist: CertiK Skynet rates Phantom 85, Coinspect rates it 65, and real, named audit firms including Kudelski have reviewed the wallet. What we can't set aside: the core codebase remains fully closed-source, meaning none of these claims can be independently verified by outside researchers. Real, unresolved concern worth precision: a January 2025 dispute, which escalated to formal litigation, alleges Phantom stored key material in unencrypted browser memory in a way that made it accessible to malware, tied to a real, reported $500,000 theft and a $3.1 million lawsuit; Phantom disputes the allegations entirely, states no protocol-level breach occurred, and as of our research the litigation remains open and unresolved, with no independent confirmation of the alleged flaw either way. Real, older, less severe incidents include a 2021 "Demonic" vulnerability (patched within 48 hours, no confirmed fund losses) and 2022 phishing attacks using fake NFT metadata, a social-engineering issue rather than a code flaw.
Pros
- Genuinely non-custodial with real, named third-party security scores (CertiK 85, Coinspect 65)
- Blowfish-powered transaction previews and an open-source phishing blocklist
- Ledger hardware wallet integration across Solana and EVM chains
Cons
- Fully closed-source code; no independent verification possible
- Real, unresolved, disputed 2025 lawsuit alleging a browser-memory key vulnerability
- No confirmed exploit of Phantom's own code has been independently demonstrated either way
Real, genuinely broad and actively-expanding chain support: as of the most recent detailed source, Phantom natively supports Solana, Ethereum, Base, Polygon, Sui, Monad, Bitcoin (Native SegWit and Taproot), HyperEVM, and Robinhood Chain, up from a much narrower set earlier in 2026. Real, broad token support, described by multiple sources as effectively unlimited, with automatic detection when new tokens arrive. Real, honest limitation: this is explicitly not universal chain coverage, and at least one detailed source notes BTC swaps specifically are not supported even though Bitcoin itself can be held and sent.
Pros
- Nine natively-supported networks, actively expanding through 2026
- Broad, automatically-detected token support
Cons
- Not universal chain coverage; BTC swaps specifically unsupported per one source
Real, consistently and independently praised interface, widely described as setting the pace for the category on onboarding, NFT galleries, and clear transaction previews. Real, distinctive Solana-only mode lets Solana-focused users hide other chains entirely. Real, one-click spam NFT filtering reclaims SOL rent while avoiding malicious tokens. Real, honest limitation: no live chat support, per at least one detailed source.
Pros
- Consistently praised as setting the pace for onboarding and transaction clarity
- Distinctive Solana-only mode and one-click spam NFT filtering
Cons
- No live chat support
Real, broad platform coverage: a Chrome browser extension plus native iOS and Android apps, all synced through one Secret Recovery Phrase. Real, honest limitation worth flagging: a Firefox extension exists but is no longer actively updated, per at least one detailed, recently-dated source, meaning desktop users should treat Chrome as the actively supported path.
Pros
- Automatic sync across Chrome extension, iOS, and Android from one recovery phrase
Cons
- Firefox extension exists but is no longer actively updated
Phantom Technologies, Inc. is a real, well-funded, San Francisco-based company, having raised $150 million at a $3 billion valuation in January 2025, with real, substantial trading volume reported. Real, named third-party audits exist. Real, honest limitation: no live chat support found in our research. We found no confirmed, independently-verified breach of Phantom's own wallet code in our research; the disclosed incidents are either resolved with no confirmed losses, unrelated to code vulnerabilities, or remain disputed and unproven.
Pros
- Real, well-funded company with substantial reported trading volume
- No confirmed, independently-verified breach of Phantom's own code found
Cons
- Ongoing, unresolved 2025 litigation weighs on overall trust
- No live chat support found in our research
The wallet itself is free to download and use. Real, honest limitation: at least one detailed source notes swap fees add up meaningfully on larger transactions, though we didn't find a single, precisely quantified percentage across our research to compare directly against other wallets in this series.
Pros
- Free to download; no subscription fee
Cons
- Swap fees noted to add up meaningfully on larger transactions
Real, distinctive Solana-only mode and Instant Sell for NFTs round out a genuinely thoughtful feature set. Real, newer 2026 features including Predictions (prediction markets) and Perps (perpetual futures trading) expand well beyond core wallet functionality, mirroring a similar trend we found reviewing Trust Wallet. Real SOL staking with yields reported up to 9% APY, though actual returns will vary.
Pros
- Distinctive Solana-only mode and one-click Instant Sell for NFTs
- Newer prediction-market and perpetual-futures trading features
Cons
- Staking yields will vary; not a guaranteed return
Download only through Phantom's official site or verified app stores.
Phantom users are a frequent, documented phishing target given the wallet's popularity in the Solana ecosystem. Downloading direct or through an official, verified listing is the only way to be confident you're not installing a malicious clone.
The best-designed wallet in this series, with a real trust question closed code can't answer.
Nothing else we've reviewed handles onboarding, transaction previews, or Solana-specific conveniences as smoothly as Phantom does. That's a genuine, well-earned reputation. The honest complication is that we can't independently verify any of it: the code is closed, and a real, unresolved lawsuit specifically alleging a browser-memory key vulnerability sits open and unproven, precisely the kind of question closed code makes impossible for outside researchers to settle either way. We want to be precise here: this is a disputed allegation, not a confirmed vulnerability, and Phantom's own protocol has not been shown to have been breached. But "unproven" cuts both directions, it means the concern hasn't been dismissed either. Combined with a wallet this popular being a persistent phishing target, the practical guidance from multiple sources converges on the same point: use it for active balances, not as your vault.
The scorecard above is deliberately general. Whether Phantom is right for you depends heavily on which of these you already are.
The Solana-first user who wants the smoothest possible ecosystem experience
Genuinely the default recommendation in the Solana ecosystem, with staking, NFTs, and dApp access all polished into one app.
The multi-chain trader who wants real transaction-preview safety across EVM and Solana
Blowfish-powered previews and Ledger integration are genuinely strong safeguards for active daily trading.
The holder comfortable using a hot wallet for active balances while the 2025 litigation remains open
The allegation is real but disputed and unproven; many users will find this an acceptable, informed risk for daily-use funds.
Anyone who specifically requires independently auditable code before trusting a wallet
The core codebase remains fully closed-source, meaning outside researchers can't verify Phantom's security claims either way.
The scorecard covers the headline judgment calls. These four tables cover the specifics we didn't want to bury in prose; the 2025 lawsuit precisely, why we score disputed and confirmed incidents differently, real chain-support expansion through 2026, and how five wallets in this series now compare on custody model.
The 2025 lawsuit, precisely
| When | What |
|---|---|
| January 21, 2025 | Security researcher @CloakdDev publicly criticizes Phantom's delayed response to a reported browser-memory key vulnerability |
| January 21, 2025 | Phantom responds publicly: "We believe it does NOT make user funds vulnerable in any way," without further technical detail |
| 2025 (filed) | Formal lawsuit filed by Liam Murphy, creator of the Wiener Doge token, claiming ~$3.1 million in damages tied to a reported $500,000 theft |
| As of this review | Litigation remains open and unresolved; Phantom disputes all allegations and states no protocol-level breach occurred |
The allegation is contested and unproven; no confirmed exploit of Phantom's own code has been independently demonstrated in either direction.
Why we score disputed and confirmed incidents differently
| Trust Wallet's 2023 CVE | Phantom's 2025 lawsuit | |
|---|---|---|
| Formally tracked (CVE)? | Yes (CVE-2023-31290) | No |
| Independently discovered | Yes, by Ledger's Donjon research team | Alleged by a researcher; not independently confirmed |
| Company acknowledgment | Confirmed; postmortem published | Disputed; company denies the allegation |
| Resolution status | Patched, users reimbursed | Open litigation, unresolved |
Both are real, relevant findings worth knowing before trusting a wallet with meaningful value, but they represent different categories of evidence, and we've weighted them accordingly rather than treating an open, disputed allegation the same as a confirmed, company-admitted vulnerability.
Real chain-support expansion through 2026
| Period | Networks supported |
|---|---|
| Early 2026 (per some sources) | As few as six blockchains |
| June 2026 | Eight: Solana, Ethereum, Base, Polygon, Sui, Monad, Bitcoin, HyperEVM |
| July 2026 (most recent) | Nine: adds Robinhood Chain |
This reflects a real, active expansion roadmap rather than a contradiction across sources; always confirm current network support directly before sending funds.
Five custody models, compared
| Exodus | MetaMask | Zengo | Trust Wallet | Phantom | |
|---|---|---|---|---|---|
| Custody model | Seed phrase | Seed phrase | MPC, keyless | Seed phrase | Seed phrase |
| Code transparency | Closed | Open | Partial | Partial | Closed |
| Disclosed/alleged incidents | None found | None found | None found | Three confirmed | One disputed, unresolved |
| Cross-device sync | Automatic | Manual | N/A (mobile-only) | Automatic | Automatic |
Phantom and Trust Wallet are the only two wallets in this series with a real security concern attached to their record, but the nature of the evidence, confirmed versus disputed, differs meaningfully between them.
We don't just want to hand you our number; we want to show you how it sits next to what other review desks and comparison sites have published. This includes one real, specifically-cited score breakdown.
Our score lands meaningfully below the aggregated industry average; most sources treat the 2025 lawsuit as a brief caveat within an otherwise glowing review, and few weight fully closed-source code as heavily as our methodology does when it's paired with a real, unresolved security allegation.
| Source | Score | Type |
|---|
Scores compiled by our editorial team from publicly available reviews as of August 2026. "Editorial estimate" means the outlet didn't publish a single numeric score, so we converted their published verdict and sentiment into a comparable 100-point figure. Verify current figures directly with each source before citing them elsewhere.
No confirmed, independently-verified breach of Phantom's own code has been demonstrated. A 2025 lawsuit alleges a browser-memory key vulnerability tied to a $500,000 theft, but Phantom disputes this, and the litigation remains open and unresolved as of our research.
A security researcher publicly flagged a potential vulnerability in how Phantom handles keys in browser memory. This escalated into a lawsuit claiming roughly $3.1 million in damages tied to a reported $500,000 theft from one user's account. Phantom denies the allegations entirely.
No, the core codebase is fully closed-source, meaning outside researchers can't independently verify its security claims, including the disputed 2025 allegation.
As of the most recent detailed source, nine networks: Solana, Ethereum, Base, Polygon, Sui, Monad, Bitcoin (Native SegWit and Taproot), HyperEVM, and Robinhood Chain. This has expanded actively through 2026, so always confirm current support before sending funds.
Yes, Phantom integrates with Ledger devices, keeping keys offline with physical confirmation required for signing across both Solana and supported EVM chains.
A Firefox extension exists but is no longer actively updated, per at least one detailed, recently-dated source. Chrome is the actively supported desktop path.
CertiK Skynet rates Phantom 85, and Coinspect rates it 65, per at least one detailed source. Named audit firms including Kudelski have also reviewed the wallet.
Multiple sources consistently recommend treating Phantom as an active wallet for spending and dApp balances, and pairing it with a Ledger for larger, longer-term holdings.
More Reviews
Exodus – Hot Wallet Review
Score: 70/100. Polished, beginner-friendly self-custody, but closed-source code and an optional cloud backup for your seed phrase are real trade-offs.
Read More
MetaMask – Hot Wallet Review
Score: 74/100. The DeFi default for real reasons: open code, broad EVM reach, but no auto-sync and a real fight over non-EVM support.
Read More
Zengo – Hot Wallet Review
Score: 71/100. No seed phrase at all via MPC, but that just relocates trust to Zengo's own servers instead of removing it.
Read More
Trust Wallet – Hot Wallet Review
Score: 70/100. Broadest chain coverage in the series, sitting on a browser extension with three real, documented security incidents since 2023.
Read More