Phantom Wallet Review

Phantom suits people who regularly move between its supported networks and want to manage transfers and staking together.

Phantom fits these users best.

• Solana users deciding between direct validator delegation and liquid staking.
• Ledger owners who want a software interface for compatible hardware accounts.
• Users comfortable securing a Google or Apple login and maintaining an independent backup.

Look elsewhere if your daily activity requires unsupported chains or if public review of the complete application source is essential. The same goes if you want cold storage without buying and connecting separate hardware. Phantom ended Sui support on September 24, 2026, so Sui users need a different wallet.

Phantom Technologies, Inc. develops the wallet and names its leadership team publicly, and the company traces its beginnings to 2021. Its product now goes beyond a wallet interface, with Cash payments plus separate trading services alongside onchain asset management.

Phantom is a non-custodial wallet interface and works differently from an exchange deposit account. Where it stores signing keys depends on the account setup.

Local, KMS, and Hardware Accounts

Phantom offers three signing arrangements.

For KMS accounts, the device holds a separate authenticator. Phantom's service checks the request's permissions before returning a signature.

Connecting hardware keeps its signing keys on that device. Importing its recovery phrase into Phantom instead creates software access to those keys and defeats that separation.

Transaction previews and suspicious-activity warnings help identify risky requests, along with a malicious-site blocklist. They do not establish that a transaction is safe or reverse an approval after funds have moved. Disconnecting a site also does not cancel existing token permissions. Phantom's revocation guide directs Solana users to a separate tool and EVM users to approval-management guidance.

Source Code, Audits, and Privacy

Phantom's app is proprietary, although components such as the blocklist are public, so it falls short of a fully open-source application. Kudelski Security audited it in 2021 and Least Authority in 2024, and Phantom shares both reports. Those audits show outside assessment, though they do not cover every later build or feature.

Phantom's bug bounty runs on Cantina and lists a maximum reward of $100,000, although Phantom's security landing page advertises $50,000. The Cantina program's own reward schedule is the one that applies.

Self-custody does not make you anonymous, because Phantom's July 7, 2026 privacy policy allows wallet addresses to be associated with account identifiers, with an in-app opt-out. The policy also covers IP processing for security and connectivity as well as legal requirements. Phantom says its systems are not designed to connect IP addresses to identifying wallet or account information.

Vulnerabilities and Disputes

Phantom was among the browser wallets affected by the 2022 Demonic vulnerability. Under particular device-access and browser conditions, recovery phrases could be exposed. Halborn reported remediation, and Phantom said its users were protected by April 2022 after fixes began rolling out in January. That documented vulnerability belongs in the history even though it was addressed.

CryptoSlate also covered a January 2025 security dispute in which a researcher alleged a risk and Phantom denied that funds were vulnerable. That report did not establish the technical details.

A lawsuit filed in April 2025, Murphy versus Phantom Technologies, alleges that keys were exposed and stolen. A March 2026 post by Murphy's Law, a law firm associated with the plaintiffs, describes the allegation as extraction of a private key from browser memory and reports that Phantom denied wrongdoing. The claims are contested, and the public docket mirror stops in August 2025 without any later outcome.

In February 2025, Scam Sniffer warned of fake update requests targeting Phantom users, followed by prompts demanding their recovery phrases. That was credential phishing, so never give a recovery phrase to anyone offering to fix a wallet or install an update. The same applies to anyone offering to move Sui assets out of Phantom.

Phantom supports Solana and Bitcoin as well as Ethereum. Its EVM coverage adds Base and Polygon plus Robinhood Chain and HyperEVM. Monad support ended on August 26, 2026.

Phantom ended Sui support on September 24, 2026, so its interface no longer displays or transacts with Sui assets. Those assets still belong to their owners on the Sui blockchain and remain accessible through a compatible wallet with the right backup credentials. Each separately imported account needs its own backup, since the main wallet phrase does not cover it.

Bitcoin support covers both Native SegWit and Taproot addresses, while Arbitrum and Optimism are unsupported, as are BSC and Avalanche. A ticker alone is not enough to choose a deposit route, so confirm the blockchain and receiving address before sending.

Phantom's extension officially supports Chrome. Brave and Opera can run it, as can Edge, but Phantom does not promise equivalent support there. Firefox no longer receives extension updates. The supported mobile platforms are iOS and Android.

A newly created recovery-phrase wallet uses a 12-word backup, and the extension password or mobile biometrics only protect access on that device. Neither helps you recover the wallet after losing the device, so record the backup securely offline and verify that it covers each account you intend to restore.

Google or Apple login offers another way to access the wallet across devices. New accounts use KMS, and existing accounts are being migrated away from the separate four-digit PIN. Some legacy accounts may still use a PIN. Follow the instructions for your actual account, since the older login process does not apply universally.

A login-created wallet also has an exportable recovery phrase, and an offline copy gives you a portable recovery option that anyone who obtains it can use too. Secure the linked Google or Apple account with two-factor authentication.

User Reviews

Phantom wallet reviews on Trustpilot and Reddit describe different experiences. Comments in a July 2025 Reddit thread praise everyday use and Solana app access. Trustpilot complaints cover recovery after a phone change and swap outcomes, along with alleged losses. Those reports do not identify a common technical cause. The Trustpilot profile also contains an unrelated car-dealer review and recovery-service promotion, which provide no useful assessment of the wallet.

Native SOL Staking and PSOL

Opening a native SOL stake requires the browser extension and at least 1 SOL. You select a validator and keep the position in a stake account. Mobile can still display existing native positions and lets you unstake and withdraw them. After deactivation, withdrawal is a separate action whose wait follows Solana's epoch timing.

PSOL represents pooled staked SOL and is available through mobile and the extension. Rewards change the amount of SOL redeemable for each PSOL without increasing the token balance. The token can be traded or used in supported DeFi services, which a native stake cannot, and that adds pool risk plus application risk wherever it is used. Instant redemption depends on available reserves. If those run short, Phantom falls back to a native stake account that requires manual unstaking and withdrawal.

PSOL reward viewing is temporarily unavailable on mobile, so use the extension to see rewards.

Direct delegation lets you choose the validator, while PSOL gives you a transferable position whose liquidity and fees matter before you treat it as spendable SOL. Choose between the routes based on whether validator control or a transferable staking token matters more to you.

Swaps, Bridging, and Gasless Transactions

Same-chain trades route through third-party decentralized exchanges, and on mobile the destination may default to Cash, so check which asset you will receive. Cross-chain swaps use a bridge route found by LI.FI. A route displayed inside the wallet still depends on outside liquidity and bridge infrastructure, so check the destination asset and network as carefully as the price.

Some eligible Solana transactions deduct a flat fee from the token being transacted to cover the network cost. “Gasless” therefore does not necessarily mean free. Optional gasless EVM swaps use smart-account delegation and currently exclude Google or Apple wallets. Phantom warns that a compromise of the delegated contract could threaten the account's assets. Treat it as a separate account upgrade instead of a routine app update.

Hardware Connections

On mobile, Phantom connects over Bluetooth to the Ledger Nano X and Stax as well as the Flex. The extension connects by cable to the Nano S and Nano S Plus as well as the Stax and Flex. Trezor and Tangem are unsupported, as is the Ledger Nano Gen5. Check the specific model and connection method before purchase, since a generic Ledger badge does not establish compatibility for every device.

Cash, Funding, and Trading Services

Cash is a separate Solana account holding the USD-pegged CASH token, which is different from a fiat balance in a bank account. Its keys use KMS. US bank and debit-card features require identity verification and exclude New York. The card is issued by Lead Bank, with Bridge as program manager. Using those services brings the partners' terms and identity requirements into the relationship.

Fiat purchases go into Cash, since you buy USDC that converts into CASH. Outside the US funding options, regional providers include MoonPay and Banxa as well as Topper. Review the destination and provider quote instead of assuming a card purchase deposits the desired coin directly into a regular wallet account.

Phantom also offers Hyperliquid-powered perpetuals through mobile and Terminal. These are leveraged trading products with liquidation risk, and are unavailable in the US and UK. Prediction markets and tokenized equities have their own regional rules. None of those features is necessary to use the core wallet.

Phantom is free to download, and what you pay to use it depends on the action you take instead of one wallet-wide fee.

For a trade on which the 0.85% rate applies to $1,000 of value, that component is $8.50 before other costs. Slippage tolerance is not an extra fixed charge, because it only sets how far execution may move from the quote. Price impact reflects how far your own trade moves the price, given available liquidity.

Phantom's 0.85% selected-pair fee and a cross-chain quote cover different costs. A bridge route includes bridge and network charges, so the final received amount is a better basis for comparing routes than the displayed percentage alone.