Phantom Wallet Review

Phantom suits people who regularly move between its supported networks and want to manage transfers and staking together.

It fits:

• Solana users deciding between direct validator delegation and liquid staking.
• Ledger owners who want a software interface for compatible hardware accounts.
• Users comfortable securing a Google or Apple login and maintaining an independent backup.

Look elsewhere if your daily activity requires unsupported chains, if public review of the complete application source is essential, or if you want cold storage without buying and connecting separate hardware. Sui users should plan for the announced transition instead of choosing Phantom as a long-term Sui interface.

Phantom Technologies, Inc. develops the wallet. The company traces its beginnings to 2021 and publishes a named leadership team. Its product now includes more than a wallet interface, with Cash payments and separate trading services alongside onchain asset management.

Phantom's terms describe the wallet as non-custodial. It is a wallet interface, not an exchange deposit account. Where it stores signing keys depends on the account setup.

Local, KMS, and Hardware Accounts

Phantom offers three signing arrangements:

For KMS accounts, the device holds a separate authenticator. Phantom's service checks the request's permissions before returning a signature.

Connecting hardware keeps its signing keys on that device. Importing its recovery phrase into Phantom instead creates software access to those keys and defeats that separation.

Transaction previews, suspicious-activity warnings, and a malicious-site blocklist can help identify risky requests. They do not establish that a transaction is safe or reverse an approval after funds have moved. Disconnecting a site also does not cancel existing token permissions. Phantom's revocation guide directs Solana users to a separate tool and EVM users to approval-management guidance.

Source Code, Audits, and Privacy

The app is proprietary, while components such as the blocklist are public. This is not the same as a fully open-source application. Phantom publishes reports from Kudelski Security in 2021 and Least Authority in 2024. Those reports are evidence of outside assessment, not a guarantee covering every later build or feature.

The bounty program linked by Phantom is hosted on Cantina and lists a maximum reward of $100,000, checked September 8, 2026. Phantom's security landing page instead advertises $50,000. The linked program's own reward schedule is the applicable reference.

Self-custody does not imply anonymity. Phantom's July 7, 2026 privacy policy allows wallet addresses to be associated with account identifiers, with an in-app opt-out. It also describes IP processing for security, connectivity, and legal requirements, while saying its systems are not designed to connect IP addresses to identifying wallet or account information. These are the company's stated practices, not independently tested privacy guarantees.

Vulnerabilities and Disputes

Phantom was among the browser wallets affected by the 2022 Demonic vulnerability. Under particular device-access and browser conditions, recovery phrases could be exposed. Halborn reported remediation, and Phantom said its users were protected by April 2022 after fixes began rolling out in January. That documented vulnerability belongs in the history even though it was addressed.

CryptoSlate also covered a January 2025 security dispute in which a researcher alleged a risk and Phantom denied that funds were vulnerable. That report did not establish the technical details.

In April 2025, users filed Murphy v. Phantom Technologies over alleged key exposure and theft. A March 2026 post by Murphy's Law, a plaintiff-associated law firm, describes the allegation as extraction of a private key from browser memory and reports that Phantom denied wrongdoing. These are contested claims. The public docket mirror stops in August 2025 and does not establish any subsequent outcome.

In February 2025, Scam Sniffer warned of fake update requests targeting Phantom users, followed by prompts demanding their recovery phrases. This was credential phishing. Never give a recovery phrase to someone offering to fix a wallet, install an update, or migrate assets. The announced Sui transition does not require handing credentials to a helper.

Phantom's supported networks on September 9, 2026 are Solana, Ethereum, Base, Polygon, Robinhood Chain, Bitcoin, HyperEVM, and Sui. Monad is absent following an announced August 26, 2026 cutoff.

Sui support is scheduled to end on September 24, 2026. Phantom says its interface will then stop displaying and transacting with Sui assets. Ownership on the Sui blockchain does not disappear. Users can access those assets through a compatible wallet using the appropriate backup credentials. Separately imported accounts need their own backups, not just the main wallet phrase.

Bitcoin support includes both Native SegWit and Taproot. An asset's ticker alone is not sufficient to choose a deposit route: confirm the blockchain and receiving address before sending. Arbitrum, Optimism, BSC, and Avalanche are explicitly unsupported in Phantom's network guide.

Chrome is the officially supported extension browser. Brave, Opera, and Edge can run the Chromium extension, but Phantom does not promise equivalent support. Firefox no longer receives extension updates. The supported mobile choices are iOS and Android.

A newly created recovery-phrase wallet uses a 12-word backup. The extension password or mobile biometric authentication protects access on that device, not recovery after losing it. Record the backup securely offline and verify that it covers each account you intend to restore.

Google or Apple login offers another way to access the wallet across devices. New accounts use KMS, and existing accounts are being migrated away from the separate four-digit PIN. Some legacy accounts may still use a PIN. Follow the instructions for your actual account, since the older login process does not apply universally.

A login-created wallet also has an exportable recovery phrase. An offline copy provides a portable recovery option, but anyone who obtains it can use it too. Secure the linked Google or Apple account with two-factor authentication.

User Reviews

Phantom wallet reviews on Trustpilot and Reddit describe different experiences. Comments in a July 2025 Reddit thread praise everyday use and Solana app access. Trustpilot complaints include phone-change recovery, swap outcomes, and alleged losses. Those reports do not identify a common technical cause. The Trustpilot profile also contains an unrelated car-dealer review and recovery-service promotion, which provide no useful assessment of the wallet.

Native SOL Staking and PSOL

Opening a native SOL stake requires the browser extension and at least 1 SOL. You select a validator and keep the position in a stake account. Mobile can still display, unstake, and withdraw existing native positions. After deactivation, withdrawal is a separate action, and the wait follows Solana's epoch timing.

PSOL is available through mobile and the extension. It represents pooled staked SOL. Rewards change the amount of SOL redeemable for each PSOL without increasing the token balance. Unlike a native stake, the token can be traded or used in supported DeFi services. That adds pool and, when used elsewhere, application risk. Instant redemption depends on available reserves. If those are insufficient, Phantom describes a fallback to a native stake account that requires manual unstaking and withdrawal.

As of September 9, 2026, Phantom's PSOL help page says reward viewing is temporarily unavailable on mobile and directs users to the extension.

Direct delegation gives the user validator choice. PSOL offers a transferable position, but its liquidity and fees should be considered before treating it as immediately spendable SOL. Choose between the routes based on whether validator control or a transferable staking token matters more to you.

Swaps, Bridging, and Gasless Transactions

Same-chain trades route through third-party decentralized exchanges. On mobile, the destination may default to Cash, so check which asset you will receive. Cross-chain swaps use a bridge route, with Phantom's current guide naming LI.FI as the route finder. A route displayed inside the wallet still depends on outside liquidity and bridge infrastructure. Check the destination asset and network as carefully as the price.

Some eligible Solana transactions deduct a flat fee from the token being transacted to cover the network cost. “Gasless” therefore does not necessarily mean free. Optional gasless EVM swaps use smart-account delegation and currently exclude Google or Apple wallets. Phantom warns that a compromise of the delegated contract could threaten the account's assets. This is a separate account upgrade, not a routine app update.

Hardware Connections

Phantom lists Ledger Nano X, Stax, and Flex for mobile Bluetooth connections. Its extension hardware table names Nano S, Nano S Plus, Stax, and Flex over cable. Check the specific model and connection method before purchase, since a generic Ledger badge does not establish compatibility for every device. The same table lists Trezor, Tangem, and Ledger Nano Gen5 as unsupported.

Cash, Funding, and Trading Services

Cash is a separate Solana account holding the USD-pegged CASH token, not a fiat balance in a bank account. Its keys use KMS. US bank and debit-card features require identity verification and exclude New York. The card is issued by Lead Bank, with Bridge as program manager. Using those services brings the partners' terms and identity requirements into the relationship.

Phantom's current funding guide sends fiat purchases into Cash. Outside its US funding options, available providers include MoonPay, Banxa, and Topper, depending on region. The guide describes purchasing USDC that converts into CASH. Review the destination and provider quote instead of assuming a card purchase deposits the desired coin directly into a regular wallet account.

Phantom also offers Hyperliquid-powered perpetuals through mobile and Terminal. These are leveraged trading products with liquidation risk, and are unavailable in the US and UK. Prediction markets and tokenized equities have their own regional rules. None of those features is necessary to use the core wallet.

Phantom is free to download. The cost of using it depends on the action, not a single wallet-wide fee.

For a trade on which the 0.85% rate applies to $1,000 of value, that component is $8.50 before other costs. Slippage tolerance is not another fixed charge: it controls how far execution may move from the quote. Price impact reflects how far your own trade moves the price, given available liquidity.

Phantom's 0.85% selected-pair fee and a cross-chain quote cover different costs. A bridge route includes bridge and network charges, so the final received amount is a better basis for comparing routes than the displayed percentage alone.