Understanding how we help you recover funds from compromised Solana wallets safely and securely
A compromised wallet is a Solana wallet where someone else has gained access to your private key or seed phrase. This could happen through:
Once your wallet is compromised, attackers often set up automated bots that monitor the wallet 24/7. The moment you deposit SOL (needed to pay transaction fees), the bot instantly sweeps it away before you can rescue your tokens.
You can't move your valuable tokens (USDC, NFTs, etc.) without SOL for transaction fees, but any SOL you deposit gets stolen immediately by the attacker's bot.
The fee-payer rescue pattern solves this by using a special Solana feature where a different wallet (the "fee-payer") can pay the transaction fees while your compromised wallet signs the transfer of your tokens to safety.
Our service automates this process in milliseconds, moving your tokens to safety before the attacker's bot can react. The entire transaction is atomic - either everything succeeds or nothing happens.
Using your browser wallet extension (Phantom, Solflare), you connect the wallet you need to rescue. Your private key never leaves your browser extension.
Our system scans your wallet and displays all your SOL and SPL tokens (USDC, USDT, etc.) with current balances. Choose which tokens you want to rescue.
Provide the safe wallet address where you want your tokens sent. Double-check this address carefully!
Our backend server creates the rescue transaction, adding compute budget instructions and setting itself as the fee-payer. The server signs the transaction first, locking it from modification.
The partially-signed transaction is sent to your browser where you review and sign it using your wallet extension. This signature authorizes the transfer of YOUR tokens.
Once both signatures are collected, the server immediately broadcasts the fully-signed transaction to the Solana network via our high-speed QuickNode RPC connection.
You receive the transaction signature with a direct link to view it on Solscan, the Solana blockchain explorer. Your tokens are now safe!
The entire process takes just a few seconds from when you click "Rescue" to when your tokens are safely transferred. This speed is essential to outpace the attacker's bots.
Your private keys NEVER leave your browser wallet extension. We cannot access your funds - only you can authorize the transfer by signing in your wallet.
Every transaction is visible on the Solana blockchain. You can verify exactly what happened, where your tokens went, and what fees were charged.
All operations happen in a single atomic transaction. Either everything succeeds or nothing happens - no partial failures that could lose your funds.
Try a test rescue with just 0.001 SOL before committing to a full rescue. Build confidence by seeing the process work with minimal risk.
We use QuickNode RPC for reliable, fast connections to Solana. Our servers are optimized for speed to outrace attacker bots.
10% service fee on rescued amounts. You keep 90%. No hidden charges, no surprises. The fee is clearly shown before you sign anything.
Never share your seed phrase or private key with anyone - including us! Legitimate services never need this information. If anyone asks for your seed phrase, it's a scam.
The fee covers our infrastructure costs (QuickNode RPC, servers), the SOL needed to pay transaction fees on your behalf, and the development/maintenance of this specialized rescue service. Without the fee-payer service, you'd lose 100% of your tokens to the attacker's bot.
Yes! Our service supports SOL and all SPL tokens (USDC, USDT, WSOL, and any other fungible tokens). For NFTs and other specialized assets, the same fee-payer pattern applies.
If the transaction fails, nothing happens - your tokens remain in the compromised wallet. This could occur if network conditions change or if the attacker's bot moved faster. You can try again, though if bots are very aggressive, you may need multiple attempts.
We literally cannot. Your wallet extension only signs what YOU approve, and you can see the exact destination address and amounts before signing. The blockchain transaction is public and verifiable. We never have access to your private key.
No! That's the whole point of the fee-payer pattern. Our server wallet pays all the transaction fees. Your compromised wallet only needs to have the tokens you want to rescue.
From clicking "Rescue" to completion typically takes 3-10 seconds depending on Solana network congestion. The dual-signature process is optimized for maximum speed to outpace attacker bots.
You should never use it again. Consider it permanently unsafe. Create a fresh wallet with a new seed phrase generated by an official wallet app. The compromised private key is known to attackers and will always be monitored.
Yes, you can rescue different tokens one at a time. Each token type (SOL, USDC, etc.) requires a separate transaction. Our service handles multiple rescues from the same compromised wallet.
You'll need to install one (we recommend Phantom or Solflare) and import your compromised wallet using its seed phrase or private key. This is necessary for the secure signing process that protects your keys.
Solana is a public blockchain, so all transactions are visible on-chain via explorers like Solscan. However, wallet addresses are pseudonymous - they're not directly linked to your real identity unless you choose to share that connection.
Now that you understand how wallet rescue works and why it's safe, you're ready to recover your tokens from that compromised wallet.
Remember to start with a test rescue if you're new to the process!