Phantom
Best for open-source verification
How it rates
- Source published in a public repository
- No dedicated security page identified at this check
- Terms not found at the conventional address at this check
Each indicator scores 2, 1 or 0. A pillar is the points earned over the points available; the overall score is the weighted sum. Every source below is public — check any of them yourself.
- Met
- PartialSecurity documentation or disclosure page published
Published at a documented URL; automated retrieval blocked at this check.
help.phantom.com/ - PartialUser documentation reachable without an account
Published at a documented URL; automated retrieval blocked at this check.
help.phantom.com/ - MetPublisher identifiable from its own repository organisation
Repository published under Phantom.
github.com/phantom - Met
- Met
- Not metTerms or legal documentation public
Not found at the conventional address at this check.
- PartialDocumentation states how the product is funded or priced
Published at a documented URL; automated retrieval blocked at this check.
help.phantom.com/ - Met
- Met
- Met
- Met
- Met
- PartialDocumentation site published
Published at a documented URL; automated retrieval blocked at this check.
help.phantom.com/ - Not metSecurity posture stated publicly
No dedicated security page identified at this check.
- Met
- Met
- Not metSecurity or disclosure page published
Not identified at this check.
- Not metTerms or legal documentation published
Not found at the conventional address at this check.
- PartialSupport or help resource published
Published at a documented URL; automated retrieval blocked at this check.
help.phantom.com/
- Met
- PartialDocumentation reachable
Published at a documented URL; automated retrieval blocked at this check.
help.phantom.com/ - Met
- Not metSecurity page reachable
Not identified.
- Not metLegal documentation reachable
Not found at the conventional address.
The dominant Solana wallet, now extended to Ethereum and Bitcoin, with transaction preview and spam filtering built for high-frequency use.
Our assessment
Phantom is to Solana what MetaMask is to Ethereum: the wallet almost every application is built and tested against. It has since expanded to Ethereum, Polygon, Base and Bitcoin, but its centre of gravity remains Solana, where its integration depth is unmatched.
Built for how Solana is actually used
Solana users trade, mint and interact far more frequently than Ethereum users, because fees permit it. Phantom is designed for that rhythm — fast approvals, built-in swaps, NFT display, staking — and it also means more signature prompts per week, which is precisely the environment where a careless approval happens.
Transaction preview and burn protection
The wallet shows simulated outcomes and warns on known malicious sites, and it filters spam NFTs and tokens airdropped into wallets as bait. On a chain where sending unsolicited tokens costs almost nothing, that filtering is a genuine safety feature rather than cosmetic tidying.
What we could not verify
Source is published under the vendor organisation and documentation is reachable, but the security page and legal terms were not retrievable at conventional addresses, and six further indicators returned automated-verification blocks. The score reflects the retrievable evidence, not the quality of the software.
Who it suits
Phantom fits Solana users first and foremost, plus anyone wanting one app across Solana, Ethereum and Bitcoin. Heavy EVM DeFi users will still want MetaMask or Rabby alongside it for dapp compatibility and approval management.
How rivals compare
Frequently asked
Does this score mean Phantom is safe?
No. It measures what a user can verify before installing: published source, documented security posture, open documentation and an identifiable publisher. Runtime key handling is not tested by us.
Why does open source matter for a wallet?
It is the one substantive property an outsider can check without reverse-engineering the app. Everything else requires trusting the publisher or a third-party audit.
What would raise this score?
Publishing source, a dedicated security page, open documentation and terms at stable public addresses — all checkable by anyone.