Is Phantom safe?

Short answer

Phantom scores 56/100 (Fair). It is a self-custody software wallet made by Phantom Technologies, Inc. (United States). Its code is not open source, the latest independent audit was by Least Authority in June 2024, and 1 security incident is on record, none with user losses through the wallet itself.

How Phantom scores

Safety score

56/100

Fair

Write the recovery phrase on paper or metal, never in a photo or cloud note. Install wallets only from the maker’s own site or the official app store.

How the score works

Code transparency0/25

The code is not open source, so outsiders rely on audits and the maker’s word.

Independent audits10/20

Latest published audit: Least Authority, June 2024, more than two years ago.

Key storage12/20

Keys are kept encrypted on your phone or computer, so malware on that device is the main risk.

Incident record24/25

1 incident on record, 0 in the last three years. Recent incidents and losses weigh more.

Company10/10

Run by Phantom Technologies, Inc., a named company in United States.

Phantom at a glance

  • Type: software wallet
  • Available on: browser extension, iOS, Android
  • Key storage: Recovery phrase. Self-custodial; keys derive from a Secret Recovery Phrase stored encrypted on the device. Optional Google/Apple login encrypts the seed and splits the key via Shamir sharing between Phantom and the Juicebox network, recoverable with login + 4-digit PIN. Hardware wallets can be connected.
  • Networks: EVM chains, Bitcoin and Solana. Help center lists 8 supported networks: Solana, Ethereum, Base, Polygon, HyperEVM, Robinhood Chain, Arc, Bitcoin (Native SegWit/Taproot). Sui support ended 2026-09-24; Monad support ended 2026-08-26. BSC, Arbitrum, Optimism, Avalanche, Unichain, Linea not supported.
  • Company: Phantom Technologies, Inc. (United States)
  • Closed: The wallet code is not public.
  • App ratings: App Store: 4.8 from 64,217 ratings; Google Play: 4.4 from 153,000 ratings

Has Phantom been hacked?

  • June 2022 · Vulnerability
    Halborn-disclosed 'Demonic' flaw (CVE-2022-32969): browser session-restore could save a Secret Recovery Phrase typed into the extension's import field to disk in plain text. Phantom fixed it by April 2022 by splitting phrase entry across multiple inputs; no fund loss reported by Phantom. Source

Phantom security audits

  • Least Authority, June 2024: Phantom Wallet codebase: key derivation, key and password encryption, storage and other security-critical components
  • Kudelski Security, May 2021: Phantom Wallet application on Solana: architecture and code review (0 high, 1 medium, 13 low findings)

Crypto cards that work with Phantom

No card in our database spends directly from Phantom. These self-custody cards work with a wallet you control:

Other wallet safety checks

Frequently asked questions

Is Phantom safe?
Phantom scores 56/100 (Fair). It is a self-custody software wallet made by Phantom Technologies, Inc. (United States). Its code is not open source, the latest independent audit was by Least Authority in June 2024, and 1 security incident is on record, none with user losses through the wallet itself.
Has Phantom ever been hacked?
1 security incident involving Phantom is on record, the latest in June 2022. None caused user losses through the wallet itself.
Is Phantom open source?
The code is not open source, so outsiders rely on audits and the maker’s word. The wallet code is not public.
Is there a crypto card for Phantom?
No card in our database spends directly from Phantom. A self-custody card such as the MetaMask Card can be funded from any wallet you control.

Sources

  1. Phantom Terms of Use (updated 2026-03-17) · checked September 29, 2026
  2. Phantom download page · checked September 29, 2026
  3. Phantom security page · checked September 29, 2026
  4. Phantom audit-reports repository · checked September 29, 2026
  5. Phantom GitHub organization (public repos: SDKs, blocklist, demos; no wallet source) · checked September 29, 2026
  6. Least Authority - Phantom Wallet Final Audit Report (7 June 2024) · checked September 29, 2026
  7. Kudelski Security - Phantom Security Assessment (7 May 2021) · checked September 29, 2026
  8. Phantom Bug Bounty Program (Cantina) · checked September 29, 2026
  9. Keeping Phantom safe from the 'Demonic' critical vulnerability · checked September 29, 2026
  10. BleepingComputer - MetaMask, Phantom warn of flaw that could steal your crypto wallets · checked September 29, 2026
  11. The Block - Phantom reports temporary service outage affecting in-app balances · checked September 29, 2026
  12. Phantom Help - Supported networks (chains) in Phantom · checked September 29, 2026
  13. Phantom Help - Ending support for Sui in Phantom · checked September 29, 2026
  14. Phantom Help - Create a new wallet with a Google or Apple account · checked September 29, 2026
  15. Phantom blog - Deep dive: log in to Phantom with email · checked September 29, 2026
  16. Phantom Cash (Visa prepaid debit card) · checked September 29, 2026
  17. Phantom - iOS App Store · checked September 29, 2026
  18. Phantom - Google Play · checked September 29, 2026