Guide
Is Connecting Your Wallet to a Solana Site Dangerous? A Safety Checklist Before You Connect
The Short Answer
Before you connect your wallet to a Solana site, there are just three things you must always check: (1) is the URL genuinely correct, (2) what actually happens when you connect, and (3) is the signature request an "approval" or a "transfer"? Simply connecting your wallet does not move any of your assets. All the site receives on connection is your public address and the right to request signatures — your assets only move the moment you sign. That is exactly why the real danger lies not in the connection itself but in the contents of the signature request that comes afterward. This guide systematizes the pre-connection checklist, how to read a signature (approval vs. transfer), how to spot a dangerous signature, and how to check and revoke permissions after connecting. If you're unsure about "Solana wallet connect safety," run through this once first.
Key takeaways
- Connecting ≠ moving assets. All that is handed over on connection is your public address and the right to request signatures. The true turning point is the "signature."
- Unlike ERC-20, Solana can suffer an instant, full drain from a single malicious signature (a transfer instruction). Distinguishing approval from transfer is critical.
- Before connecting, check the URL, the source, and the referring site. On the signing screen, always read what is leaving your wallet. If you can't judge it, don't sign.
- Disconnect and Revoke are different things. Cutting the connection leaves on-chain delegations in place, so review and revoke permissions periodically.
What Actually Happens When You "Connect a Wallet"
When you press "Connect Wallet" on a site, a wallet like Phantom shows its standard connection modal. Two things are handed to the site here:
- Your public address (balances and transaction history are public information anyone can view)
- The right to request signatures (transactions/messages)
The important point is that at the moment of connection the site cannot move a single cent of your assets. Phantom's own documentation explains that connecting only lets an app "request" signatures and access — it cannot directly access your funds, and every transaction must be individually approved by the user. In other words, connecting is "permission to start a conversation," not "permission to hand over your wallet."
The danger becomes real only later, when the site presents a signature request and you press "Approve." So the main battleground for safety checks is not the connect button but the signing screen. If you want a systematic look at how scam sites operate, read this alongside How to Spot Fake Tokens and Fake Sites.
[Before Connecting] Checklist
Thirty seconds before you connect can prevent the vast majority of losses.
| Check item | What to look at | Danger sign |
|---|---|---|
| URL | Does the domain exactly match the official one (e.g. raydium.io)? | Misspellings, added hyphens, different TLD (.xyz, etc.) |
| Source | How did you arrive here? | Links from DMs, replies, ads, or airdrop notifications |
| Official path | Did you reach it from an official X/Docs link? | You clicked the top search ad |
| SSL/appearance | Broken layout, unnatural translation | Urgency like "connect now or it expires" |
| Prior research | Search the dApp name + "scam/drainer" | Recent reports of victims |
The golden rule: don't click links — access the official site or official docs yourself. Notification links about airdrops or "there's a problem with your wallet" are, in most cases, entryways designed to lure you into connecting and signing.
[Most Important] How to Read a Signature Request — "Approval" and "Transfer" Are Different
The single most important thing to understand on Solana is that there are two fundamentally different kinds of signatures.
- Message signing (sign message): Used for login authentication and the like. No assets move. Still, because there are schemes that "misuse an offline signature later," reject any signature whose contents are unclear.
- Transaction signing (sign transaction): Assets actually move. This is the real thing.
And within a transaction there are further gradations of severity.
| Signature contents | What happens | Danger level |
|---|---|---|
| Message signature | Authentication, etc. No asset movement | Low (reject if contents unclear) |
| Small swap/mint | The stated amount of SOL/tokens leaves | Medium (verify amount and destination) |
| transfer / SetAuthority / delegation (approve) | Control or movement of tokens or NFTs passes to the other party | High |
| Blank, or bulk movement of multiple tokens | Your entire wallet is drained | Highest (reject immediately) |
Unlike Ethereum's ERC-20 (a two-step approve → transferFrom), Solana's SPL tokens move instantly via a direct transfer. A single malicious signature can send out SOL, tokens, and NFTs all at once. That is precisely why you must read "what you are signing" every single time. This instant-drain mechanism is explained in detail in What Is a Wallet Drainer.
This article is educational, not investment advice. On Solana, SPL tokens can be drained entirely and instantly by a single malicious signature — an irreversible operation. If you cannot read from the signing screen "which token, to where, and how much" is leaving, never approve it. Signatures that rush you, move multiple assets at once, or have an unknown destination should be rejected regardless of the amount.
Tips for Spotting a Dangerous Signature
- Always read Phantom's transaction simulation. If a preview shows "assets will decrease," confirm that the decrease matches what you expect.
- If you see a warning like "Unable to simulate / this site is dangerous," stop as a rule (a legitimate site normally won't trigger this).
- A signature where multiple tokens or NFTs are all outgoing is unlikely for a simple swap — suspect a drainer.
- A signature requesting SetAuthority (transfer of authority) or an unlimited approve (delegation) is equivalent to handing over the keys to your wallet. If you can't explain its purpose, reject it.
- Even for small amounts, don't sign if the destination address is unknown. There are schemes that collect offline signatures and broadcast them in bulk later.
When in doubt, "if you don't understand the signature, don't sign it" is almost never wrong. The cost of pausing once is zero; the cost of a mistake is everything you hold.
[After Connecting] Checking and Revoking Permissions — Disconnecting Alone Is Not Enough
Very many people misunderstand this point. "Disconnect" and "Revoke" are different things.
- Disconnect: Only stops future signature requests from that site. On-chain delegations remain.
- Revoke: The operation that resets the delegate set on your token account back to zero on-chain. Only this actually removes the other party's authority.
An SPL token holds one "current delegate" and "delegated amount" per token account. If you previously permitted a delegation (approve) during a swap or mint, the other party can still move tokens within that scope even after you disconnect. So periodically check your current delegation status in the "Delegate/Approved" field of Phantom's token detail screen, or with a trusted revoke tool, and revoke anything you no longer need. The concrete steps are compiled in How to Revoke a Token Approval.
Operational guidelines:
- If you sign a suspicious transaction, immediately move your balance to a fresh wallet and revoke the old wallet's delegations.
- Keep high-value assets in a storage-only wallet you never connect (hardware recommended), and do everyday dApp connections with a small, "disposable" wallet.
- Review your delegation status once a month.
Frequently Asked Questions
Q. Can my assets be stolen just by connecting my wallet? A. No, they can't be drained by connecting alone. All that is handed over on connection is your public address and the right to request signatures; assets only move the moment you sign a transaction. The danger is in the contents of the signature request after connecting.
Q. How do "approve" and "transfer" differ? A. A transfer is an operation where assets leave right now; an approval (delegation/approve) is a grant of authority that says "this party may move funds from now on." Because Solana's SPL stores the delegate and delegated amount in the token account, leaving an approval in place leaves room to be drained later.
Q. Is it safe once I disconnect from the site? A. Not sufficient. Disconnecting only stops future signature requests; the on-chain delegation you already granted remains. For safety, you must explicitly Revoke the delegation.
Q. The signing screen is in English and I can't read its contents. What should I do? A. Do not approve a signature you can't read or understand. In particular, signatures that include bulk movement of multiple tokens, SetAuthority, or an unlimited approve are high-risk. Check the asset changes in Phantom's simulation display, and if it differs from what you expected, rejecting is the correct choice.
Sources
- Connect Phantom to an app or site – Phantom Help
- Revoke Delegate – Solana Docs
- Set Authority – Solana Docs
- From EVM to Solana: How to Avoid Phishing Scams – Keystone
- Solana Token Approvals and Revokes (Complete Guide) – TokenToolHub
A note before investing
This article is for informational purposes and is not investment advice. Crypto assets carry risks including price volatility, hacking, and loss. Make investment decisions at your own responsibility and only with funds you can afford to lose. Tax and regulatory rules may change, so always confirm the latest information from official primary sources.
Sources
FAQ
- Can my assets be stolen just by connecting my wallet?
- No, they can't be drained by connecting alone. All that is handed over on connection is your public address and the right to request signatures; assets only move the moment you sign a transaction. The danger is in the contents of the signature request after connecting, so always check that.
- How do "approve" and "transfer" differ?
- A transfer is an operation where assets leave right now; an approval (delegation/approve) is a grant of authority that says this party may move funds from now on. Because Solana's SPL stores the delegate and delegated amount in the token account, leaving an approval in place leaves room to be drained later.
- Is it safe once I disconnect from the site?
- Not sufficient. Disconnecting only stops future signature requests; the on-chain delegation (delegate) you already granted remains. For safety, you must explicitly Revoke the delegation.
- The signing screen is in English and I can't read its contents. What should I do?
- Do not approve a signature you can't read or understand. In particular, signatures that include bulk movement of multiple tokens, SetAuthority, or an unlimited approve are high-risk. Check the asset changes in Phantom's simulation display, and if it differs from what you expected, rejecting is the correct choice.
This article is informational only and is not financial, investment, or trading advice. Prices are reference snapshots and may be outdated. Always do your own research.
