Phantom Wallet security and release history
As of 25 October 2026, this timeline lists 38 dated events in Phantom Wallet's history: security incidents, disclosed vulnerabilities, outages, scam campaigns, network changes and major releases, including 3 exploits or vulnerabilities. Most losses of Phantom users came from phantom-branded phishing, fake apps, drainers and leaked recovery phrases rather than a break of the wallet itself.
Quick facts
- What were the most serious incidents?
- Third-party wallet (Slope) (2022-08, ~$4.08M); Phantom chat (2026-02, ~$264,000); Fake iOS app (2024-06, $100,000)
- What is the latest entry?
- 2026-10-01: BNB Chain support added, bringing Phantom to nine networks.
- What is the main lesson?
- Most losses of Phantom users start outside the wallet: fake Phantom sites, apps and support numbers, drainer sites and malicious signatures. Install Phantom only from phantom.com or the verified store listing, never share your recovery phrase, and read Phantom's warnings before you sign.
Timeline
| Date | Product | Type | Reported loss | What happened | Source |
|---|---|---|---|---|---|
| 2026-10-01 | All apps | network change | — | BNB Chain support added, bringing Phantom to nine networks. | solanacompass.com |
| 2026-09-24 | All apps | network change | — | Sui support ends; funds stay on Sui and can be reached by importing the recovery phrase into a trusted Sui wallet. | docs.phantom.com |
| 2026-09-16 | All apps | network change | — | Arc (Circle's network) support added at its mainnet launch. | solanacompass.com |
| 2026-08-26 | All apps | network change | — | Monad support ends. Assets stay on Monad; Phantom warns that unsolicited 'migration' offers are scams. | help.phantom.com |
| 2026-07-23 | All apps | network change | — | Robinhood Chain support added. | solanacompass.com |
| 2026-07-12 | All apps | outage | — | Phantom acknowledges degraded performance with sends and swaps. | cryptobriefing.com |
| 2026-07-01 | All apps | audit | — | Phantom's bug bounty goes live on Cantina, paying up to $100,000 for critical bugs. | cantina.xyz |
| 2026-04-09 | Phishing site | drainer | — | Security firm GoPlus flags a fake Phantom site draining Solana wallets when users connect and approve, promoted through fake support messages. | gopluslabs.io |
| 2026-04-06 | All apps | outage | — | Outage: token prices and balances failed to update in the app until Phantom resolved it late that evening (US Eastern time); Phantom said funds were safe. | theblock.co |
| 2026-02-10 | Phantom chat | phishing | ~$264,000 | Address poisoning through Phantom's in-app chat: a victim sent 3.5 wBTC to a look-alike address, per on-chain investigator ZachXBT. | cointelegraph.com |
| 2025-12-12 | All apps | release | — | Prediction markets launch through Kalshi. | businesswire.com |
| 2025-11-24 | All apps | network change | — | Monad support at Monad mainnet launch. | phantom.com |
| 2025-09-30 | All apps | release | — | Phantom Cash, built on the CASH stablecoin, is announced with a Visa debit card; the card and bank features are for US users (not New York). | phantom.com |
| 2025-07-08 | All apps | release | — | Perpetual futures trading via Hyperliquid launches, starting with users in the EU (not available in the US or UK). | theblock.co |
| 2025-04-14 | Company | lawsuit | — | A US lawsuit alleges a key-handling flaw led to the theft of over $500,000 in tokens; Phantom called it 'entirely without merit'. No ruling found as of October 2026. | decrypt.co |
| 2025-02-06 | Extension users | phishing | — | Scam Sniffer warns of fake 'update extension' pop-ups and signature requests impersonating Phantom. | cointelegraph.com |
| 2025-01-29 | All apps | network change | — | Sui support goes live. | phantom.com |
| 2025-01-21 | All apps | vulnerability | — | A researcher publicly criticised Phantom's handling of a reported vulnerability; Phantom apologised for delays and said funds were not at risk. Details were never published. | cryptoslate.com |
| 2025-01-16 | Company | other | — | Phantom raises $150M at a $3B valuation and reports 15M monthly active users. | theblock.co |
| 2025-01-03 | Company | policy | — | Phantom says it has no plans to launch a token, after airdrop rumours. | theblock.co |
| 2024-11-25 | All apps | network change | — | Base support added. | phantom.com |
| 2024-11-20 | Company | other | — | Phantom acquires Blowfish, the transaction-security company behind its scam warnings. | gunder.com |
| 2024-11-13 | iOS | other | — | An iOS update caused some app resets; users without a recovery-phrase backup lost access. Phantom released a fix and urged everyone to back up their phrase. | theblock.co |
| 2024-10-28 | All apps | outage | — | Downtime of more than three hours showed inaccurate balances during the GRASS airdrop claims; Phantom said funds were safe. | theblock.co |
| 2024-08-15 | All apps | outage | — | A bug hid users' balances; Phantom fixed it and said funds were unaffected. | cryptoslate.com |
| 2024-06-28 | Fake iOS app | fake app | $100,000 | A fake 'Phantom' app from an unrelated developer, promoted through App Store search ads, drained users who imported their recovery phrase. | cryptoslate.com |
| 2024-06-07 | Mobile + extension | audit | — | Least Authority publishes its final audit report on the Phantom wallet: no exploitable issues found; suggested improvements resolved. | leastauthority.com |
| 2023-12-20 | All apps | network change | — | Bitcoin support, including Ordinals and BRC-20, arrives in beta. | decrypt.co |
| 2023-05-01 | All apps | network change | — | Phantom becomes multichain, adding Ethereum and Polygon. | phantom.com |
| 2023-01-30 | All apps | other | — | Phantom reports that its transaction previews scanned 85M+ transactions and blocked 18,000+ drainer transactions. | cryptonomist.ch |
| 2022-08-17 | All apps | release | — | Phantom adds a 'Burn NFT' feature to remove spam NFTs. | phantom.com |
| 2022-08-02 | Third-party wallet (Slope) | hack | ~$4.08M | About 9,230 Solana wallets were drained. Investigators traced it to the Slope wallet logging recovery phrases; Phantom users were affected only if they had used the same phrase in Slope. Phantom found no compromise of its own systems. | theblock.co |
| 2022-06-15 | Extension | vulnerability | — | Halborn publicly discloses 'Demonic' (CVE-2022-32969), which affected several browser wallets including Phantom and MetaMask; Phantom had already patched it. | halborn.com |
| 2022-04-18 | Mobile | release | — | Phantom's Android app launches. | cryptopotato.com |
| 2022-04 | Extension | fix | — | Phantom finishes rolling out patches for the 'Demonic' browser issue (session restore could save the recovery-phrase input to disk unencrypted), released between January and April 2022; no exploitation was reported. | coindesk.com |
| 2022-01-31 | Company | other | — | Phantom raises a $109M Series B at a $1.2B valuation, led by Paradigm. | theblock.co |
| 2021-07-14 | Company | other | — | Phantom raises a $9M Series A led by a16z. | blockworks.co |
| 2021-04 | Extension | release | — | Phantom's browser extension launches in beta as a Solana wallet. | blockworks.co |
How to protect yourself
Install Phantom only from phantom.com, typed in yourself, or from the store listing it links to, and check it with our download checker; never type your recovery phrase into a website or give it to "support" (Phantom has no phone support); read Phantom's transaction preview and warnings before every signature; and keep large amounts behind a Ledger. See fake Phantom scams and is Phantom safe?
Methodology and citation
Entries come from Phantom's own announcements and status updates, security researchers' reports, security researchers and reputable news coverage; each row names its source. Loss figures are as reported at the time. Journalists and researchers may cite this page; please link to it. The data is free to download on our press page. Corrections are welcome.