Short answer: yes. Solflare is an established non-custodial wallet and one of the oldest and most-used on Solana. Outside reviewers have audited it, it warns you before you sign risky transactions, and nobody has breached its systems. The 2022 Solana drain that people sometimes pin on it came from a different wallet. As with any self-custody wallet, your biggest risks are losing your own access and getting phished.
Below: how Solflare protects you, what happened in 2022, where the real risks sit, and what to do if you're locked out.
We recover crypto wallets for a living, so we see where people lose money in practice.
What is Solflare?
Solflare is a non-custodial Solana wallet, originally built by Solrise Finance. Its web wallet launched in 2020 and its mobile apps followed in 2021, which makes it one of Solana's original wallets. It runs as a browser extension, a mobile app, and a web wallet, and it's known for making Solana staking simple. It holds SOL, SPL tokens, and Solana NFTs.
How Solflare protects your crypto
Your keys are encrypted on your device. Your recovery phrase and keys stay on your device, encrypted with your password. Solflare says plainly that it doesn't store your seed phrase and its support team can't recover it. That also means Solflare can't reset your password.
Optional encrypted cloud backup. If you turn on Quick Login, a 6-digit passcode replaces your password, and Solflare keeps an encrypted backup of your recovery phrase. The backup key is split three ways, with one part on your device, one in your Google Drive or iCloud, and one with Solflare, and any two can rebuild it. Solflare's servers never hold the phrase itself. You trade a little pure self-custody for an easier way back in.
Transaction warnings and a blocklist. Solflare simulates transactions and flags potentially malicious ones before you sign. It also keeps a blocklist of known malicious tokens and sites. Most Solana losses start with a signed drainer transaction, so these warnings protect you every day you use the wallet.
Audits and hardware support. Kudelski Security has reviewed Solflare's code, and the wallet supports Ledger hardware wallets. For larger balances, we recommend pairing Solflare with a Ledger.
Has Solflare ever been hacked?
Solflare has no documented breach and no Solflare-specific vulnerability on record. No public evidence shows its code leaking anyone's keys.
The story that needs clearing up is the August 2022 Solana drain. Attackers drained about 9,000 Solana wallets of roughly $4 million, and in the first hours of panic, people blamed several wallets, Solflare among them. The real cause was a different app: Slope's wallet had been sending users' recovery phrases in plaintext to a logging server. Solana's investigation found no flaw in the Solana protocol or in other wallets. Solflare and Phantom users lost funds only if they had imported a seed phrase originally created in Slope.
Your biggest risk is losing your own access
People lose crypto in Solflare one of two ways. They lose their own access, usually by forgetting the password to a wallet whose recovery phrase they never backed up. Or they get phished. Solflare's password reset requires your recovery phrase, and no "forgot password" email will get you back in.
Solflare also causes one specific scare. It supports several Solana derivation paths, so if you import your phrase into another wallet, or choose the wrong path, you may see an empty wallet while your funds sit safely on a different address. That's a settings issue, not a theft.
If you've forgotten the password to a Solflare wallet that's still installed, you may have a way back. Crypto Asset Recovery uses secure, offline password cracking to recover access to encrypted Solflare wallets. You only pay if we succeed.
For a recovery phrase problem, read our Solflare recovery phrase guide. For a forgotten password, see how to recover a lost Solflare password.
Solflare scams to watch for
- Fake Solflare sites and apps. Counterfeit websites and extensions steal your recovery phrase the moment you enter it. The official site is solflare.com.
- Seed-phrase phishing. Fake "support" agents and pop-ups ask for your phrase. Solflare will never ask for it.
- Fake airdrops and drainer sites. "Claim" and "connect wallet" pages trick you into signing a transaction that empties your wallet. Solflare publishes guidance on the scam tokens that show up in wallets unasked.
- Malicious approvals and address poisoning. The standard Solana drainer tactics work against Solflare users too.
If someone has already stolen your crypto, password recovery can't bring it back, because the funds have left your control. Crypto Asset Recovery handles password and recovery-phrase recovery, not fund tracing. If you've been robbed, we can refer you to a partner who investigates theft.
Best practices to stay safe on Solflare
- Back up your recovery phrase offline. Never photograph it or type it into a website.
- Install Solflare only from solflare.com or the official app stores.
- Read Solflare's transaction warnings before you sign.
- Use a Ledger for large balances.
- Ignore tokens and NFTs that show up in your wallet unasked, and never "claim" them.
Verdict: Is Solflare safe?
Yes. Solflare is a mature, audited, non-custodial Solana wallet with no breach of its own systems, and the 2022 drain that people blame on it came from Slope. Your remaining risks are the ones every self-custody wallet carries: guard your recovery phrase and read what you sign.
Already lost access or been scammed?
If you're locked out of a Solflare wallet you still control, we may be able to help. Crypto Asset Recovery recovers forgotten passwords on encrypted Solflare wallets using secure, offline techniques. If your funds were stolen, we can refer you to a partner who handles tracing.
- Forgotten password? See how to recover a lost Solflare password.
- Lost or partial recovery phrase? See the Solflare recovery phrase guide.
- Not sure where to start? Read how to find old passwords.
You only pay if we succeed. Completely risk-free.
Why Choose Crypto Asset Recovery to Recover Your Solflare Wallet?
- Secure, offline recovery. The cracking runs on air-gapped, offline machines, so your keys are never exposed online.
- Thousands of wallets recovered across Solflare, MetaMask, Trust Wallet, Blockchain.com, and more.
- Success-based pricing. You only pay if we get you back in.
- Talk to a real person. Reach out any time, and you can get on a Zoom with our founders, the father-and-son team Chris and Charles.
- Featured in BBC, Forbes, Vice, The Block, and Business Insider.
Frequently asked questions
Is Solflare legit? Yes. Solflare is a genuine non-custodial Solana wallet, one of the oldest in the Solana ecosystem, and Kudelski Security has reviewed its code.
Can Solflare be hacked? Nobody has documented a breach of Solflare's own systems. The 2022 Solana drain that people associate with it came from a different wallet, Slope. Your own wallet can still be emptied if you reveal your recovery phrase or sign a malicious transaction.
Is Solflare safe for storing a lot of crypto? It can be, especially paired with a Ledger hardware wallet. Back up your recovery phrase offline, because self-custody has no reset button.
Why does my Solflare wallet look empty after I imported my phrase? Usually because of a derivation-path mismatch, not a theft. Solflare supports several Solana paths, so your funds may sit on a different address from the same phrase. Check the alternate paths before you assume the worst.
I forgot my Solflare password. Can it be recovered? If you have your recovery phrase, re-import it to reset the password. If you've lost the phrase but Solflare is still installed, Crypto Asset Recovery may be able to recover the password offline.
