Wallet compromised? Find what’s still there before it’s gone.

Read-only queries go straight from your browser to a Solana RPC node. Nothing is stored.

This hands control of every asset account to a new safe address in one batch: token-account owner authority, stake and withdraw authority, and (optionally) the leftover SOL. After it lands, the attacker’s key no longer controls those assets. Your safe wallet pays the fees, so the compromised wallet needs no SOL and nothing is exposed to sweeper bots.

Close empty token accounts and send the rent to the safe wallet
Sweep remaining SOL to the safe wallet

How to do it: import the compromised key into your wallet extension (Phantom, Solflare or Backpack) as a separate account, run Step 1, switch the extension to your safe account, then run Step 2. Run both within about a minute, because blockhashes expire; if they do, rebuild. Remove the old account from the extension afterwards.

Why not “assign” the wallet to another program? A wallet address cannot itself become a token account. What changes is the authority on each asset account. Assigning the system account to a non-program address would lock its SOL forever, so this tool moves the SOL instead.

1. Assume the old seed phrase is burned. Create a brand-new wallet (preferably a hardware wallet) with a new seed phrase, generated on a clean device. Never import the old phrase into it.
2. Move fast, but in the right order. Attackers often run “sweeper” bots that drain any SOL that lands in a compromised wallet. Don’t top up the old wallet with SOL for fees unless you’re ready to move everything in the same moment.
3. Stake accounts: check who holds the withdraw authority (shown in the scan). If it is still your old key, you can deactivate and withdraw; if it was changed, those funds are controlled by someone else.
4. Move highest-value assets first (staked SOL, then valuable tokens/NFTs), using a trusted wallet app or the Solana CLI, signing with the old key only as long as needed.
5. Revoke token delegations and disconnect any malicious approvals on the old wallet.
6. Find the root cause: scan your device for malware, review browser extensions, and rotate passwords and 2FA on exchange accounts.
7. Report it: file with your local cybercrime authority (e.g. IC3 in the US, NPF-NCCC in Nigeria) and keep transaction signatures as evidence.

Honest note: if an attacker holds your key, they can race you for anything remaining. This tool cannot reverse past theft or freeze funds, and nobody legitimate can.