Security
Security & how Solstack works
Non-custodial, no backend touching your tokens, and a wallet popup that tells you exactly what to expect before you sign.
Non-custodial, end to end
Solstack never holds your funds or your private keys. Your wallet — Phantom, Solflare, Backpack, whatever you use — holds the keys. Every transaction is built in your browser from the form you filled in, then handed to your wallet for you to review and approve. Solstack has no way to move anything without that approval; see the non-custodial model for the full walkthrough.
No backend touches your tokens
Solstack is almost entirely client-side code that runs in your browser and talks directly to the Solana RPC endpoint your wallet or network selection points to. The only server-side code in the entire product is a rate-limited devnet faucet, which sees a wallet address and an IP address just long enough to enforce a cooldown and nothing else — it never touches mainnet, and it can't move a token or a fee. (A couple of opt-in features, like saving Holder Snapshots to a wallet, use a backend for storage; see the privacy policy for the full list.) That's unusual for a token toolkit, and worth checking for yourself rather than taking on faith.
What each approval should show
Wallet drainers work by hiding a dangerous instruction inside a transaction that looks routine, or by asking for a broad, standing approval instead of a one-time transfer. The best defense is knowing what a legitimate Solstack transaction looks like before you sign it, so anything else stands out immediately.
| Multisender / Airdrop | One Transfer or TransferChecked instruction per recipient, to the exact addresses and amounts you entered — nothing else. No Approve, no delegate. |
|---|---|
| SPL / Token-2022 Creator | CreateAccount, InitializeMint and metadata instructions, plus a fee transfer to Solstack's fee wallet. If you chose to revoke an authority, one SetAuthority instruction per authority you revoked — never one that hands an authority to a third-party address. |
| Token Manager (revoke / burn / update metadata) | Exactly the single action you clicked: one SetAuthority (always setting it to None, never to another address), one Burn, or one metadata-update instruction. Not a bundle of unrelated instructions. |
| Token Locker / LP Locker | A transfer of the exact amount you specified into a program-owned lock account with the unlock terms you set. Your wallet keeps the ability to see and later claim from that lock — the tool never asks for a blanket transfer authority. |
| Launch tools (pump.fun, letsbonk.fun, Meteora DBC, StonkFun) | Mint creation plus the launchpad program's own pool-creation instructions, and — only if you opted into a dev buy — one swap instruction for the exact SOL amount you set. |
| Read-only tools (Inspectors, Snapshot, Status) | No transaction and no wallet popup at all — these only read public on-chain data. |
SetAuthority handing control to a Solstack-owned address, and never requests a blanket or unlimited token approval. If a wallet popup shows either of those, or shows more instructions than the action you took should need, reject it and get in touch at support@solstack.xyz.Verify it yourself
- Switch to devnet in the top bar and run the flow there first — devnet SOL is free from the faucet, so you can see exactly what a tool does at zero risk before touching mainnet.
- When your wallet shows the approval, read the instruction list it displays (Phantom and Solflare both expand this) rather than just the summary line, and confirm it matches what this page says to expect for that tool.
- After signing, open the transaction on Solana Explorer or Solscan using the signature your wallet or Solstack shows, and confirm the instructions and balances match what you approved.