Phantom Wallet
Summary
Phantom Wallet is a self-custody, non-custodial cryptocurrency wallet developed by Phantom Technologies, Inc., headquartered in San Francisco. Originally launched in 2021 as a Solana-focused browser extension, it has expanded to support Ethereum, Bitcoin, Polygon, Base, and Sui across browser extensions and mobile apps, with approximately 15 million monthly active users and $25 billion in self-custodied assets as of early 2025. The company is well-funded and has engaged constructively with US regulators, though it faces an active civil lawsuit alleging a browser-extension security flaw, and its users have been materially targeted by phishing impersonators and fake app-store clones.
Connected Entities
11 entities · 1 linked investigation- + 20 more
Connected Through
1 shared actor · 1 investigationDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □Sequoia Capitalorganizationalso inFTX·0
Timeline(17 events)
2021
Phantom Technologies, Inc. founded by Brandon Millman, Francesco Agosti, and Chris Kalani, all former 0x Protocol engineers
TechCrunch14 July 2021
Phantom raises $9 million Series A led by a16z, with Variant Fund, Jump Capital, DeFi Alliance, Solana Foundation, and Garry Tan participating
TechCrunchSeptember 2021
Halborn privately discloses the 'Demonic' vulnerability affecting Phantom's browser extension, in which browsers cache seed phrases in plaintext
Halborn2022
Phantom begins rolling out patches for the Demonic vulnerability; all users protected by April 2022
Phantom blog31 January 2022
Phantom raises $109 million Series B led by Paradigm at a $1.2 billion valuation; launches iOS mobile app
CoinDesk3 August 2022
Approximately 8,000 Solana-ecosystem wallets drained in exploit later attributed to Slope Wallet's insecure key logging; Phantom wallets not directly compromised but some affected users had previously imported seed phrases from Slope
CoinDeskJune 2024
Fake Phantom wallet application appears in Apple iOS App Store, harvesting seed phrases from users who attempt to import wallets
crypto.news7 June 2024
Least Authority publishes independent security audit of Phantom Wallet; findings include two non-critical deficiencies later resolved by the Phantom team
Least Authority2 December 2024
Solana web3.js npm library supply chain attack discovered; Phantom confirms it does not use the compromised library versions and is unaffected
Mitrade / The Hacker News16 January 2025
Phantom raises $150 million Series C co-led by Sequoia Capital and Paradigm at a $3 billion valuation
Phantom blog / The Block20 January 2025
Alleged hack of plaintiff Liam Murphy's wallets via Phantom browser extension; $500,000 in WIENER tokens liquidated, causing alleged 99% token value collapse
Decrypt14 April 2025
Thomas Liam Murphy and 13 co-plaintiffs file $3.1M lawsuit against Phantom Technologies and OKX in SDNY, alleging unencrypted private key storage and Commodity Exchange Act violations
Decrypt17 June 2025
Phantom Technologies submits letter to SEC Crypto Task Force arguing wallet does not constitute broker activity and does not require Exchange Act registration
SEC.gov17 March 2026
CFTC Division of Enforcement issues Staff Letter 26-09 — a no-action position — to Phantom Technologies, permitting wallet integration with regulated derivatives platforms without introducing broker registration, subject to ten conditions
CFTC.gov / CoinDesk7 April 2026
Phantom experiences temporary service outage causing incorrect balance and price display; company states user funds unaffected; service restored same day
The BlockDecision Log
- hash: GPsB81q36PtpaaE38JvrvfYs6hwMbbFL6YEUDL9cmFo3
- hash: 6NHrVie21NJp4XrdJNGHPptRqCycPVNbmZFxqyRPhmzu
- hash: 42zC6xrGgMFYjLrEJGGU8ST1VaqsPhuJxTt6ZNPsZRfx
- hash: GzH9sy38PVFRTr53Qns4HZYijZ3yAZryHWvKA8BHSBTH
- hash: 5WXFU6XJzcJ2K1ZBivkr4Au2YrofVCNjrvhq1P8NhGkr
- hash: GhddYFK5NE8FUeMHiVp1HLeJx3PAsrbwq7F2YRsYkpUx
- hash: 4tnfumtFPA3cUoo7wtRynSSmybrZomHdtkeFyez9FFaQ
- hash: ELUE9SbUiZfpXNpekWfiHKsXEFV8v1WMvmVm753SRWDM
- hash: AYou1mvo9BEgfHg67w3xi1kwTqNfvkdgzk3ksKo4NCnb
This investigation is cryptographically anchored to the Solana blockchain (9 events). 30 of 30 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 4/20/2026, 5:55:06 AM
last updated: 7/24/2026, 3:56:29 PM
avoid.net — verified advice for a post-truth world