Verify a decision

{"actor":"system:backfill","investigation_id":"b78b0d00-e43c-4032-be34-4d7e0cd1f1a2","kind":"publish","page_slug":"glow-wallet","published_at":"2026-06-01T04:17:57.369Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Glow Wallet","sections":[{"content":"Glow Wallet is a non-custodial Solana wallet product developed by Luma Labs, Inc. The product is available as a browser extension for Chrome, Edge, Firefox, and Brave, and as a native iOS and Android application accessible at glow.app. The app was first published on the iOS App Store under the developer account Luma Labs, Inc., and is listed under the Android package name com.luma.wallet.prod. The Chrome extension carries approximately 10,000 users and was last updated on November 25, 2024 (version 0.61.0). The iOS application was at version 1.6.3 as of August 2024, when Luma Labs noted iOS 18 support. As of the knowledge cutoff for this investigation (mid-2026), the glow.app domain is active and the product appears maintained, with no public announcement of discontinuation. GitHub activity under the glow-xyz organization shows the glow-js repository was last updated in November 2024, and the nftoken repository in April 2024, indicating slowing but not halted development.","heading":"Project Overview and Status","severity":"low","sources":[{"credibility":2,"name":"Glow Wallet Chrome Web Store listing","type":"official","url":"https://chromewebstore.google.com/detail/glow-solana-wallet-beta/ojbcfhjmpigfobfclfflafhblgemeidi?hl=en"},{"credibility":2,"name":"Glow Solana Wallet – App Store (Apple)","type":"official","url":"https://apps.apple.com/us/app/glow-solana-wallet/id1599584512"},{"credibility":2,"name":"Glow Wallet official website","type":"official","url":"https://glow.app/"},{"credibility":2,"name":"glow-xyz GitHub organization","type":"official","url":"https://github.com/glow-xyz"}]},{"content":"The wallet is published by Luma Labs, Inc., a San Francisco company whose principal address has been listed at 265 Castro Street, San Francisco, CA 94114. The company was co-founded in 2020 by Danqing Liu (known publicly as Dan Liu) and Victor Pontis. Dan Liu serves as CEO; Victor Pontis is co-founder. Both individuals are publicly identified with verifiable professional histories: Dan Liu's background includes design and engineering roles at Stripe, Uber, and Salesforce, and he holds a LinkedIn profile under the name Danqing Liu. Victor Pontis has prior engineering experience at Benchling and Palantir Technologies and maintains a public GitHub profile (github.com/vpontis). Luma is primarily known as an event-hosting platform that grew significantly post-2020; Glow Wallet was a secondary product developed by the same team. The identity of the core Glow development team is reasonably transparent at the founder level, which is a positive signal relative to anonymous or pseudonymous wallet projects. No named security researchers or dedicated security team leads are publicly identified for the Glow product specifically.","heading":"Developer Identity and Team Transparency","severity":"low","sources":[{"credibility":2,"name":"Dan Liu personal website – Luma and Glow connection","type":"official","url":"https://danliu.xyz/"},{"credibility":2,"name":"Victor Pontis LinkedIn – Co-Founder at Luma","type":"other","url":"https://www.linkedin.com/in/vpontis/"},{"credibility":2,"name":"Glow Solana Wallet – Google Play listing (Luma Labs developer)","type":"official","url":"https://play.google.com/store/apps/details?id=com.luma.wallet.prod"},{"credibility":3,"name":"Glow Wallet by Luma Labs, Inc. – AppAdvice","type":"other","url":"https://appadvice.com/app/glow-solana-wallet/1599584512"}]},{"content":"Glow Wallet is a self-custodial (non-custodial) software wallet. Private keys are generated and stored locally on the user's device, not on servers controlled by Luma Labs. The Chrome Web Store listing declares that the developer does not sell user data to third parties and does not use data for purposes unrelated to core wallet functionality. As a hot wallet connected to the internet, Glow does not provide cold storage capabilities; users seeking air-gapped security must use a hardware wallet. The wallet does not publicly document hardware wallet support in its primary marketing material, though some third-party reviews note hardware wallet integration guidance. Users retain sole responsibility for safeguarding their seed phrase; loss of the seed phrase means permanent loss of access with no recovery mechanism offered by Luma Labs. This is consistent with industry-standard non-custodial wallet architecture.","heading":"Custody Model and Key Management","severity":"low","sources":[{"credibility":2,"name":"Glow Wallet Chrome Web Store – privacy declaration","type":"official","url":"https://chromewebstore.google.com/detail/glow-solana-wallet-beta/ojbcfhjmpigfobfclfflafhblgemeidi?hl=en"},{"credibility":2,"name":"How Safe Is Glow Wallet for Solana Users? – SwissBorg Academy","type":"research","url":"https://academy.swissborg.com/en/learn/glow-wallet"}]},{"content":"Glow Wallet's documented security features include: pre-submission transaction simulation that checks for malicious activity and blocks suspicious requests before a user approves a transaction; industry-standard encryption for local key storage; biometric authentication support on compatible mobile devices; and automatic session timeouts. The product has been noted by reviewers as an early implementer of transaction simulation within the Solana wallet ecosystem. Glow's Chrome Web Store publisher record shows no history of violations. No public independent security audit report for Glow Wallet's core codebase has been identified in available sources; Solana Compass notes the project planned to engage third-party auditors but no completed audit report was found. A code-quality issue was filed in June 2022 against the @solana/wallet-adapter-glow npm package (GitHub issue #450), noting that the Glow adapter contained code copied from Phantom's adapter that included workarounds potentially unnecessary for Glow. This was a code hygiene concern, not a vulnerability affecting user funds, and it was flagged in an open-source context. The core wallet application has not been the subject of any publicly reported exploit, private-key exfiltration, or breach.","heading":"Security Features and Transaction Safety","severity":"medium","sources":[{"credibility":2,"name":"How Safe Is Glow Wallet for Solana Users? – SwissBorg Academy","type":"research","url":"https://academy.swissborg.com/en/learn/glow-wallet"},{"credibility":2,"name":"Glow adapter contains code from Phantom adapter – GitHub Issue #450","type":"other","url":"https://github.com/solana-labs/wallet-adapter/issues/450"},{"credibility":2,"name":"Glow official website – transaction simulation feature description","type":"official","url":"https://glow.app/"},{"credibility":2,"name":"Glow on Solana – Solana Compass project review","type":"research","url":"https://solanacompass.com/projects/glow"}]},{"content":"In August 2022, a widely publicized attack drained approximately $4.1 million from roughly 9,231 Solana wallets over approximately four hours. Investigation by Solana developers and security researchers attributed the attack to the Slope Wallet application for iOS and Android, which had inadvertently transmitted users' private key material to an application monitoring service (Sentry) without scrubbing sensitive data. Phantom, Trust Wallet, and other wallets were among the affected addresses, but only in cases where users had previously imported or generated their seed phrase within Slope. Glow Wallet was not identified as a vector or contributing factor in this incident, and no Glow-specific exposure was publicly reported. The incident is relevant context for the broader Solana wallet ecosystem and illustrates risks associated with mobile wallet applications that log sensitive data through third-party analytics services.","heading":"The August 2022 Solana Ecosystem Attack","severity":"low","sources":[{"credibility":1,"name":"Solana – 8/2/2022 Application Wallet Incident Update","type":"official","url":"https://solana.com/news/8-2-2022-application-wallet-incident"},{"credibility":2,"name":"CoinDesk – Solana's $6M Exploit Likely Tied to Slope Wallet","type":"news_article","url":"https://www.coindesk.com/business/2022/08/03/solanas-latest-6m-exploit-likely-tied-to-slope-wallet-devs-say"},{"credibility":1,"name":"TechCrunch – Solana wallet hack, thousands of wallets drained","type":"news_article","url":"https://techcrunch.com/2022/08/03/solana-wallet-hack/"},{"credibility":2,"name":"Slope Wallet Solana Hack – Sentry Blog","type":"news_article","url":"https://blog.sentry.io/slope-wallet-solana-hack/"}]},{"content":"Glow Wallet has received broadly positive user reviews focused on design quality and user experience. The iOS App Store listing shows a 4.5-star rating based on 210 reviews as of August 2024. The Chrome extension carries a 3.9-star rating from 27 reviews. Raj Gokal, co-founder of Solana, has been quoted on the Glow website as endorsing the design quality: \"Great designers are finally coming to crypto.\" Third-party reviews characterize Glow as design-forward and accessible relative to competitors such as Phantom, though the wallet is noted to have a shorter operational history. No significant fraud complaints, scam reports, or community controversies specific to Glow Wallet have been identified in reviewed sources. The project has a smaller user base than leading Solana wallets such as Phantom and Backpack.","heading":"Reputation and Community Reception","severity":"low","sources":[{"credibility":2,"name":"Glow Solana Wallet – App Store (Apple), rating and reviews","type":"other","url":"https://apps.apple.com/us/app/glow-solana-wallet/id1599584512"},{"credibility":2,"name":"Glow Wallet Chrome Web Store – user ratings","type":"other","url":"https://chromewebstore.google.com/detail/glow-solana-wallet-beta/ojbcfhjmpigfobfclfflafhblgemeidi?hl=en"},{"credibility":2,"name":"Glow official website – Raj Gokal endorsement","type":"official","url":"https://glow.app/"}]},{"content":"Beyond core wallet functionality, Glow has developed a decentralized identity system called Glow ID, described as a social identity stored on the Solana blockchain. Glow ID stores user profile data including avatar, bio, and social links on-chain, with the stated aim of providing a portable identity layer for Web3 applications. The feature has been promoted via the project's X account and described in third-party directories. Glow also offers in-app SOL staking, a spam token burner (allowing users to burn unwanted tokens in exchange for reclaimed SOL rent), zero-fee token swaps, and NFT browsing functionality. An nftoken repository on the glow-xyz GitHub proposes a simplified NFT standard for Solana. These features position Glow as a broader ecosystem tool beyond simple token transfer, though the scale of adoption for Glow ID specifically is not publicly documented.","heading":"Glow ID and Additional Features","severity":"low","sources":[{"credibility":2,"name":"Glow on Solana – Solana Compass project review","type":"research","url":"https://solanacompass.com/projects/glow"},{"credibility":2,"name":"glow-xyz/nftoken – GitHub repository","type":"official","url":"https://github.com/glow-xyz"},{"credibility":2,"name":"Glow official website – feature overview","type":"official","url":"https://glow.app/"}]},{"content":"No regulatory actions by the SEC, CFTC, DOJ, or other government bodies against Glow Wallet or Luma Labs, Inc. have been identified in publicly available records. No lawsuits, enforcement orders, or sanctions lists entries have been found for the entity or its named founders. As a non-custodial wallet that does not hold user funds, Glow is not subject to the same money-transmission licensing requirements as custodial exchanges, which reduces its regulatory surface area. The product does not issue a token, operate a lending facility, or manage pooled user funds.","heading":"Regulatory and Legal Status","severity":"low","sources":[{"credibility":1,"name":"CFTC Enforcement Actions – no entry found for Glow or Luma Labs","type":"regulatory","url":"https://www.cftc.gov/LawRegulation/EnforcementActions/index.htm"}]}],"sources_used":[{"credibility":2,"name":"Glow Wallet official website","type":"official","url":"https://glow.app/"},{"credibility":2,"name":"Glow Solana Wallet – Apple App Store","type":"official","url":"https://apps.apple.com/us/app/glow-solana-wallet/id1599584512"},{"credibility":2,"name":"Glow Solana Wallet – Google Play Store","type":"official","url":"https://play.google.com/store/apps/details?id=com.luma.wallet.prod"},{"credibility":2,"name":"Glow Solana Wallet Beta – Chrome Web Store","type":"official","url":"https://chromewebstore.google.com/detail/glow-solana-wallet-beta/ojbcfhjmpigfobfclfflafhblgemeidi?hl=en"},{"credibility":2,"name":"glow-xyz GitHub organization","type":"official","url":"https://github.com/glow-xyz"},{"credibility":2,"name":"Dan Liu personal website","type":"official","url":"https://danliu.xyz/"},{"credibility":2,"name":"Victor Pontis – LinkedIn","type":"other","url":"https://www.linkedin.com/in/vpontis/"},{"credibility":2,"name":"How Safe Is Glow Wallet for Solana Users? – SwissBorg Academy","type":"research","url":"https://academy.swissborg.com/en/learn/glow-wallet"},{"credibility":2,"name":"Glow on Solana – Solana Compass","type":"research","url":"https://solanacompass.com/projects/glow"},{"credibility":2,"name":"Glow adapter contains hacks from Phantom adapter – GitHub Issue #450","type":"other","url":"https://github.com/solana-labs/wallet-adapter/issues/450"},{"credibility":1,"name":"Solana – 8/2/2022 Application Wallet Incident Update","type":"official","url":"https://solana.com/news/8-2-2022-application-wallet-incident"},{"credibility":2,"name":"CoinDesk – Solana's $6M Exploit Likely Tied to Slope Wallet","type":"news_article","url":"https://www.coindesk.com/business/2022/08/03/solanas-latest-6m-exploit-likely-tied-to-slope-wallet-devs-say"},{"credibility":1,"name":"TechCrunch – Thousands of Solana Wallets Drained in Multimillion-Dollar Exploit","type":"news_article","url":"https://techcrunch.com/2022/08/03/solana-wallet-hack/"},{"credibility":2,"name":"Slope Wallet Solana Hack – Sentry Blog","type":"news_article","url":"https://blog.sentry.io/slope-wallet-solana-hack/"},{"credibility":3,"name":"Glow Wallet by Luma Labs, Inc. – AppAdvice","type":"other","url":"https://appadvice.com/app/glow-solana-wallet/1599584512"},{"credibility":2,"name":"Glow – X/Twitter account","type":"official","url":"https://x.com/glowwallet"},{"credibility":1,"name":"CFTC Enforcement Actions database","type":"regulatory","url":"https://www.cftc.gov/LawRegulation/EnforcementActions/index.htm"}],"summary":"Glow Wallet is a non-custodial Solana wallet developed by Luma Labs, Inc., a San Francisco-based company co-founded by Danqing (Dan) Liu and Victor Pontis. Available as a browser extension and mobile app since early 2022, it is marketed as a design-forward wallet with transaction simulation, in-app staking, zero-fee swaps, and a decentralized identity system called Glow ID. No major security breaches specific to Glow have been publicly reported, and no regulatory actions have been identified against the project or its developer.","timeline":[{"date":"2020-01-01","event":"Luma Labs, Inc. founded in San Francisco by Danqing (Dan) Liu and Victor Pontis as an online event hosting platform.","source":"Dan Liu personal website","source_url":"https://danliu.xyz/"},{"date":"2021-12-01","event":"Glow Wallet project initiated; Solana Compass lists December 2021 as founding date for the Glow project.","source":"Solana Compass – Glow project page","source_url":"https://solanacompass.com/projects/glow"},{"date":"2022-01-01","event":"Glow Wallet launched on iOS, making it available on the Apple App Store for the first time.","source":"Glow Wallet App Store listing","source_url":"https://apps.apple.com/us/app/glow-solana-wallet/id1599584512"},{"date":"2022-06-27","event":"GitHub issue #450 opened against the @solana/wallet-adapter-glow npm package, noting code copied from Phantom adapter containing unnecessary workarounds. A code hygiene issue, not a user-funds vulnerability.","source":"GitHub – solana-labs/wallet-adapter issue #450","source_url":"https://github.com/solana-labs/wallet-adapter/issues/450"},{"date":"2022-08-02","event":"Broad Solana ecosystem attack attributed to Slope Wallet drains approximately $4.1 million from ~9,231 wallets. Glow Wallet is not identified as a contributing factor or affected vector.","source":"Solana – 8/2/2022 Application Wallet Incident Update","source_url":"https://solana.com/news/8-2-2022-application-wallet-incident"},{"date":"2022-10-01","event":"Glow Wallet announces Glow ID, a decentralized social identity system stored on the Solana blockchain, positioning the wallet as more than a transaction tool.","source":"Glow – X/Twitter account (glowwallet)","source_url":"https://x.com/glowwallet"},{"date":"2024-08-10","event":"Glow Wallet iOS version 1.6.3 released, adding iOS 18 compatibility.","source":"Glow Solana Wallet – App Store listing","source_url":"https://apps.apple.com/us/app/glow-solana-wallet/id1599584512"},{"date":"2024-11-25","event":"Glow Wallet Chrome extension updated to version 0.61.0; most recent extension update as of the investigation date.","source":"Glow Wallet Chrome Web Store listing","source_url":"https://chromewebstore.google.com/detail/glow-solana-wallet-beta/ojbcfhjmpigfobfclfflafhblgemeidi?hl=en"},{"date":"2024-11-16","event":"glow-xyz/glow-js GitHub repository last updated; most recent code commit visible for the organization.","source":"glow-xyz GitHub organization","source_url":"https://github.com/glow-xyz"}]},"v":1}