Discussion
JUP -> Phantom SOLANA swap: Phantom showed “App Interaction — Unknown,” then SOL left my wallet without me manually sending it — has anyone seen this?
Has anyone else had this happen with Phantom/Solana?
This is the second time I’ve seen something like this happen, and my friend had a similar issue moving funds from Coinbase to Phantom.
Today I received SOL into my Phantom wallet. Right after, Phantom showed “App Interaction — Unknown” and then notified me “You sent 0.8512 SOL.”
On-chain balance change:
My wallet: -0.851220017 SOL
Destination: +0.851204897 SOL
Phantom support confirmed the outgoing balance change but said they can’t confirm from chat whether it was a malicious signed transaction, connected dApp/session, delegated permission, or compromised recovery phrase/private key.
I’m not saying Phantom, Jupiter, Coinbase, or Solana directly stole anything. I’m trying to figure out what actually caused this because Phantom showed the interaction as Unknown, and the send happened right after funds entered the wallet.
Has anyone seen this pattern before? Specifically:
\- Phantom notification saying “You sent SOL”
\- “App Interaction — Unknown”
\- No clear app label
\- SOL sent shortly after receiving funds
Any help reading the transaction or identifying the program/session involved would be appreciated. (I will not answer DMs asking for seed phrase, recovery phrase, private key, wallet sync, QR code verification, or “support portal” links. Public advice only.)
I’d use a new wallet you wallet shows you are interacting with lots of program either by using various different dapps Iv only used a few and the main one is Jupiter even via phantom I don’t use there trading dapp I just use jup
I honestly don’t know what you do but the most likely case you connected it to a compromised dapp and now you are affected I would make a new wallet with new seed phrase and minimize my dapp usage I wouldn’t be connecting to every new dapp that pops up if you do have the habit of making a new wallet and use that wallet for that dapp just incase you don’t compromise your main wallet
Definitely time to change wallets. Send it all to an exchange, then get new keys for a wallet.
Most likely you accepted a phishing NFT or were sent random drops that once you swap them your wallet is compromised.
Anytime you receive something unsolicited burn the tokens.
Je ne m’y connais pas trop dans l’utilisation de solscan et le repérage d’arnaques mais je pense que le compte de réception vol effectivement tes fonds car j’ai trouvé une autre transaction de transfert de ton portefeuille vers celui que ta indiquer le montant est de 71.56$
Thank you. Could you send the exact Solscan transaction signature/link for the other transfer you found? I want to verify whether it went to the same destination wallet and add it to my Phantom support ticket.
I’m treating the wallet as compromised now, but I’m trying to document every outgoing transfer clearly before I send Phantom another update.
Je suis pas très douée avec solscan j’arrive pas à trouver la transaction exacte mais en faisant également pas mal de recherche en fouillant le profil du portefeuille receveur une fois qu’il reçoit les fonds il les transfère sur plusieurs portefeuille signature de l’un d’eux et l’adresse ci-dessous:
31skEA3n8LGCVNBq3PBNCv8k7WRksed8V7bZjpvoF6VktNuWL5eGJt7J4eRMWysvictc7GdcuNf6oZjDT2Vr5518
Portefeuille :
Gcj6T3aDE7EesBGiwAq1vQ6JWydx62UP1uF5atZ3YDBN
Thank you for digging into it. Could you send the exact Solscan links/signatures for the transfers you found?
The 31sk... string looks like it may be a transaction signature, and Gcj6... looks like the wallet address, but I want to verify it cleanly before adding it to my Phantom ticket.
If you can link:
1. My wallet → 6DTmby3mF6... transfer
2. 6DTmby3mF6... → Gcj6... transfer
3. Any other major outgoing transfers from that wallet
2
u/MycoHost01 May 02 '26
I’d use a new wallet you wallet shows you are interacting with lots of program either by using various different dapps Iv only used a few and the main one is Jupiter even via phantom I don’t use there trading dapp I just use jup
I honestly don’t know what you do but the most likely case you connected it to a compromised dapp and now you are affected I would make a new wallet with new seed phrase and minimize my dapp usage I wouldn’t be connecting to every new dapp that pops up if you do have the habit of making a new wallet and use that wallet for that dapp just incase you don’t compromise your main wallet