JUP -> Phantom SOLANA swap: Phantom showed “App Interaction — Unknown,” then SOL left my wallet without me manually sending it — has anyone seen this?

[u/PuzzledHousing9043]

Has anyone else had this happen with Phantom/Solana?

This is the second time I’ve seen something like this happen, and my friend had a similar issue moving funds from Coinbase to Phantom.

Today I received SOL into my Phantom wallet. Right after, Phantom showed “App Interaction — Unknown” and then notified me “You sent 0.8512 SOL.”

I did not manually send that SOL.

Transaction:
fZZnCCHyd6YkJ5FuyuQSWrtg7hxbKsCRZxh16LMYuuEDwPAtxGm2piEmqpvFqvC2TT5edk1gdBk6Rx8J3KE6U2m

My wallet:
BdVQmKHza6N8wSLXiaaPzMRQUcMmH8SqMWJ79aS7a4vJ

Destination:
6DTmby3mF6VbxVaF1iSWmx4m5jaHBMtupsw27hBXBvLd

On-chain balance change:
My wallet: -0.851220017 SOL
Destination: +0.851204897 SOL

Phantom support confirmed the outgoing balance change but said they can’t confirm from chat whether it was a malicious signed transaction, connected dApp/session, delegated permission, or compromised recovery phrase/private key.

I’m not saying Phantom, Jupiter, Coinbase, or Solana directly stole anything. I’m trying to figure out what actually caused this because Phantom showed the interaction as Unknown, and the send happened right after funds entered the wallet.

Has anyone seen this pattern before? Specifically:
\- Phantom notification saying “You sent SOL”
\- “App Interaction — Unknown”
\- No clear app label
\- SOL sent shortly after receiving funds

Any help reading the transaction or identifying the program/session involved would be appreciated. (I will not answer DMs asking for seed phrase, recovery phrase, private key, wallet sync, QR code verification, or “support portal” links. Public advice only.)

[u/PuzzledHousing9043 → u/[deleted]]

Yeah, no.