Why BAG is safe

You should not have to trust BAG because the website looks nice. Here is what you can check yourself.

Your keys stay in your wallet.

BAG never asks for, receives or stores your seed phrase or private key. If anything ever asks you for them, it is not BAG.

You approve every transaction.

BAG prepares the transaction and shows you exactly what happens. Phantom or Solflare decides whether to sign. BAG cannot sign for you.

Everything is verifiable.

Transactions link to Solana Explorer, token mint addresses are shown, and balances and confirmations come straight from Solana mainnet.

Open source and audited — in progress.

We have not published the code or an independent audit yet. We will link both here once they exist, including what was found and fixed.

What BAG can do

  • See your public wallet address after you connect.
  • Read public on-chain balances and history for that address.
  • Prepare transactions for you to review and approve in your wallet.

What BAG cannot do

  • See or store your seed phrase or private key.
  • Move funds without your approval inside your wallet.
  • Hold, freeze or recover your funds — BAG never custodies assets.

What happens when you sign

  1. BAG builds the transaction and checks it on Solana before showing it to you.
  2. You review the asset, amount, recipient and fees on screen.
  3. Your wallet opens and shows the same transaction. You approve or reject it there.
  4. BAG sends your signed transaction and waits for Solana to confirm it — it never says “confirmed” early.
  5. You get an explorer link to verify it independently.

Trust milestones

Non-custodial design

Live

Keys never leave your wallet; signing happens only in Phantom or Solflare.

Human-readable review

Live

Asset, amount, recipient, fees, slippage and minimum received are shown before every signature.

Public data sources

Live

Balances from Solana mainnet, swaps routed through Jupiter, explorer links on every transaction.

Controlled mainnet release

Partial

Send and Swap are enabled for small controlled tests. We will publish evidence before encouraging meaningful balances.

Open-source core

Planned

Transaction building, wallet connection and swap validation code to be published publicly.

Independent security audit

Planned

No audit has been completed yet. BAG does not display any audited badge.

Bug bounty & security contact

Planned

A responsible-disclosure contact will be published here.

Public status page

Planned

Outages of Solana RPC, prices or Jupiter will be reported openly.

BAG never uses fake testimonials, user counts, volume, partnerships or audit badges. See the docs for what is live today.