Security Center

How Ghost Bot connects to your wallet, what it can and cannot do, and the controls you hold at all times.

Custody model

Non-custodial

Keys stay in Phantom

Wallet

Not connected

No access granted

Session started

—

Review required per tx

Permissions granted

4 / 4

Revocable any time

Our security guarantees

The rules the platform is built on

We never ask for keys or seed phrases

There is no field anywhere in Ghost Bot that accepts a private key or recovery phrase. If any site or person asks you for one, it is a scam — including anyone claiming to be our support.

Every transaction needs your signature

The engine can build a route and ask, but only Phantom can sign. Each swap opens a review screen here and then the Phantom prompt — you can decline at either step.

Official Phantom connection only

We connect through the injected Phantom provider (window.phantom.solana) and its official universal link on mobile. No custom key handling, no clipboard tricks, no third-party bridges.

No custody, no withdrawals

Ghost Bot holds no funds and has no withdrawal capability. Your assets never leave your wallet except through swaps you approve.

Wallet permissions

Grant only what you need — every switch takes effect immediately

Review every transaction

Show a plain-language summary of what will happen before Phantom is ever opened.

Allow AI-initiated signature requests

When off, only transactions you start by hand can request a signature.

Reconnect trusted session

Silently restore an already-approved Phantom connection when you reload the app.

Read public balances

Fetch your SOL and SPL token balances from public Solana RPC to size positions.

Ghost Bot can never move funds on its own: Solana transactions require a signature produced inside Phantom. We never ask for — and cannot accept — a private key or seed phrase.

Signature audit log

Transactions signed in this browser session

No signatures requested in this session.

Risk disclosure

Read before arming automation

Trading Solana meme coins is high risk. Losses can be total and can happen within seconds.

Ghost Bot provides analysis and execution tooling, not financial advice. AI scores, safety scores and exit rules are heuristics that can be wrong, and on-chain conditions such as liquidity removal or network congestion can prevent a profitable exit.

Start in Dry-Run mode, keep a minimum SOL reserve, and never allocate funds you cannot afford to lose. Read the full Terms of Service and Privacy Policy.

Report a vulnerability

Responsible disclosure

Found a security issue? Email security@ghost-ai.space with reproduction steps. Please do not disclose publicly until we have responded. We do not run a paid bounty program, and we will never ask you for wallet credentials as part of a report.