SwapSpace – Cross-Chain Crypto Swaps

TronLink wallet review: what it costs and what's missing

TronLink is a non-custodial wallet for the TRON blockchain, available as a browser extension, iOS and Android apps, and a desktop app. TronLink's primary network is TRON where TRX and TRC-10, TRC-20 and TRC-721 tokens are supported. From a single recovery phrase it can also hold Ethereum, BNB Chain and BTTC accounts. There is no charge to install it or to hold assets in it.

To swap TRON (TRX), TronLink uses a third-party provider sun.io, a separate TRON DEX, the same way a browser extension wallet connects to any external DApp. Swapping 100 USDT for TRX through that route in our test came within about 0.02% of the market rate, after a 1.3982 TRX network fee.

Test profile

Test date

August 12, 2026

Application version

TronLink Chrome extension v4.10.4

Networks used

TRON (TRX, TRC-20 USDT) 

Swap amount

100 USDT

Recovery test

Completed. Wallet restored from the saved recovery phrase on a clean install; the TRX address matched.

Transaction hash

e3399de1f9962f2f621da836567f7bf438d9ea3708323ec471d0fa4e54f5f800


What we tested, and what we did not

We installed the Chrome extension, created a wallet from scratch, ran a swap from TRX to USDT, and restored the wallet on a clean browser profile. We also read TronLink's current User Terms and Privacy Policy, the two SlowMist penetration-testing reports TronLink publishes, and the license files in its public source repositories.

We did not install the iOS or Android app, connect a hardware wallet, use the staking or Super Representative voting screens, or purchased crypto for fiat as the wallet does not support this feature. Everything below about the mobile app comes from its published audit report and app-store listings rather than our own use, and is labeled as such.

Attribute

TronLink

Custody

Non-custodial. Recovery phrase and private key are generated and stored on the device. TronLink states it cannot recover, freeze, or restore a wallet, and cannot roll back a transaction.

Recovery

12-word recovery phrase by default (15/18/21/24-word variants supported), BIP39-compliant.

Native accounts

TRON: TRX, TRC-10, TRC-20, TRC-721. Also Ethereum, BNB Chain and BTTC

Platforms

Browser extension (Chrome and Edge), iOS, Android.

Hardware wallets

Compatible with Ledger

Source code

Extension core and Android core modules: Apache-2.0 License, confirmed directly on GitHub.  

Latest audit

SlowMist penetration tests, 2021: Chrome extension (audited v3.18.2) and Android app (audited v4.0.3). No newer report is published on TronLink's own site as of this review.

Swap fee

Not fixed by TronLink; the built-in swap runs through Sun.io under its own rate and fee. 

Gas fees

Can be paid in TRX, or in USDT via a “GasFree” feature  

Subscription

None identified.

Documented incidents

One confirmed counterfeit-extension phishing campaign (May 2026). 


Installation runs in the browser. TronLink is also a frequent target for counterfeit clone extensions (see “Security incidents”), so the publisher and extension ID are worth checking before installing, not after.

The wallet website displays a warning to prompt a user check they are viewing the official website https://www.tronlink.org/ 

Screenshot: Security alert to check the correct address

Step 1. Install the extension

Install from the Chrome Web Store. Confirm the listed developer and extension ID rather than trusting search-result placement or review counts alone — counterfeit listings have inherited legitimate ratings and install counts before. 

Step 2. Create or import a wallet

Choose “Create Wallet” to generate a new recovery phrase, or import an existing phrase or private key from another TRON-compatible wallet.

Before proceeding, a user is required to scroll down and read all the terms of TronLink User Terms and Privacy Policy.

Screenshot: Creating a new wallet in TronLink Chrome extension

Step 3. Set a password

The password unlocks TronLink on this device. Per TronLink's own terms, the wallet password is not stored on the device or on TronLink's servers — losing it without the recovery phrase means the wallet cannot be reset.

Step 4. Back up the recovery phrase

TronLink generates a 12-word phrase by default. Following the step with password setup, a user is required to back up the seed phrase. If this step is missing, the app displays a security alert reminding the user to back up the mnemonic. 

Screenshot: Backup Security Alert

Step 5. Start using the wallet

As a result, creation of a wallet takes three steps: reading the terms, setting up the password, and the seed phrase back up. After completing these steps, a user sees a default screen that shows the balance, Tron (TRX) address, available assets, and action buttons enabling the user to send, receive, stake, or vote. 

Screenshot: TronLink default screen

Receiving and sending assets

TRON transactions consume two on-chain resources, Bandwidth and Energy, rather than a single flat gas fee; when an account lacks enough of either, TRX is burned to cover the shortfall. TronLink offers a “GasFree” option that lets a TRC-20 USDT transfer pay its network cost in USDT instead of TRX — useful for a wallet holding only stablecoins.

The Receive screen shows, which network is preselected, the right network warning, a QR code, and the address. The extension states explicitly that only TRON network assets are supported. 

Screenshot: TronLink Receive Screen

TronLink itself has no swap function. The extension's main screen offers only Send, Receive, Stake and Vote — swapping one asset for another means leaving the wallet's own interface and connecting to sun.io, a separate TRON DEX, the same way any browser extension wallet connects to an external DApp. TronLink is acting purely as a signer here; the rate, the route and the fee are all set by sun.io, not by TronLink.

Open the Swap section from the TronLink dashboard. When selecting a token to swap, TronLink redirects users to sun.io, which serves as the swap provider.

Screenshot: TronLink Screen

On sun.io, connect your TronLink wallet. The connection process takes only a few clicks and authorizes the platform to prepare the transaction. 

Screenshot: sun.io swap screen

Step 3. Choose the tokens and review the quote 

Once connected, the wallet address will appear in the top-right corner, with the swap interface displayed below. Select the tokens you want to exchange, enter the amount, and review the quoted exchange rate and estimated transaction costs before proceeding.

Screenshot: sun.io swap screen

In our test, sun.io displayed a transaction fee of 0.05 USDT for swapping 100 USDT to TRX.

Screenshot: sun.io swap screen

After reviewing the quote, approve the transaction by signing it in the TronLink wallet. This authorizes the swap on the blockchain.

Screenshot: TronLink Confirmation Screen

Step 5. Complete the swap 

Return to SUN.io and click Confirm Swap to execute the transaction. Once confirmed, the swap is typically completed within a few seconds. 


Screenshot: Completed Swap in SUN.io

This is one swap on one day, not an average. sun.io's own liquidity and rate can change without any TronLink release at all, since the two are entirely separate products connected only at the signing step. Treat the measurement below as a single data point rather than a representative cost.



Value

Note

Pair and network

USDT (TRC-20) → TRX, TRON network


Amount sent

100 USDT ($100 equivalent)


Rate shown on sun.io

0.3362 USDT per TRX

at 08:58:24 UTC

Market rate, same minute

0.3362 USDT per TRX

source: TradingView

Estimated minimum amount to receive (shown before confirming)

295.8987 TRX


Estimated fee shown before the swap

$0.05


Amount actually received

297.3856 TRX


Network fee burned (per Tronscan)

1.116 TRX for Bandwidth, 0.2822 TRX for Energy — 1.3982 TRX total, roughly $0.47 at the swap rate


Total cost against market

About 0.02% — $100 at the market rate converts to roughly 297.44 TRX before fees; 297.3856 TRX was received


Transaction hash

e3399de1f9962f2f621da836567f7bf438d9ea3708323ec471d0fa4e54f5f800



Not from the extension's own screen. The extension's main actions are limited to Send, Receive, Stake and Vote, with no Buy option among them, consistent with the pattern seen in the swap feature: TronLink acts as a signer and defers financial functionality to external, connected services. 

Networks and assets

TronLink is built around TRON first: it natively supports TRX, and TRC-10, TRC-20 and TRC-721 tokens on that chain. Its browser extension also supports separate accounts on Ethereum, BNB Smart Chain, and BTTC through a multichain HD wallet. Network availability may depend on the selected account and product version, so users should confirm the network before sending assets.

There is no native support for Bitcoin, Solana, or Monero. Anyone holding these assets outside the TRON ecosystem needs a second wallet.

Beyond the wallet

Stake and Vote sit alongside Send and Receive as the extension's four main buttons, but neither runs inside a TronLink-built screen — both hand off to TRON Mainnet functionality through TronGrid. That makes them closer to bookmarked shortcuts into TRON's own infrastructure than features TronLink itself has built and maintains:

  • Stake. Routes to TronGrid to stake TRX (“Stake 2.0”) for Bandwidth and Energy, or delegate resources to another account.
  • Vote. Routes to TronGrid to vote for TRON Super Representatives, the network's block-producing validators.

Screenshot: Routing to TronGrid for stake and vote features

What you can verify yourself

  • Source code: the primary extension and Android core repositories under the TronLink GitHub organization are published under the Apache-2.0 License, confirmed by fetching the repository pages directly rather than relying on secondary summaries. The Android core module is explicitly scoped as the wallet-creation and signing core rather than the full shipped app, mirroring the extension-vs-core distinction seen in other wallets' repositories.
  • Security audits: two SlowMist black-box penetration test reports are linked from tronlink.org — one for the Chrome extension (audited version 3.18.2, testing window through September 2021, three high-risk and three low-risk findings, all marked fixed) and one for the Android app (audited version 4.0.3, same period, two low-risk findings and five enhancement suggestions, no critical or high findings). Neither report has a published successor as of this review, meaning the most recent public third-party security assessment of a wallet now on version 4.10.4 is roughly five years old.
  • Terms of service and privacy policy: both are published at tronlink.org and state plainly that TronLink cannot store, recover, or reset a wallet password, private key, recovery phrase, or keystore, and that transactions cannot be reversed.

Security incidents

Date

What happened

Scale

What was affected

Outcome

May 2026

SlowMist reported a counterfeit TronLink Chrome extension using Manifest V3 to evade early detection, loading a remote interface that captured private keys, mnemonics and passwords entered by users.

Not quantified in the source report.

A fake extension impersonating TronLink, not the official product or its published source code.

SlowMist published a warning; no reimbursement applies since the real TronLink was not compromised.

Q4 2024 – ongoing

A TRON network-level exploit of the UpdateAccountPermission transaction lets an attacker who already has a private key or phrase add their own key to an account's permission settings, silently requiring their signature for future outgoing transfers.

An estimated 14,545 TRON addresses identified as at risk; 2,130 wallets compromised in Q4 2024 alone, holding close to $31.5 million collectively.

Any TRON wallet, including TronLink, since the vulnerability is in a TRON blockchain feature rather than TronLink's own code.

No reimbursement mechanism reported; recommended response is to stop depositing to a suspected-compromised address.



Two distinctions matter here. First, the May 2026 event was a counterfeit clone, not a breach of TronLink's own extension — the same category distinction drawn elsewhere in this review series between a wallet's own product and third-party or impersonation risk. Second, the UpdateAccountPermission exploit is a TRON network feature being abused, not a TronLink-specific vulnerability; TronLink is simply the most widely used TRON wallet, so its users make up a large share of the exposed population. Neither event is evidence that TronLink's own published code has been compromised, and no such incident turned up in this research.

Separately, TronLink's app-store review sections contain numerous reports of support-impersonation scams, where fraudulent “support” contacts on Telegram or through in-app forms solicit a recovery phrase. These are user reports rather than verified incidents and are not included in the table above, but the pattern is consistent enough across reviews to be worth a caution in the FAQ below.

Recovery: does the backup work?

TronLink's terms state directly that it cannot restore a wallet or recover a password, private key, recovery phrase, or keystore if lost — the recovery phrase is the only path back in.

We removed the extension, reinstalled it in a clean browser profile, and restored from the recovery phrase.

Result: successful. The wallet was restored from the saved recovery phrase on a clean install, and the TRX address matched the original. 

Where the interface confused us

No fee estimate appears before a swap is initiated. TronLink's own screens show nothing about cost until after the wallet has already handed off to sun.io — and nothing inside TronLink warns the user beforehand that continuing will connect the wallet to an external site. Someone unfamiliar with the DApp-connection model could reach sun.io without having decided to leave TronLink's own interface in the first place.

There is no live chat or chatbot anywhere in the product. The only support channel we found is an email form, and it gives no estimated response time — someone with an urgent issue has no way to gauge how long a reply will take before submitting one.

If you are already active in the TRON ecosystem

Sending and receiving TRX and TRC-20 USDT, staking through TronGrid, and voting for Super Representatives is the workflow TronLink is built around. Anyone who also swaps regularly should expect to do it through sun.io rather than inside TronLink itself.

If you need Bitcoin, Solana, or Monero support

TronLink does not hold those natively. Besides TRON, the Ethereum, BNB Chain and BTTC accounts share TronLink's recovery phrase. A second wallet is required, and moving value between ecosystems means an external swap or exchange first.

If you want swap functionality built into the wallet

TronLink has no swap screen of its own. Anyone who wants to trade without leaving the wallet's own interface will need to connect out to sun.io each time, approving the connection and the transaction separately from TronLink's own screens.

If this would be your first wallet

The absence of a confirmed native fiat on-ramp (see “Can you buy crypto with a card” above), the extra step of connecting to an external DApp for any swap, and the frequency of counterfeit-extension and support-impersonation scams targeting TronLink users specifically make careful installation and skepticism toward unsolicited “support” contact especially important for someone new to self-custody.

Alternatives

  • Trust Wallet — covers TRX and TRC-20 assets alongside Bitcoin, Ethereum, Solana and others from one wallet, with a card on-ramp in the app; broader asset coverage outside the TRON ecosystem than TronLink offers.
  • Rabby — Designed exclusively for EVM networks, Rabby charges a 0.25% swap fee that is transparently itemized rather than bundled into the exchange rate; it does not offer support for Tron, Bitcoin, or Solana. Opt for Rabby instead of TronLink if your portfolio consists solely of EVM-compatible assets and you prefer fee breakdowns to be displayed separately.
  • Tonkeeper — a non-custodial wallet engineered specifically for the TON network rather than functioning as a multi-chain platform. While it natively supports TON-based assets like GRAM and Jettons alongside bridged TRC-20 USDT, it lacks native account support for Bitcoin, Ethereum, or Solana. Tonkeeper is the better choice over TronLink for users whose primary focus is TON and its broader ecosystem, particularly Telegram-integrated applications.

Frequently asked questions

TronLink is non-custodial and stores keys locally rather than on a server. Its most recent published third-party security audits date to 2021, and counterfeit clone extensions impersonating TronLink have been documented as recently as May 2026, so installation source and extension ID verification matter more than usual for this wallet specifically.

No. TronLink's extension states explicitly that it supports TRON network assets — TRX and TRC-10, TRC-20 and TRC-721 tokens. There is also Ethereum, BNB Chain and BTTC support.

No. The extension's main screen offers Send, Receive, Stake and Vote only. Swapping means connecting TronLink to sun.io, a separate TRON DEX, and approving the connection and each transaction from the TronLink popup while sun.io handles the rate and route.

Not from the extension's own screen, which has no Buy option.  

TronLink's extension-core and Android-core modules are published under the Apache-2.0 License on GitHub. Whether the full, shipped application repositories carry the same license was not fully confirmed in this research and should be checked directly before publication.

No confirmed compromise of TronLink's own published extension or app code turned up in this research. A counterfeit clone extension was used in a May 2026 phishing campaign, and TronLink users are exposed to a TRON network-level exploit (UpdateAccountPermission) affecting any wallet on that chain — neither is a breach of TronLink's own code.

Does TronLink offer live chat support?

No. The only support channel found during testing was an email form, with no estimated response time given.

There is no charge to install TronLink or hold assets in it. Network fees apply to every transaction, payable in TRX or, for TRC-20 USDT transfers, optionally in USDT through the GasFree feature for an additional flat fee. TronLink has no swap of its own, so any swap cost is set by sun.io, the external DEX, rather than by TronLink directly.

Sources

All links checked on August 12, 2026.

Share:

Related Posts

Curious for more?

Join our newsletter — stay informed, stay empowered.