Solflare wallet review: what the swap actually costs and where the backup hides

Solflare is a self-custodial Solana wallet from Solrise Finance Ltd, available as a browser extension, mobile apps, and a web client. Installation and storage cost nothing.

We tested Chrome extension version 2.33.3 on August 20, 2026. To exchange USDC to SOL, we spent a cost of around 0.91% against the market rate at the same minute, against the 0.8% the wallet disclosed beforehand. A $100 send cost $0.00099 in network fees. Recovery from the seed phrase returned the same address, balance, and history in under a minute.

Test profile

What we tested, and what we did not

We installed the Chrome extension, created a wallet, examined the deposit and on-ramp screens, sent 1.1443 SOL, swapped 99.34 USDC into SOL and verified the result on Solscan, then removed the extension, cleared the browser cache and restored from the seed phrase.

We did not complete a card purchase, stake SOL, use the bridge, pair a hardware wallet, or test the mobile apps and web client. Anything drawn from documentation instead of our own use carries a label saying so.

Solflare at a glance

How to set up Solflare

Setup is short, and the order of it is the first thing worth examining.

Tested on version 2.33.3, on August 20, 2026.

Step 1. Set a password and accept the terms

Screenshot: Setting up Solflare wallet

Step 2. Arrive at the home screen

There is no third step. The wallet drops you straight onto the home screen with no offer to view or record the recovery phrase.

To find it, open Wallet settings, where the app asks for your password before it reveals anything.

Screenshot: Finding a recovery phrase in Solflare

A wallet that becomes spendable before its owner has seen the phrase leaves the most consequential step to someone who may not know to look for it, and nothing on the home screen indicates that the wallet is unbacked.

What the home screen shows

The default view carries the total balance in US dollars, the assets in the portfolio with their quotes, a balance history, and the swap window.

Screenshot: Solflare home screen

The swap panel sits on the first screen, alongside live quotes for everything you hold. That placement tells you what the product is for: Solflare treats the wallet as a trading surface, and the layout puts a trade one click from arrival.

The Balance history on the same view is a small thing that most wallets omit. It answers the question people actually open a wallet to ask, which is whether the number moved.

How to deposit and receive

The Deposit button opens three routes: buy with a card, receive crypto, or bridge.

Each carries a different cost and a different counterparty. Receiving costs nothing beyond the sender’s network fee. Buying runs through an on-ramp that sets its own charge. Bridging brings value from another chain and converts it on the way in, which means a conversion cost plus whatever the bridge takes. Solflare prices none of the three inside the wallet.

Screenshot: Solflare Buy screen

Card purchases run through third-party on-ramp vendors. Revolut, PayPal and Skrill appeared in our session alongside others, and SEPA bank transfers are supported.

Screenshot: a list of available on-ramp vendors

The Receive screen shows a QR code and a Copy Address button, with a reminder to send only SPL tokens to this Solana address. That warning earns its place: a Solana address will accept a token from the wrong standard and the funds do not come back through the interface.

Screenshot: Receive screen

The provider list is the useful part. Several on-ramps appear side by side, so the choice stays with you instead of being wired to a single partner, and SEPA gives European users a bank route that avoids card charges entirely.

Solflare does not set third-party on-ramp fees. Final costs, exchange rates, payment methods, and regional availability are determined and disclosed by the selected provider during checkout. We did not complete a purchase, so we could not measure the final cost.

How to send in Solflare

The Send screen asks for the amount and the token, then offers a choice most wallets do not: send publicly, or send privately.

Screenshot: Send screen

Private Send runs through what Solflare calls a Privacy Aggregator, which hides the direct on-chain link between sender and recipient. Solflare’s own documentation states the feature is optional, disabled by default, available per transaction, and supported on both the extension and mobile. It covers select tokens, not everything.

What the send cost

Screenshot: Send cost

Single measurement on one date. Solana fees are small by design, so read this as confirmation the wallet adds nothing to a plain transfer, not as a forecast.

How to swap in Solflare

Solflare routes swaps through the Jupiter aggregator and sets slippage tolerance to 0.5% by default, both stated in its help centre. Its documentation also advises keeping at least 0.05 SOL on hand, because some routes need several transactions to complete.

Our swap went through. Here is what it cost.

Three things follow from those numbers.

The disclosed figure was close to honest. Solflare showed 0.8% before we committed. The real cost came to 0.91%, and the 0.11 percentage point gap is execution slippage between the quote and the fill. The wallet quoted 1.1277 SOL and delivered 1.1264, a shortfall well inside the 0.5% slippage tolerance.

Almost none of it was the network fee. That came to $0.00043, a rounding error. Solflare itemised its own 0.8% before we confirmed, and the charge then arrived inside the exchange rate: 88.08 USDC per SOL against a market rate of 87.39. The disclosure is there, but anyone watching only the network fee line will conclude the swap was free.

Two settings change what you pay. Slippage tolerance sits at 0.5% by default and can be tightened, which lowers the worst case and raises the chance a volatile trade fails outright. And Solflare’s guidance to keep at least 0.05 SOL spare exists because one swap can need several transactions to settle. A wallet run down to zero SOL will see routes fail for reasons the error message does not explain.

Single measurement, one date, one pair. Rates and liquidity both move.

Where the interface confused us

Auto-lock defaults to 24 hours. You need to change it manually in the settings. A browser extension holding live funds stays unlocked for a full day unless you change it. Anyone with access to the machine in that window has access to the wallet.

Screenshot: Auto-lock default settings

The recovery phrase never comes to you. Setup finishes without a backup step, and the phrase waits in Wallet settings until you think to look.

Recovery: does the backup work?

Before logout, Solflare requires confirmation that the backup phrase is saved — the prompt that setup omitted.

Screenshot: Backup warning upon logging out

We removed the extension from the browser, cleared the cache, and restored from the seed phrase, stored the way a recovery phrase should be stored.

The address matches character for character and the balance and history came back with it.

Note where the logout prompt sits in the sequence. It protects a user who leaves deliberately and does nothing for one whose laptop is stolen, whose browser profile is wiped, or who simply stops using the machine. The prompt belongs at setup, where the risk begins.

Supported network and assets

Solflare covers Solana (SOL) and nothing else. SPL tokens, NFTs and staking all work; assets on other chains do not, and the Receive screen says so plainly.

The wallet offers a bridge for funding from other networks, and Solflare’s documentation describes a reusable deposit address for that purpose. Value that arrives that way converts on the way in. Anyone holding Ethereum (ETH) or Bitcoin (BTC) in native form needs a second wallet permanently.

That focus is a deliberate trade, and it buys something real. A Solana-only account model cuts down the networks you have to choose between inside the wallet, and network-selection mistakes are a common way people lose funds permanently. It does not remove the risk altogether: an exchange withdrawal on an unsupported network, a bridge funding route, an unsupported token contract or a third-party cross-chain service can all still go wrong.

The cost is equally clear: a portfolio spread across chains needs another wallet, another recovery phrase and another update cycle.

What else is in the app

Solflare has grown past storage, and we tested none of the following:

• Staking. Direct delegation to any active validator, with stake splittable across several. Solflare runs one of the larger Solana validators itself. Standard unstaking follows the network cooldown, and an instant unstake option taps a liquidity pool for a fee.
• Limit orders and DCA. Automated execution at a target price, and scheduled buying over time.
• Market data. Live prices, market cap, volume and liquidity depth inside the wallet, with watchlists.
• NFT tools. Bulk transfers, profile pictures, and a burn function for unsolicited assets.
• The Solflare Card — paused on our test date. Both virtual and physical cards stopped working on July 28, 2026, after the card’s issuing partner Kulipa wound down over solvency problems. Solflare’s card page carried the pause notice, and co-founder Vidor Böjthe confirmed it publicly the same day. The card was a Mastercard spending USDC in the EEA and UK. Solflare says funds were never held by the issuer, since the card debited the wallet at the point of purchase, and that a replacement under a new issuer would follow. It was unavailable for testing on August 20, 2026.

Yield figures move constantly and depend on the validator you pick, so this review publishes none. Check the rate in the app.

What you can verify yourself

• Source code — partial, and contested. Solflare publishes SDKs and a public blocklist, and its team is active on GitHub. Coverage of the wallet describes the code variously as fully open source and as partly open source. Those cannot both be right.
• What is checkable without argument. Private keys stay on the device. The blocklist is public. The Privacy Aggregator behaves as documented, disabled by default and enabled per transaction. And swaps route through a public aggregator, which means the rate you receive is one you can check against that aggregator yourself.

None of this makes the wallet unsafe. It means the security story rests on internal practice and threat detection instead of published proof.

The practical consequence is narrow but real. With no published core report, an outside researcher cannot point to a page number when something looks wrong, and a user cannot weigh the scope of what was examined. Phantom’s audits are limited to a threat model its own team supplied, which is itself a caveat — but the scope is at least written down and can be argued with. Here there is nothing to argue with.

Security incidents

The short list is the point. Solflare has run since the early Solana era without a reported compromise of its core software, and it sat out the incident that defined wallet security on this chain. That record counts for something no audit can supply.

Weigh it against what the record does not prove. A wallet with no published core review and no disclosed incident holds an untested claim, not a verified one. The absence of a failure is evidence, and it is weaker evidence than a report anyone can read.

Note also what falls outside a table like this. Solflare’s larger exposure comes from the applications users connect it to, and a drain that starts with a malicious approval on a third-party site is not a wallet incident by any strict definition. Solflare’s threat detection and blocklist exist for exactly that traffic, which tells you where the company expects the danger to come from.

Strengths and limitations

Everything above, pulled into one place before we turn to who Solflare fits.

Strengths

• Clean-install recovery reproduced the tested address, balance, and history in under a minute.
• The disclosed fee was close to the total difference measured against our reference market rate: 0.8% shown, 0.91% measured, with the gap coming from execution and not from a hidden charge.
• Solflare added no wallet fee to the tested ordinary send. The only charge observed on a $100 transfer was the Solana network fee of $0.00099.
• The send screen offers Public Send and Private Send as separate choices, with the privacy option off by default instead of decided for you. We did not execute a private transfer.
• Staking runs deeper than most wallets manage: any active validator, stakes splittable across several, and an instant unstake path.
• Swaps route through a public aggregator, so the rate you are offered can be checked against that aggregator directly.
• Logout requires confirmation that the backup phrase is saved.
• Solflare has run since the early Solana era with no reported compromise of its core software, and it sat out the August 2022 drain that hit other wallets on the chain.

Limitations

• Setup never shows the recovery phrase. The wallet becomes spendable before its owner has seen the words, and nothing marks it as unbacked.
• Auto-lock defaults to 24 hours, which leaves a funded extension unlocked for a full day unless the user changes it.
• The wallet displayed a 0.8% fee cost. The network fee line read $0.00043 on a trade that cost 91 cents.
• No published audit of the core wallet was located. The one documented third-party review covers the MetaMask Snap, not the wallet itself.
• Selected components are public — SDKs, tooling and the phishing blocklist — but we found no public repository corresponding to the complete shipped extension, mobile app or web wallet.
• Solana only. Assets on other chains need a second wallet permanently.
• Card purchase costs are set by third-party providers and are not disclosed inside the wallet. We did not complete a purchase.
• The Solflare Card was paused on the test date after its issuing partner wound down.

Who Solflare suits, and who it does not

If Solana is the only chain you use

Everything here points that way. The swap sits on the home screen, staking runs deep, and the single-network scope cuts down the choices you can get wrong inside the wallet.

If you stake

Validator choice, split stakes, and an instant unstake path make this the most developed part of the product. Worth knowing when you choose: Solflare runs a validator of its own, so the default suggestion and the neutral suggestion are not automatically the same thing.

If you swap often

Our measured 0.91% is real money at volume, and it arrives inside the exchange rate where a user watching the network fee will never see it. Since the routing goes through a public aggregator anyway, check the rate there before any large trade and keep the in-wallet swap for convenience-sized amounts.

If you hold assets on several chains

Solflare manages none of them. A second wallet becomes permanent, and value crosses between the two through a bridge or an outside service.

If you want published proof of security

The core wallet has no report we could find, and no public repository matches the shipped client. Threat detection and a clean incident record are what stand in its place.

Alternatives

• Phantom — the other default on Solana, with multi-chain reach across Ethereum, Bitcoin and six more networks, named audits from Kudelski Security and Least Authority, and a bug bounty. Its core code is unpublished. Choose Phantom over Solflare for chains beyond Solana.
• Exodus — far broader asset coverage with a card on-ramp and live chat support, against a similarly unpublished codebase and no Solana-specific staking depth. Choose Exodus if your holdings are spread wide and support matters.
• Rabby — EVM-only, with no Solana support at all, so it complements Solflare instead of replacing it. It publishes its source alongside dated third-party reports, which is the comparison that matters against Solflare’s evidence gap.

Frequently asked questions

What does Solflare cost?

Nothing to install, hold or receive. Our $100 send cost $0.00099 in network fees, which is a rounding error. The swap is where money actually goes: our $100 trade cost 0.91% measured against the market rate at that same minute, against the 0.8% disclosed beforehand. Card purchases and instant unstaking carry separate third-party charges on top.

Is Solflare safe to use?

It is self-custodial, keys stay on the device, and no compromise of its core software has been reported. It also sat out the August 2022 Solana drain that hit other wallets. The weak point is proof: we found no published audit of the core wallet, only a 2023 ConsenSys Diligence review of its MetaMask Snap.

Does Solflare make me back up my recovery phrase?

Not at setup. Setup ends at the home screen with no prompt at all, and the phrase waits in Wallet settings behind a password gate. The wallet does require confirmation that you saved it before logging out, which helps someone who leaves deliberately and does nothing for a lost, stolen or wiped machine. Write it down yourself on day one.

Which networks does Solflare support?

Solana only. SPL tokens, NFTs and staking all work, and the Receive screen warns you to send nothing but SPL tokens to the address. A bridge exists for funding from other chains, and value converts on the way in instead of arriving as itself. Anyone holding Ethereum or Bitcoin in native form needs a second wallet permanently.

How does the Solflare swap work?

It routes through the Jupiter aggregator, with slippage tolerance set to 0.5% by default and adjustable in the swap settings. Solflare advises keeping at least 0.05 SOL available, because some routes need several transactions to complete. Our trade landed 0.115% below its quoted amount, comfortably inside that default tolerance, and the whole cost arrived in the rate.

What is Private Send?

A per-transaction option that hides the direct on-chain link between sender and recipient, using what Solflare calls a Privacy Aggregator. It stays disabled by default, works on both the extension and mobile, and covers selected tokens instead of everything. You choose publicly or privately on the send screen itself, one transfer at a time.

Does Solflare work with a hardware wallet?

Yes. Solflare supports Ledger and Keystone, and sells its own Solflare Shield NFC card for hardware-backed signing. A paired device keeps private keys off the computer while the wallet still handles Solana assets, staking, and swaps as normal. We did not test any hardware pairing during this session, so confirm current device compatibility first.

Should I change any settings after install?

Auto-lock is the one to change. It defaults to 24 hours, so a browser extension holding live funds stays unlocked for a full day unless you shorten it yourself. Copy your seed words out of Wallet settings during the same session, since setup never prompts you and nothing flags the wallet as unbacked.

Sources

All links checked on August 20, 2026.

• Solflare official site
• Solflare help centre: how to swap tokens (desktop)
• Solflare help centre: how to swap tokens (mobile)
• Solscan: our test swap transaction
• TradingView SOL/USDC, used for the market rate comparison