Is SOLTidy safe? Yes, and you can check every transaction

The short answer

Yes, SOLTidy is safe to use. It is non-custodial: it never sees your seed phrase or private key, it never asks for a token approval, and nothing happens until you approve a transaction in your own wallet, one prompt per transaction. Your wallet shows what each transaction does before you sign, a cleanup closes accounts back to your own address, and the 5% fee is a visible SOL transfer inside the same transaction. Every SOLTidy recovery is public on chain, and the home page lists the latest ones with a Solscan link for each.

I built SOLTidy, and this post walks through exactly what it asks you to sign and how to check it yourself, in your wallet preview before signing and on an explorer afterward.

What does "non-custodial" mean for SOLTidy?

Non-custodial means the site never holds your keys or your funds; your wallet signs every transaction, and SOLTidy only proposes them. In practice, that splits into what the site can and cannot do:

SOLTidy can	SOLTidy cannot
See your public wallet address after you connect	See your seed phrase or private key
Read your token accounts, NFTs, stake accounts and pump.fun accounts (public chain data)	Sign anything on your behalf
Build a transaction and ask your wallet to show it to you	Send a transaction you did not approve in your wallet
Charge its fee as a SOL transfer inside a transaction you approve	Take a fee from a transaction that fails or that you reject
Burn or sell tokens and NFTs you select item by item	Burn or sell anything you did not select
Revoke token approvals other sites gave	Create a token approval (no SOLTidy tool builds Approve)
Read any address without connecting (decoder, rug check, balance checker)	Hold your SOL in an escrow or account of its own

Wallet connections go through Reown AppKit: browser wallets such as Phantom, Solflare and Backpack connect directly, and mobile wallets connect through WalletConnect. Connecting shares your public address, the same thing any explorer can see. It grants no permission over funds.

When you press a button, SOLTidy asks the wallet to sign and send one transaction. For single-signer transactions it uses the wallet's own signAndSendTransaction, so Phantom and others broadcast through their own infrastructure. Batch signing (approving many transactions in one prompt) is switched off, so a run of three transactions means three separate prompts, each with its own preview.

What exactly is in a SOLTidy cleanup transaction?

A Token Account Closer transaction is made of standard instructions from programs you can look up, packed up to 12 items per transaction. Reading the code that builds them (src/lib/reclaim.ts, src/lib/tx.ts, src/lib/fees.ts), a transaction contains, in order:

Instruction	Program	What it does	When it appears
SetComputeUnitLimit	Compute Budget	Caps compute at the simulated usage plus 20%	Every transaction
SetComputeUnitPrice	Compute Budget	Priority fee, from recent fees on the same accounts (10,000 to 300,000 micro-lamports per unit)	Every transaction
HarvestWithheldTokensToMint	Token-2022	Moves withheld transfer fees to the mint so the account can close	Only Token-2022 accounts holding withheld fees
BurnChecked	SPL Token or Token-2022	Destroys a token balance	Only accounts with a balance that you selected
CloseAccount	SPL Token or Token-2022	Closes the account; destination and authority are both your wallet	Each account being closed
WithdrawExcessLamports	SPL Token or Token-2022	Withdraws rent above today's minimum from an account you keep; tokens stay	Older accounts you keep
close_user_volume_accumulator	pump.fun or PumpSwap	Closes a pump.fun volume accumulator account back to you	If you have one without unclaimed cashback
Transfer	System Program	Sends 5% of what this transaction recovers to the SOLTidy fee wallet	Last, when the fee is above zero

Three details matter for safety:

1. The rent goes to you. CloseAccount and WithdrawExcessLamports both name your wallet as the destination. The only SOL leaving your wallet is the fee transfer and the network fee.
2. The fee is per transaction. Each transaction carries the fee for exactly the items in it, so if you stop after the first prompt you have paid only for what that transaction returned. Wrapped SOL returned by closing a wSOL account is not charged.
3. Burns are opt-in. Empty accounts are selected by default; a BurnChecked only appears for an account you chose that still holds tokens. The Terms of Service list every fee, and the rent arithmetic is in how much SOL you can recover from token accounts.

The other parts of the all-in-one wallet cleanup reuse each tool's own builders. NFT burns use Metaplex Token Metadata's BurnV1 (or BurnChecked plus CloseAccount for plain SPL NFTs), stake withdrawals use the Stake program's Withdraw, dust sales use the swap instructions Jupiter returns for that route plus a CloseAccount, and revokes use the token program's Revoke. Every paid one ends with the same kind of System Program fee transfer.

Does SOLTidy ever ask for token approvals?

No. There is no Approve or ApproveChecked instruction in any SOLTidy transaction builder; the only place those names appear in the code is the Transaction Decoder, which labels them when you decode someone else's transaction. A token approval is an instruction that gives a delegate standing permission to move tokens from one token account, and it is the one thing a cleanup never needs.

The only delegation instruction SOLTidy sends is Revoke, from the free Revoke Delegations tool, which removes approvals that other sites set. Similarly, SetAuthority appears only in the token launch tools, where you revoke mint or freeze authority on a token you created. How to revoke token approvals on Solana explains what a delegate can and cannot do.

How does SOLTidy simulate transactions before you sign?

Simulation is a dry run of a transaction against the current chain state that reports whether it would succeed and what it would change, without sending it. SOLTidy simulates twice before your wallet sees anything:

1. Sizing. Every transaction is simulated to measure its compute usage, and the compute limit is set to that figure times 1.2 plus 1,000 units, capped at 1,400,000.
2. Preflight. Right before sending, the closer simulates each batch. If a batch fails because one account changed since the scan (an active trading wallet can do that in seconds), it tests the accounts one by one, drops the ones the chain would reject and re-packs the rest, so each fee still matches what its transaction recovers. If the wallet cannot pay the network fee at all, you see: "Your wallet needs a little SOL — about 0.00001 — to pay the network fee before it can reclaim anything."

Your wallet then runs its own simulation. Phantom may also append Lighthouse assertion instructions, which make the transaction fail on chain if the result differs from the preview (Phantom docs). That is a wallet-side protection, and it is one reason SOLTidy lets the wallet sign and send rather than signing on its own.

How do you read the wallet preview for a SOLTidy transaction?

The preview should show SOL coming in and only two things going out: the fee and anything you chose to burn or sell. Check these four things:

1. The domain. It should read soltidy.com. Type it or use a bookmark rather than following an ad or a direct message.
2. SOL in. Roughly 0.0014 to 0.0019 SOL per empty account closed after the fee. A single empty SPL token account holds 0.00148844 SOL if opened recently and 0.00203928 SOL if opened before Solana lowered rent.
3. SOL out. The fee should be 5% of the recovered amount the SOLTidy screen showed, plus a network fee of 5,000 lamports per signature and a small priority fee.
4. Tokens out. None, unless you picked a non-empty account, an NFT or a dust sale. Anything else leaving is a reason to reject.

The general habit of reading simulations on any site is covered step by step in the Solana wallet security checklist, and the close-specific checks in is it safe to close Solana token accounts.

How do you verify a SOLTidy transaction afterward?

Look it up by signature and check that the instructions match the table above. Either explorer or the decoder works:

1. Copy the signature from your wallet's activity list (or open the transaction from there).
2. Open it on Solscan or paste it into the Transaction Decoder, which needs no wallet connection.
3. Check the programs called: Compute Budget, SPL Token or Token-2022, the System Program, and pump.fun or PumpSwap if you closed an accumulator.
4. Check the CloseAccount destinations: every one should be your own address.
5. Check the System Program transfers: there should be exactly one from your wallet, the fee, and no other SOL leaving.
6. Check the balance change: your wallet's SOL should be up by the amount the screen promised, give or take the network fee.

SOLTidy's own server runs a similar check before it records anything, which is the next question.

What data does SOLTidy store?

SOLTidy stores one row per confirmed paid transaction, and every value in it is read from the chain, not from your browser. After a paid transaction confirms, the page sends only { signature, tool } to /api/claims. The server fetches the transaction from Solana, rejects it unless it succeeded and its fee payer paid the SOLTidy fee wallet, and then stores:

• the signature, your wallet address and the tool name,
• the number of CloseAccount instructions,
• the service fee and the network fee in lamports,
• your wallet's balance change, the slot and the block time.

Scans are not stored, because they sign nothing. Failed transactions and free actions are not stored either. These rows power the usage totals and the recent recoveries list on the home page, and they are the source of the data from 67 cleanups.

Outside that table, the privacy policy describes the rest: no account, email or name is collected; Google Analytics measures page visits and receives the fee in US dollars, the tool and a random order ID, but never your wallet address or a signature. Chain reads go through a SOLTidy server route to an RPC provider so the provider keys stay off the page; that route forwards requests and does not write them to the database, and the RPC provider may log requests under its own policy.

Why does a wallet sometimes warn on a dApp?

A wallet warning means the wallet's own checks could not vouch for the site or the transaction, which is not the same as proof of a drainer. Phantom's documentation describes the common ones:

Warning text (Phantom)	Usual cause	What to check
"This dApp could be malicious. Do not proceed unless you are certain it is safe."	Phantom could not accurately simulate the transaction, or it would fail	Whether the balance preview is missing or shows assets you did not choose leaving
"This domain is new or has not been reviewed yet. Proceed with caution."	A new or unreviewed domain; Phantom says it usually clears after a few days	That the domain is exactly the one you meant to visit
"This account might be malicious"	Onchain activity of an account involved	Which account is flagged and why it is in the transaction

Sources: Phantom domain and transaction warnings, Phantom help: "This dApp could be malicious".

Requests to sign many transactions in one prompt also draw extra scrutiny, which is part of why SOLTidy sends one transaction per prompt. Whatever the site, the rule is the same: if a warning appears, read the balance changes; if anything you did not pick is leaving, or the preview is blank, reject. A rejected transaction costs nothing and your accounts will still be there.

How do you check whether any reclaim tool is legitimate?

Judge any tool, SOLTidy included, by the transactions it asks you to sign, not by its marketing. The three non-negotiables (no seed phrase, no token approval, no upfront payment) are laid out in how to tell a legitimate rent reclaim tool from a drainer, alongside the free alternatives.

SOLTidy passes all three, and it is transparent by design. It runs no hidden on-chain program of its own: every instruction comes from a well-known program (SPL Token, Token-2022, System, Compute Budget, Metaplex Token Metadata, Stake, pump.fun, Jupiter) that your wallet and every explorer can decode. If you ever signed something you are unsure about elsewhere, Revoke Delegations scans any address for live approvals for free.

Can you see SOLTidy's transaction history?

Yes. Every SOLTidy recovery is an ordinary, public Solana transaction, and the home page shows live totals and a Latest recoveries table in which each row links straight to the transaction on Solscan. Open any of them and you will see the same pattern described above: accounts closed back to the user's own wallet, and one fee transfer, nothing else. You can paste any signature into the free Transaction Decoder to read it instruction by instruction in plain English, and the same check works on your own transactions after a cleanup.

Bottom line

SOLTidy never touches your keys, never requests a token approval, and cannot send anything you have not approved in your own wallet, one transaction per prompt. A cleanup transaction is Compute Budget instructions, CloseAccount, WithdrawExcessLamports or pump.fun closes paying back to your address, and one System Program transfer for the 5% fee, simulated before you see it and checkable on Solscan after. The server keeps only public chain data from paid transactions. Read the preview, confirm the domain, and if it matches, the wallet cleanup on the home page or the Token Account Closer will show what your wallet holds before you sign anything.