Wallet safety

Tally can’t move your funds

Not won’t: can’t. Linking a wallet gives Tally its public address, the same one anyone can look up. Here’s why that can’t be used to take anything, and how to check it yourself.

How money moves on Solana

Every transfer, swap or token approval is a transaction, and the network only accepts one that carries a signature made with your wallet’s private key. That key never leaves your wallet app. No key, no signature: nothing moves.

What linking gives Tally

  • Your wallet’s public address
  • Its trades, which are public on the blockchain anyway
  • Your private key or seed phrase: never asked for, never seen
  • A transaction signed by you: never asked for
  • A token approval, or any right to spend from your wallet

Linking with a signature

In Phantom, Solflare or Backpack you sign a short message. Your wallet shows it as Sign message, in plain words, with no balance changes. A message signature can’t move funds or approve tokens. Taking funds needs Approve transaction, which Tally never asks for.

(Examples: your wallet’s own pop-ups look a little different.) If anything claiming to be Tally ever asks you to approve a transaction, close it.

Linking with a tiny transfer

A wallet inside Axiom, Photon, BullX or Trojan can’t sign a message, so it proves itself another way. You never connect it to Tally: you send about 30 cents yourself, from your app, to an address made for your link. That address has no private key at all. It’s derived from Solana’s Memo program, off the curve wallet keys are made on, so no key exists for it, and the Memo program never moves SOL. What’s sent there can never leave: it’s burned, not Tally’s.

Check it yourself

  • The pop-up says Sign message, not Approve transaction
  • Look your wallet up on Solscan: linking adds no transaction to it (the tiny transfer is the one you sent yourself)
  • The linking code is public: read it on GitHub
  • Unlink any time with /unlink in your server