Who can move your Solana tokens?

A free 30-second check-up of your wallet: approvals other addresses still hold, Token-2022 tricks, phishing airdrops, stray nonce and stake authorities, and whether the wallet account itself has been tampered with. Anything that can be fixed, you fix with one signature in your own wallet.

Connecting only reads your public address. SealGuard never asks for a seed phrase, never holds a key and never signs anything for you.

What this can't see

Most Solana thefts are one signature on a transfer, not a standing approval. SealGuard can't stop you signing on another site. Read your wallet's simulation before every signature, and keep large amounts on a hardware wallet.
It reads the chain, not your computer: malware on your device is outside what it can check.
NFT phishing airdrops are flagged but not burned here yet; burn them from your wallet app.

How it works

Your browser asks SealGuard's relay for your token accounts, Token-2022 mints, stake and nonce accounts and token names. The relay only forwards read calls to a Solana RPC provider and keeps its API key out of the page.
The rules run in your browser: approvals, permanent delegates, transfer hooks, frozen accounts, empty accounts, phishing names, stake withdraw authority, durable nonces, and the wallet account's owner.
Fixes are ordinary Token Program instructions (Revoke, Burn, CloseAccount) and System Program nonce withdrawals, built in your browser, simulated, then signed by your wallet. The code is public, so anyone can read exactly what is sent.