Security

What a cleanup transaction actually contains

These are all the instructions we can put in a transaction. There are no others:

Every one of these is a program maintained by the Solana ecosystem itself, with the same address for everyone on mainnet. Your wallet recognises them and can label them for you.

Where the fee goes

The protocol fee is sent to a single, publicly known address. You can inspect every payment it has ever received:

7RgmHGYfdTDWvDUVnRFNEykpNpfo4Vyb7wdaueXRppUt

The fee is 2% of the rent you reclaim. It is never taken from the delegated principal of a stake account— that capital is returned to you in full. The terms describe this in detail, and the transfer amount is visible in the transaction before you sign it, so you can check the arithmetic yourself.

How to verify a transaction before signing

Your wallet shows you the full instruction list before you approve anything. This is the moment where you have all the power — use it.

What to look for

• The programs involved. You should see only the programs listed in the table above. Anything else does not come from us.
• The transfers. There should be at most two transfers leaving your wallet: the protocol fee, and a referral commission if you were referred. Nothing else should move out.
• The amounts. The fee should be about 2% of the rent being reclaimed — a small number. If a large transfer appears, reject the transaction.
• The burns. If you selected the dust category, you will see Burn instructions. These are irreversible. If you did not intend to burn anything, reject and change your selection.
• No approvals or delegations. We never request a token approval, a delegate, or any authority over your accounts. If you are ever asked for one in our name, it is not us.

In Phantom and Solflare, expand the transaction details rather than relying on the summary line. If anything does not match what you expect, reject: an unsigned transaction has cost you nothing.

What we do not do

• We never ask for your seed phrase or private key. There is no situation — support, recovery, verification, migration — in which we would need it. Anyone asking for it in our name is attempting to steal from you.
• We hold no funds and no keys. We build an unsigned transaction; you sign it. We are technically unable to move your assets.
• No third-party advertising, ever. The site carries no ad network, no ad slot and no affiliate placement, and it will not in the future.
• No monetisation other than the 2% fee. We do not sell data, we do not sell traffic, and we run no tracker beyond privacy-friendly, cookieless audience measurement. See the privacy policy.

Phishing

Wallet cleaners are a common phishing theme, precisely because they ask you to connect a wallet. Protect yourself with two rules.

1. Check the domain

Our only official domains are:

• solhealth.io
• www.solhealth.io

Any other domain — a different extension, a hyphenated variant, a lookalike character — is not us, no matter how closely the page resembles this one. Prefer typing the address yourself or using a bookmark over following a link from a direct message.

2. Read the transaction

A convincing clone of this site still cannot take anything from you unless you sign. Applying the checks in the section above protects you even if you land on the wrong page.

If you are unsure: do not connect, do not sign, and contact us at the address below.

Responsible disclosure

If you have found a vulnerability, we want to hear about it before anyone else does. Report it to gacanga@gmail.com.

Please give us a reasonable window to fix the issue before disclosing it publicly, and avoid any testing that would degrade the service or affect other users' funds or data. We will acknowledge your report and keep you informed of the fix.