Solana (SOL) and SPL tokens
Solana tracing and evidence reporting
Solana settles quickly and cheaply, so funds tend to move through more accounts in less time than on other networks. Every instruction is still recorded publicly, but reading a Solana case well means understanding token accounts and programme calls rather than simple wallet-to-wallet transfers.
Is Solana traceable?
Yes. Every Solana instruction is public and permanent, including SPL token transfers made by a programme on a wallet's behalf, so stolen SOL or tokens can be followed. Speed and low fees mean more hops and more swaps to document, which makes the work longer rather than impossible.
- SPL tokens sit in associated token accounts, so a trace that only follows SOL transfers misses the loss.
- One transaction can hold several instructions; transfers have to be read at instruction level.
- Swap routes on decentralised exchanges are recorded, but each swap reduces the confidence attached to continuity.
- A confirmed Solana transaction cannot be reversed, cancelled or frozen by us.
How a Solana trace is built
Reading token accounts, not just wallets
SPL tokens such as USDT and USDC sit in associated token accounts owned by a wallet, not in the wallet address itself. A trace that looks only at SOL transfers misses the stablecoin movement that usually carries the loss.
Following instructions inside a transaction
One Solana transaction can contain several instructions, including transfers executed by a programme on a user's behalf. Value moved this way is fully recorded, but it has to be read at the instruction level to be seen at all.
Handling high hop counts
Fees are fractions of a penny, so funds can pass through dozens of accounts within minutes and be swapped between tokens on decentralised exchanges along the way. We follow the dominant value path and document the splits rather than chasing every peel.
Classifying the endpoint
Each branch closes out as a deposit at a regulated service, a bridge to another network, a swap route or an account that has gone quiet, with the reasoning and the confidence stated plainly.
What a Solana trace cannot do
- A confirmed Solana transaction is final and cannot be reversed, cancelled or frozen by us.
- Account addresses are not identities; attribution needs off-chain records released under legal process.
- Swaps and bridges break single-transaction continuity, so linkage rests on amount and timing correlation and is reported with a confidence level.
- Once value reaches a custodial deposit account, internal movements are no longer visible on the ledger.
The deliverable is described in full in our guide on what an onchain evidence pack contains, and the stage-by-stage timings are on our investigation process page.
Common questions
- Can stolen SOL or SPL tokens be traced?
- Normally yes, because every Solana instruction is public and permanent. Whether the trail reaches a useful endpoint depends on where the value settles and how many swaps it passes through.
- My wallet was drained after connecting to a Solana site. Can you show how?
- Usually. The delegated authority or programme call that moved the tokens is recorded, so the mechanism can generally be reconstructed alongside the outgoing path.
- Does the high number of transactions make Solana harder to trace?
- It makes the work longer rather than impossible. The method is the same; there are simply more hops to review and more swap routes to document.