Photon is a real, long-running terminal, and we found no confirmed hack of the platform itself. It is run by Tiny Astro Inc., and it gives you your wallet's private key at sign-up. The main risks are clone sites that copy Photon's interface to drain wallets, the fact that the key is shown only once, and a shrinking user base.
Risk notice: Crypto trading is high risk and memecoins can go to zero in minutes. Trading bots use hot wallets. This page is not financial advice; only trade what you can afford to lose.
Facts on this page were checked September 26, 2026. For fees and features, see our full Photon review.
What we checked
| Check | What we found |
|---|---|
| Company/team | Tiny Astro Inc.; terms governed by the laws of Ontario, Canada (Photon terms). Individual founders not named in official docs |
| Custody | Photon generates a wallet and reveals the private key once at sign-up (Photon docs) |
| Known incidents | No confirmed platform breach found |
| Audits | No public third-party security audit found |
| Phishing risk | High: documented clone and drainer sites impersonating Photon |
Who runs Photon?
Photon's terms of use name "Tiny Astro Inc." as the company and say they are governed by "the laws of the province of Ontario, Canada." According to Solana Compass, Tiny Astro started in 2022 as an NFT analytics platform before building Photon, which now runs on Solana and several EVM chains. Photon's official docs don't name the individual founders.
Photon has a long record by memecoin standards. Photon Guides, an independent site not affiliated with Photon, dates its first fee month to January 2024 and puts its peak at around $84.6 million in monthly fees in January 2025. Usage has since fallen hard: DefiLlama showed about $483,000 in 30-day fees when we checked on September 25, 2026 (DefiLlama). Low usage isn't a security flaw, but it is worth watching. Less revenue can mean less investment in the product, and our safety guide shows how often bots get sold or paused.
Custody: who controls your funds?
When you first log in, Photon creates a Solana trading wallet for you. Its docs warn: "Your private key will be revealed ONLY ONCE at this step. Please take a moment to save your private key in a safe place before clicking 'Continue.'" You deposit from your main wallet and withdraw to any address from the Funds Transfer page.
The terms say the company "has no way of granting you access to the site if you lose access to, or control of, your Wallet," and that it is "not responsible for any loss that you may incur as a result of any unauthorized activity."
In practice:
- You hold the key, so you can recover funds without Photon, as long as you saved it.
- If you skip the backup, Photon says it can't help you.
- Photon's software can still sign trades from that hot wallet, like every terminal.
- Mobile use adds risk. Photon has no app, and Photon Guides says mobile users import the key into Phantom's in-app browser. Every extra place a key lives is another place it can leak.
Known incidents
We found no confirmed breach, exploit or insider incident involving Photon's platform as of September 26, 2026. Photon Guides also reports none. Security is one of Photon's stronger points in our method: its security sub-score is 9.0, the starting value for a bot with no confirmed incident.
User reviews are thin. Photon's Trustpilot page had 20 reviews and a 2.0 rating when we checked, with complaints mostly about fees and failed sells, plus one user who said SOL left their account without sharing the key. These are individual, unverified reports on a small, mostly old sample, and they don't establish a platform breach.
Fake Photon sites
This is Photon's biggest real-world risk:
- Clone terminals. Photon Guides documents a clone at speedtrade[.]icu that copies Photon's interface and runs a wallet drainer when users connect.
- Drainer campaigns. A February 2026 Recorded Future report found drainer landing pages impersonating services "such as Axiom, Bitget, Photon, Jito, and Marinade."
- Look-alike domains. PhishDestroy flagged photon-sol[.]com as a wallet-connect phishing site in November 2025. On September 26, 2026, our own web searches also surfaced Photon-style pages on domains outside tinyastro.io (for example, a .im domain and a vercel.app copy). We did not open them; treat any such domain as suspect.
Why this matters more for Photon: you sign in by connecting a wallet such as Phantom. That is exactly the step a drainer site imitates. The official Solana site is photon-sol.tinyastro.io, and Photon Guides lists the other chains under the same tinyastro.io domain.
Safety checklist for Photon
- Type photon-sol.tinyastro.io yourself and bookmark it. Never reach Photon from an ad, a search ad, a DM or a "new Photon" link.
- Check the domain before you connect a wallet. It must end in tinyastro.io.
- Save the private key offline the moment it is shown. You won't see it again.
- Connect a funding wallet with little in it, and keep long-term holdings in a separate wallet.
- Keep a small balance in the Photon trading wallet and withdraw profits often.
- Don't import the key into other apps unless you need to move funds, and then only into a reputable wallet.
- Turn on MEV protection and set your priority fee and slippage before trading (MEV protection explained).
- Test a small withdrawal right after your first deposit.
Our how to use Photon guide walks through setup, and are Solana trading bots safe? covers wider risks.
Our verdict
Our editorial view: Photon is legit, with a named operating company, a clear custody model and the cleanest incident record of the three big web terminals we've checked for safety (Axiom and GMGN both have incidents on file). Its risks are phishing clones, the one-time key reveal and a fading user base. Photon scores 6.9/10 and sits eighth on our list, which is an editors' order (usage, score and ease of starting), not a pure sort by score. It ranks low mainly on features and usage, not safety.
If you want more tools, compare Axiom and GMGN, or see our ranked Photon alternatives. Every score is on the Solana trading bot ranking.
