Solana Wallet Forensics is where an account investigation comes together. A completed run lands here as a risk score plus a set of tabs, each a different angle on the account — what it did, where value moved, who it dealt with, and which attack patterns it matches.
Why it exists
A Solana account investigation needs most of the same views as an EVM wallet — the timeline, the fund flow, the counterparties — but not the EVM-only pieces like token approvals. This page keeps the familiar forensics layout and scopes the tabs to what’s actually meaningful for a Solana account.
Who uses it
- Forensics analyst — investigates a Solana account.
- Auditor — reviews account activity tied to a program audit.
What’s on the page
An overall risk score with a per-component breakdown sits above the tabs:
- Timeline — the account’s events in order.
- Findings — detector hits for the account.
- Dust — dust indicators.
- Fund Flow — a graph of value in and out.
- Counterparties — profiled interaction partners with risk signals.
- Attacks — attack patterns matched against the account.
How to open it
- From a Solana wallet forensics run after it completes.
- From an asset card for a Solana account.
- Direct URL —
/solana-wallet?network=<chain>&address=<base58>.
Limits
- Requires a signed-in account.
- The EVM-only tabs (approvals, post-mortem, reconstruction, compliance, evidence) aren’t shown for Solana accounts. An empty tab — no fund flow, say — is a valid result, not an error.
Related pages
- Solana Wallet Analyzer — the in-progress view that feeds this page.
- Solana PDA Forensics — the sibling view for PDAs.
- Wallets — the inventory of completed runs.