Is SOL Rent Recovery Safe?
SOL rent recovery can be a legitimate way to reclaim storage deposits, but no wallet tool should be treated as automatically safe. The important questions are what an action does, what authority it needs and whether the transaction you approve matches the result you reviewed.
A public scan does not need wallet authority
A public Solana address lets a service inspect on-chain account information. It does not provide a private key or permission to transfer assets. Refundary supports scanning before connecting so you can first decide whether the results are useful.
Public does not mean anonymous. An address can reveal transaction history and balances, and sharing it can associate that activity with you. Consider which service you are using even when the requested operation is read-only.
A scan result is a snapshot. New transfers, changing rent requirements, swaps or account changes can make it stale. A trustworthy signing flow checks the relevant state again instead of treating an old result as sufficient evidence for a new transaction.
Connecting is not the same as signing
Connecting a wallet generally lets a website learn the selected public address and request wallet actions. It should not be described as permission for any arbitrary transfer. Read the connection prompt and make sure the domain is the one you intended to visit.
Signing a transaction authorizes its particular message. That message can contain several instructions, so a single approval can represent more than one action. Reviewing only a headline such as recover SOL misses the details that determine what actually happens.
Signing a message is another kind of request and is not automatically harmless either. Read what it authorizes and why it is needed. If a rent scanner unexpectedly asks you to sign something merely to reveal public balances, pause and understand the reason.
Decide which outcome you actually want
Rent Recovery, selling dust and transferring unwanted tokens are different decisions. A rent-only action may close an eligible empty account or withdraw supported excess while preserving active holdings. A sale exchanges tokens. Protected Burn & Close moves selected eligible tokens to a vault.
Before selecting an opportunity, decide whether you want to keep the token, sell it or remove it. The same source account can support alternative outcomes, and a larger headline is not always the outcome you prefer.
A tool should not silently substitute removal for an unavailable sale. Nor should it treat an account that displays a rounded zero as definitely empty. The exact balance, account type and intended operation all matter.
Read the wallet preview as a separate check
Compare outgoing token balances with your selection. Check recovered SOL, the service fee and relevant destinations. If you expected only rent recovery, investigate any unexpected movement of tokens you wanted to keep.
Wallet previews may group instructions or estimate amounts. Advanced details can help explain transfers, account creation and account closure, but a lack of a warning is not proof that every instruction matches your intention. If the meaning remains unclear, cancellation is a useful safety feature.
A reviewed plan can also change during wallet processing. Refundary's Protected Burn signing test requires the returned transaction message to remain identical to the reviewed one. A signature addition is expected; an unreviewed change to instructions is rejected.
Why eligibility checks can exclude assets
Token accounts can differ in their program, authorities and features. A token may be frozen, delegated or subject to restrictions that an ordinary transfer flow does not cover. Some apparent balances are also unsuitable for the intended account closure.
Refundary's Protected Burn eligibility is deliberately conservative. It excludes NFT-like and zero-decimal assets, Token-2022 cases, wrapped SOL and other unsupported conditions. Skipping them is not proof they are malicious; it means the current flow will not make unsafe assumptions about them.
Simulation provides another check by testing the constructed transaction against network state. It can catch failures before wallet review, but it does not freeze the blockchain or guarantee future execution. Fresh state checks, bounded transaction construction and user review serve different purposes.
Keep your secrets outside the website
Never enter a seed phrase or private key into a recovery page. Those secrets can give control over the wallet, far beyond a selected cleanup transaction. A legitimate public scan needs only an address, and transaction authorization should occur through the wallet's own interface.
Use independently verified navigation instead of token metadata links or unsolicited messages promising a refund. If someone claims you must transfer valuable assets first to unlock rent, treat that as a reason to stop rather than an ordinary recovery step.
Know what completion means
The current Protected Burn preview is non-broadcast and leaves the sponsor unsigned. Wallet-returned signatures are discarded. No assets move and no fees are charged by that test, even when the wallet reports that signing succeeded.
For a live supported operation, a successful on-chain transaction is the relevant completion event. An estimate, signature prompt or loading animation is not a receipt. Check the final outcome and rescan when necessary.
A sensible routine is to scan first, review a small understandable selection, check the wallet message and stop whenever the evidence does not match your intention. Recovery is optional. Protecting control of the wallet is more important than collecting every possible deposit.