u/PuzzledHousing9043 — reddlx

I’m trying to understand what happened during a Jupiter → Phantom SOL transfer/swap.

I moved SOL through Jupiter into my Phantom wallet. Shortly after, Phantom showed “App Interaction — Unknown” and notified me that I sent 0.8512 SOL. I don’t remember manually sending that transfer. The transaction shows my wallet had an outgoing SOL balance change and another wallet received it. Phantom support confirmed the on-chain movement but couldn’t tell from chat whether it was from a malicious signed transaction, connected dApp/session, delegated permission, or compromised wallet. I’m not blaming Phantom, Jupiter, or Solana. I’m just looking for help understanding what triggered the unknown interaction and how to prevent it from happening again.

Has anyone else had this happen with Phantom/Solana?

This is the second time I’ve seen something like this happen, and my friend had a similar issue moving funds from Coinbase to Phantom.

Today I received SOL into my Phantom wallet. Right after, Phantom showed “App Interaction — Unknown” and then notified me “You sent 0.8512 SOL.”

I did not manually send that SOL.

Transaction:
fZZnCCHyd6YkJ5FuyuQSWrtg7hxbKsCRZxh16LMYuuEDwPAtxGm2piEmqpvFqvC2TT5edk1gdBk6Rx8J3KE6U2m

My wallet:
BdVQmKHza6N8wSLXiaaPzMRQUcMmH8SqMWJ79aS7a4vJ

Destination:
6DTmby3mF6VbxVaF1iSWmx4m5jaHBMtupsw27hBXBvLd

On-chain balance change:
My wallet: -0.851220017 SOL
Destination: +0.851204897 SOL

Phantom support confirmed the outgoing balance change but said they can’t confirm from chat whether it was a malicious signed transaction, connected dApp/session, delegated permission, or compromised recovery phrase/private key.

I’m not saying Phantom, Jupiter, Coinbase, or Solana directly stole anything. I’m trying to figure out what actually caused this because Phantom showed the interaction as Unknown, and the send happened right after funds entered the wallet.

Has anyone seen this pattern before? Specifically:
\- Phantom notification saying “You sent SOL”
\- “App Interaction — Unknown”
\- No clear app label
\- SOL sent shortly after receiving funds

Any help reading the transaction or identifying the program/session involved would be appreciated. (I will not answer DMs asking for seed phrase, recovery phrase, private key, wallet sync, QR code verification, or “support portal” links. Public advice only.)