Act on the assumption that the wallet is permanently unsafe. If someone has your seed phrase, private key, or authority over your accounts, they keep that access. Changing the password on your wallet app does not remove them, and there is no revoke button that undoes it.
Do This First
Create a brand new wallet with a new seed phrase, on a device you trust. Do not reuse the old seed phrase.
Move anything you still control to the new wallet. Start with liquid assets, since staked positions take an epoch to withdraw and may not be reachable in time.
Stop using the old wallet for anything, including receiving funds. Anything sent there later can be swept too.
Moving to a new wallet is the only reliable response. Everything else is damage assessment.
Revoking Access Does Not Work the Way It Does on EVM Chains
This is the most common and most costly misunderstanding, so it is worth stating plainly.
On EVM chains such as Ethereum, Base, Arbitrum, or BNB Chain, most drains run through a token approval that you can later revoke, which limits the damage. Solana has no equivalent.
If you signed a malicious transaction that handed authority over your accounts to an attacker, then once that signature is on chain:
The attacker holds that authority and can approve transactions on those accounts.
You no longer can. There is no revoke that takes it back.
It cannot be reversed by you, by Marinade, or by anyone else.
Do not spend time looking for a revoke tool. Move to a new wallet instead, and treat the old one as gone.
What Marinade Cannot Do
Marinade is non-custodial. We never hold your funds and we have no control over your wallet. That means we cannot:
Block, freeze, pause, or cancel transactions
Reverse a transfer or recover stolen funds
Remove an attacker's authority over your accounts
Move assets out of your wallet on your behalf
Restore access if you have lost your seed phrase
Solana transactions are final once confirmed. No one, including Marinade, can undo them.
What Marinade Can Do
Help you read what happened on-chain and identify which positions are affected
Confirm whether a message, site, or email claiming to be from Marinade is genuine
Point you to the correct official links so you do not land on a fake site next time
How It Usually Happens
Because there is no undo, avoiding the signature in the first place is the whole game:
Approving a transaction on a fake site that mimics a real app. Read what you are signing, and if you cannot tell what a transaction does, do not sign it.
Entering a seed phrase into a website, form, or support chat. No legitimate service ever asks for it.
Downloading software from a link in an email or DM, including fake wallet updates and fake meeting apps.
Storing a seed phrase in cloud notes, photos, or messages.
Scams You Will Actually See
These are the ones our users report most often. All of them exist to get you onto a website and signing something.
Fake Marinade tokens sent to your wallet. The token is named to look like ours, and the token description contains a website link. That link is the attack.
Fake NFTs claiming a prize or an unclaimed airdrop. An NFT appears in your wallet saying you have won something or that rewards are waiting, with a link in the description to claim them. Marinade does not deliver rewards this way.
Emails claiming your stake is in danger. Someone claiming to be from Marinade warns that your position is at risk, needs migrating, or requires urgent action. Urgency is the tell. We will never email you asking you to connect a wallet or sign a transaction to save a position.
Fake Telegram support groups. Groups that look like official Marinade support, full of links and helpful-looking admins.
Fake admins who DM you on Discord or Telegram, often minutes after you post a question publicly. Real Marinade staff never DM you first, and real support does not happen in DMs.
Anyone can send a token or NFT to your wallet, and you cannot prevent it. Receiving one is not a compromise and does not put your funds at risk. Only interacting with it does. Leave it alone, or hide it in your wallet.
Why We Cannot Simply Get These Taken Down
We report fake tokens, sites, groups, and accounts whenever we find them. Takedowns work, but they are slow, and a scammer can spin up a replacement within hours of losing one. The list above is a small sample of what is out there, and new variations appear constantly.
This is why your own vigilance protects you better than any takedown can. Treat every unexpected link, DM, email, token, and NFT as hostile until you have verified it against our official links. If something is genuinely from Marinade, it will still be there after you have checked.
See also scam alerts and Beware of Fake Marinade Tokens.
Beware of Recovery Scams
People who have just been drained are targeted a second time. Expect direct messages within hours offering to recover your funds.
Recovery services are fake. Nobody can reverse a Solana transaction or strip an attacker's authority.
Marinade staff will never DM you first, and will never ask for your seed phrase, private key, or a screen share.
Do not pay an upfront fee to anyone promising recovery.
Reporting
Theft is a crime and worth reporting to your local law enforcement, who can work with exchanges where stolen funds are cashed out. Keep the transaction signatures and addresses involved, since they are the evidence.
If the attack came through something impersonating Marinade, such as a fake site, token, NFT, email, group, or DM, please tell us as well. We cannot recover your funds, but reporting it helps us get it taken down and warn the rest of the community.