© 2026 Alchemii
BLOCKCHAIN

Is Alchemii Safe? Security & Custody Model

The short answer: Alchemii never holds your funds or keys — every transaction is built in your browser and signed in your own wallet. The long answer, including what we can't do and what we can't undo, is below.

Non-custodial by design

Alchemii never takes custody of your SOL, your tokens, or your private keys. There is no deposit step, no account, no password, and no point in any flow where we ask for a seed phrase. If someone claiming to be Alchemii asks for one, it's a scam.

Every operation — token creation, liquidity pools, LP burns, authority revocations — is assembled as a Solana transaction in your browser and proposed to your wallet through the standard Solana Wallet Adapter. Phantom, Solflare, Coinbase Wallet, Trust, Bitget, TokenPocket, and SafePal are supported directly; Wallet Standard wallets like Backpack are auto-detected when installed. Your wallet simulates the transaction, shows you the balance changes, and you approve or reject. Rejecting costs nothing.

Because everything settles on Solana mainnet through your own signature, nothing you create depends on us staying online. If Alchemii disappeared tomorrow, every token, pool, and burn you executed through the site would remain exactly as it is on-chain.

What's actually in the transaction you sign

There is no Alchemii-controlled smart contract in the middle. A token-creation transaction contains only instructions from the SPL Token Program, the Metaplex Token Metadata program, and Solana's System Program — the same primitives the official CLI uses:

  • Create and initialize the mint account — with your wallet as mint authority
  • Set freeze authority to null at creation — tokens made with Alchemii are born without one, so nobody (us or you) can ever freeze a holder's wallet
  • Create your associated token account and mint the full supply to your wallet
  • Attach Metaplex metadata — with your wallet as update authority
  • Transfer the flat Alchemii service fee — a plain SOL transfer, visible in your wallet's preview
  • Optionally set mint authority to null, if you enabled Revoke Mint

Every instruction is inspectable in your wallet before you approve, and auditable on Solscan afterward.

What Alchemii can and cannot do

Because of the structure above, Alchemii cannot:

  • Mint more of your token. Mint authority belongs to your wallet — or to no one, if you revoked it.
  • Freeze your holders. The freeze authority never exists on tokens we create.
  • Change your token's name, symbol, or image. Update authority is your wallet.
  • Withdraw your liquidity. LP tokens from pools you create sit in your wallet, not ours.
  • Move any funds without your signature. The only thing we can do is construct a transaction and ask your wallet to approve it.

The flip side is worth being honest about: we can't undo your mistakes either. A confirmed transaction on the wrong mint address, a burned LP token you meant to keep, a revoked authority you still needed — non-custodial means nobody, including us, can reverse any of it. And non-custodial doesn't protect a compromised wallet: if someone else holds your seed phrase, they hold everything you created here.

Fee transparency

A token launch has three cost components: Solana network fees, Metaplex metadata account rent, and a flat Alchemii service fee. The running total sits next to the Create Token button — the service fee, plus a separate ~0.01 SOL estimate for network rent — and it's visible before you ever connect a wallet. Optional extras, like revoking mint authority or the vanity "pump" address suffix, each add a flat amount to that number as you toggle them. One line item is not optional, and we'd rather name it here than let you meet it at the wallet prompt: the Revoke Freeze step is locked on because a liquidity pool cannot be created without it, and it carries its own flat fee in every launch.

The service fee is the only payment to us, and it's an ordinary SOL transfer instruction sitting inside the same transaction you approve — your wallet shows it to you before you sign, rather than billing you somewhere else afterward. We also never take a cut of your token's trading volume, and that isn't only a promise: tokens created here are minted under the classic SPL Token Program, which has no transfer-fee or transfer-hook extension. There is no mechanism through which we — or anyone else — could attach a tax to your token's trades after the fact.

The total displayed next to the submit button and the amount charged in the transaction are computed from the same fee schedule in code, so the number your wallet asks you to approve is the number the form showed. Treat that running total as the authoritative figure for your configuration — it is computed from the live fee schedule. The Solana token cost calculator is a planning estimate for the on-chain line items, and the protocol-side numbers behind it are published in our open cost dataset (downloadable CSV/JSON, CC BY 4.0).

Irreversibility warnings we surface

Two of the most valuable things this toolkit does — revoking authorities and burning LP tokens — are permanent by design. That permanence is the trust signal. So we say it plainly before you sign, not in a footnote after:

  • The LP burn page states up front that once burned, the LP supply can never be withdrawn.
  • The revoke mint authority guide includes a pre-flight checklist — verify the mint address on Solscan, confirm your full supply is already minted — and ends with "if any doubt, pause."
  • Revoke Mint is bundled into the same transaction as the mint itself, so there is never a confirmed on-chain state in which mint authority is live — and once that transaction lands, the supply is fixed for good. The form says so before you enable it.

We also don't declare success early: the LP burn flow only shows "liquidity locked" after the transaction is confirmed on-chain. If confirmation times out, you see a pending state and a Solscan link to check yourself.

Open methodology

The cost and launch figures we publish aren't marketing numbers. The Solana token cost dataset is open data under CC BY 4.0 — real launch costs by configuration and SOL price, sourced from Solana's official fee and rent documentation, free to cite and reproduce. Our launch data methodology documents exactly how the samples behind our published stats were collected. If our numbers are wrong, they're wrong in public, where you can check them.

What we can see

Non-custodial doesn't mean invisible, so here's the honest version. We never see your private key or seed phrase — there is no code path that asks for one. What we do see is ordinary web analytics: pages visited, referrer, browser and region, and clicks on key buttons, through Google Analytics 4 and AttriFast. Our host, Vercel, logs request metadata like IP addresses for abuse prevention.

One specific thing worth naming: when you connect a wallet, the site fires a product-analytics event that includes the public address you connected with. That address is public on-chain data the moment you transact, but we'd rather you hear it here than discover it in a network tab. If you want to use the toolkit without that, our token audit checker runs entirely without a wallet connection. Full detail lives in our privacy policy.

Report a concern

Found a bug, a misleading number, or behavior that doesn't match what this page claims? Tell us via the contact page. Security reports get priority. And you don't have to take our word for anything here — every transaction you sign through Alchemii is public on Solana, and our free token trust audit will read any token's authorities and LP status straight from the chain — no wallet connection required, including for tokens we had nothing to do with.