Technical profile for Phantom.
This mobile application is a multi-chain Web3 wallet and decentralized finance (DeFi) trading platform designed for managing digital assets and executing advanced trading strategies. It supports major blockchain ecosystems including Bitcoin, Ethereum, Solana, and Base, providing a unified interface for spot trading, perpetual futures (Perps), and market discovery. The application integrates social trading elements through token-specific chat rooms and offers a hybrid onboarding experience that supports both traditional mnemonic recovery phrases and social-login-based wallet abstraction.
Written from a FlyTrap agent exploring the app on a real device, not from the store listing. It covers only the screens that run reached, so anything behind a login, paywall or region lock is absent.
33 SDKs found across 22 categories. Click any SDK to see every other app that uses it.
53 permissions requested at runtime. Colors reflect platform sensitivity tier.
Access approximate location (network-based).
Access exact location via GPS, cell, and Wi-Fi.
Connect to paired Bluetooth devices.
Discover nearby Bluetooth devices.
Take pictures and record video.
Read files from shared external storage. Replaced by READ_MEDIA_* on Android 13+.
Read audio files from shared storage.
Access only photos and videos the user explicitly selected.
Record audio from the microphone.
Write files to shared external storage. No-op for apps targeting Android 11+.
Post notifications to the system.
Read connectivity information.
Connect to paired Bluetooth devices on Android 11 and below.
Discover and pair Bluetooth devices on Android 11 and below.
Open network sockets.
Draw windows on top of other apps. Granted from system settings.
Authenticate using biometric hardware.
Authenticate using fingerprint hardware.
Control the vibrator.
Read Wi-Fi connection information.
Keep the device awake.
Modify global audio settings.
Run a foreground service.
Required for foreground services of type mediaPlayback.
Receive the BOOT_COMPLETED broadcast.
What FlyTrap detected inside Phantom.
This mobile application is a multi-chain Web3 wallet and decentralized finance (DeFi) trading platform designed for managing digital assets and executing advanced trading strategies. It supports major blockchain ecosystems including Bitcoin, Ethereum, Solana, and Base, providing a unified interface for spot trading, perpetual futures (Perps), and market discovery. The application integrates social trading elements through token-specific chat rooms and offers a hybrid onboarding experience that supports both traditional mnemonic recovery phrases and social-login-based wallet abstraction. This comes from a FlyTrap agent exploring the app on a real device, so it covers only the screens that run reached.
Phantom is built with React Native. FlyTrap determined this by analyzing the app's compiled binary, not from anything the developer published.
FlyTrap detected 33 third-party SDKs inside Phantom, including Amplitude, BLE PLX (react-native-ble-plx) and Crossmint. They span areas such as Analytics, Hardware Wallet, Web3 Wallet and Monitoring. The full list, grouped by category, is on this page.
Phantom requests 53 permissions. 11 of these are sensitive, such as Approximate location, Precise location and Connect to Bluetooth devices. Each is listed above with its platform sensitivity tier.
FlyTrap reports what an app contains, it does not issue a safety verdict. Phantom requests 53 permissions (11 sensitive) and bundles 33 third-party SDKs. Reviewing those alongside the developer helps you decide what you are comfortable granting.
The version FlyTrap analyzed targets Android.
