SECURITY & CUSTODY

You Cannot Export Your Key

The single most important thing to understand about GMGN is who holds the keys. This section covers custody, the withdrawal locks, fake domains, and what the MEV record actually shows.

Key Custody: the Headline Fact

GMGN's documentation states that private key export is prohibited on all chains, Solana, EVM and Tron alike, and it says the same is true of wallets you imported yourself. There is no seed phrase to write down and no way to move a GMGN wallet into Phantom or a hardware device. Connecting Phantom does not change this: GMGN's own docs describe that flow as creating a “custodial wallet account” with fresh addresses generated per chain. The practical consequence is that funds in a GMGN wallet can only leave through GMGN's withdrawal flow, so treat it as a hot trading account rather than storage. GMGN's terms of service say the opposite, claiming you “retain control over your private keys”, and that contradiction is worth reading in full in is GMGN safe and who holds your private keys. Keep long-term holdings in a wallet you control, and fund the trading account from it as described in connecting Telegram and funding your wallet.

Withdrawal Locks Are Designed Behavior

Most “my withdrawal is stuck” complaints are the security model working as intended. Withdrawals are web-only, so the Telegram bot cannot send funds out at all. Google Authenticator is mandatory before your first withdrawal, and funds only go to addresses on your whitelist. Adding or changing a whitelist entry blocks withdrawals for three hours, and re-binding Google Authenticator blocks them for 24 hours. The Max button also holds back a small balance for rent and gas, so it never sends everything. None of these are bugs, but all of them will strand you if you discover them in a hurry. If something genuinely is not moving, work through the troubleshooting hub before assuming the worst.

Does GMGN Front-Run Its Own Users?

No evidence supports that claim, and the record runs the other way. GMGN users are the most sandwich-victimized cohort on Solana, which is a statement about third-party MEV bots targeting GMGN's order flow, not about GMGN skimming it. The co-founder publicly pressed Solana over validators leaking transaction data to sandwich bots, GMGN shipped hardened MEV protection in July 2025, and when the anti-MEV protection was breached in October 2025 it compensated the affected users automatically, with no claim to file. Enabling anti-MEV requires a priority fee of at least 0.002 SOL and costs you some speed, and GMGN says outright that the protection is not perfect. The fee guide covers the priority fee and tip settings that decide how exposed you are.

Fake Domains and Wallet Hygiene

Only four hosts are official: gmgn.ai, docs.gmgn.ai, papi.gmgn.ai for the API, and www.gmgn.cc for chart embeds and the support address. GMGN does not defensively own the other TLDs, and at least one live wallet drainer has run on a lookalike domain, so check the address bar before you connect anything. On Telegram, scammers register handles that swap a lowercase L for a capital I, and GMGN states that its admins never message first and never ask for keys. Keep trading balances small, verify the group only through the official X account, and read the custody guide before you move real size. GMGN also runs a bug bounty on HackenProof paying up to 1,000,000 USDT for unauthorized access to wallets or keys, which is itself a strong hint about where those keys live.

Trade on GMGN With Code ggguide

Our referral code is ggguide. GMGN pays us a share of the 1% fee you already pay. It gets you no discount and no bonus, so use it only if the guides here were useful.

Open GMGN