TRK wallet · status

DEVNETTRK is a client-side wallet: there are no TRK servers. This page monitors the third-party services TRK depends on.

Components

ComponentStatusDetailsUptime 24 hUptime 7 d
Solana devnet RPC (default network) core
api.devnet.solana.com
Downtimeout after 8000 ms0.00%0.00%
Fallback devnet RPC
solana-devnet.gateway.tatum.io
Operationalslot 509386207, 561 ms, v4.4.0-beta.0100.00%100.00%
Solana testnet RPC
api.testnet.solana.com
Operationalslot 450644795, 310 ms, v4.4.0-beta.0100.00%100.00%
Solana mainnet-beta RPC (read-only probe)
api.mainnet-beta.solana.com
Operationalslot 455086217, 91 ms, v4.3.0100.00%100.00%
Market price APINot configuredTRK currently prices tokens from its own on-chain AMM pools via the RPC above; no external price API is configured (market feature is phase 2).——
Mailer (verification / sign-in codes)Not configuredNo mailer configured (the TRK owner must configure SMTP or an HTTPS mail API for email verification).——
TRK browser extensionPlannedPhase 2 — not released yet.——
Wormhole bridge (testnets)PlannedPhase 2 — not released yet.——

Incidents & known issues

identified Public devnet endpoint api.devnet.solana.com unreachable from build environment; devnet deployment pending

Known issue · started 2026-10-10 · affects rpc-devnet
  • 2026-10-10T06:00:00+04:00 · identified
    Connections from the TRK build environment to api.devnet.solana.com fail (TLS reset / timeout), so the escrow + AMM program has not been deployed to devnet yet. All features are built and tested on a local validator. Users can point TRK at another devnet RPC with TRK_RPC_URL_DEVNET. Devnet deployment will follow once the endpoint is reachable and the deployer is funded.

Update history

1.0.0-phase1 2026-10-10

Added

  • Swap / AMM on the TRK program (x·y=k, 0.3% LP fee + 1% TRK fee), TRKT test token and SOL/TRKT pool; trk swap, guided trk buy / trk sell, trk holdings.
  • SPL Token and Token-2022 sends (transfer_checked, ATA creation with rent shown).
  • Spending caps per transaction and rolling 24 h, set at account creation (suggested devnet 5/20 SOL, mainnet 1/2 SOL); over-cap needs re-auth + typed OVER-CAP.
  • Email + password account (local only; password never stored), email verification with a pluggable mailer (SMTP, HTTPS API, mock, console), optional 2FA (TOTP and/or emailed code, 10 hashed recovery codes), biometric and PIN session quick-unlock.
  • Recovery-code backup gate at account creation and regeneration.
  • Mandatory unified transaction preview before every signature (token-enforced signer), with simulation, programs, fees, balance changes and network badge.
  • Auto-lock (default 5 min idle, 8 h max), trk lock, lock on SIGINT / terminal close / suspend.
  • Escrow-by-default sends with a 30-minute hold and recipient confirmation; --no-escrow needs the typed waiver I ACCEPT THE RISK (recorded in history).
  • Escrow reclaim deadline (hold + 24 h by default): the depositor alone can refund an unconfirmed escrow.
  • Encrypted, MAC'd address book (trk book) with changed-address and look-alike (address-poisoning) warnings; incoming dust hidden/flagged in history.
  • "No bots" policy: extension-only signer, denylist and heuristics, bot key/phrase warning with optional acknowledgment.
  • Instruction decoder blocks (Assign, SetAuthority, unlimited/unknown Approve, unknown programs writing your accounts), durable-nonce warning, signAll batch cap.
  • Token-2022 extension gate (PermanentDelegate, NonTransferable, frozen default state, unknown transfer hooks blocked; transfer fees shown and fee-adjusted).
  • trk approvals (list / revoke token delegates); wallet owner check on unlock.
  • trk security, Contact Us page with anti-scam warnings, public status page (status/, trk status).

Security

  • All dependencies pinned to exact versions; scripts/check.sh runs npm ci --ignore-scripts, an explicit better-sqlite3 rebuild, npm audit signatures and npm audit.
  • PIN-only vaults removed; zxcvbn password strength (score ≥ 3).
  • In-memory key wiping fixed (web3.js Keypair.secretKey returns a copy; keys are now zeroed in place).

Known issues

  • Devnet deployment pending: api.devnet.solana.com unreachable from the build environment.
  • Escrow holds native SOL only; SPL/Token-2022 sends require the waiver.
  • trk pay, trk serve and the browser extension are phase 2.