Malpha can't touch your crypto.
Malpha is a social network for traders. It never connects to your wallet, never asks you to sign anything and never holds your money. Don't take our word for it: everything on this page can be checked by you, by independent scanners or on the blockchain.
Check us yourself
Independent tools, not run by Malpha. Each link opens a live check of malpha.fun.
Does Google flag malpha.fun as dangerous or a phishing site?
Dozens of security vendors check malpha.fun at once.
Every script and request the site makes. You will find no wallet library among them.
Our security headers, including the policy that blocks scripts from any other source.
How well the connection to malpha.fun is encrypted.
Open the developer tools on malpha.fun (F12, Network). Scripts only come from Malpha, Tailwind, cdnjs and Google Fonts, and the site never asks your wallet for anything.
Live from our database
Read straight from the Malpha database, refreshed every few minutes.
Loading…
Payouts, on-chain
Every prize Malpha pays out, with its Solana transaction. Open it on Solscan to see the money go from Malpha to the winner.
Loading…
Corrections are public
When the team corrects a call or a track record (for example after a price error), it is shown here with the reason. Corrected calls are also marked "Corrected" on the call itself.
Loading…
What Malpha never does
There is no "Connect wallet" button. Malpha never talks to Phantom, MetaMask or any other wallet extension.
No signatures, no token approvals, no transactions. Without those, nothing on Malpha can drain a wallet.
No deposits, no balances, no withdrawals. Malpha has nothing of yours to lose or to take.
Not in messages, not in support, not on Discord. Anyone who asks for your seed phrase, private key or login codes is a scammer.
The Malpha team will never ask you to send money, "verify" a wallet or pay to unlock anything.
Our emails are only about your account: confirming it, resetting your password, security alerts and support replies.
Wallets on profiles
Members can show public wallet addresses on their profile. You type them in yourself; Malpha only shows the address and a link to the block explorer (Solscan, Etherscan and so on). A public address is already visible to anyone on the blockchain, and showing it gives nobody access to the wallet.
Calls are honest
- When someone posts a long or short call, the Malpha server records the price or market cap at that moment. Members can't type their own entry price.
- Calls can't be edited into a win or deleted, so losing calls stay on the record.
- Calls from the Malpha team are tracked exactly the same way.
- If the team ever corrects a call (for example after a price error), the call is marked "Corrected" and the change is saved in the moderation log with its reason.
Your account is protected
- Passwords are stored as one-way hashes (scrypt). Nobody at Malpha can see your password.
- You can turn on two-factor authentication (2FA) with an authenticator app in Settings.
- Every member of the Malpha team must use 2FA before they can use any moderation tool.
- Every moderation action (removing a post, a timeout, a ban, a correction) is logged with who did it and why.
How to spot a fake
- The only Malpha websites are malpha.fun and support.malpha.fun. Check the address bar before you log in.
- Our official Discord is discord.gg/GRH72mhFXJ.
- Anyone who DMs you claiming to be Malpha staff and asks for money, keys or codes is not us.
Meme coins are risky
Malpha doesn't check or approve coins. Coins and contract addresses in posts are shared by members and are their opinion, not advice. New tokens can lose all their value in minutes. Always check the contract and the liquidity yourself, and never trade more than you can afford to lose.
Report a scam or a security problem
See a scam, a fake account or someone asking for keys? Report the post with the ··· menu, or tell us directly. We review reports and remove scammers.
Found a security problem in Malpha itself? Please tell us privately first at support@malpha.fun so we can fix it before it is abused. We reply to every report and credit you if you like. Our contact details are also in security.txt.