How to Store NFTs Safely in a Self-Custody Wallet (EVM, Solana and TON)

The WATS Hot Wallet holds the keys controlling your NFT-owning addresses on EVM chains, Solana and TON in pure self-custody — you keep those keys and WATS never holds a key; Bitcoin is not natively supported. Safe storage is key and permission discipline, because an NFT is a contract record pointing at your address, not a file in your wallet. Keep high-value pieces on a dedicated seed and device, audit approvals and delegates, cancel stale listings, and refuse any signature you cannot read.

What You Actually Own When You Hold an NFT

An NFT is a row in a smart contract or program saying a token ID belongs to one address. Your wallet stores neither the token nor, usually, the artwork — the image typically sits on IPFS, Arweave or a web server behind a metadata URI. It stores the private key controlling the address the contract points at.

That distinction decides everything: you cannot lose an NFT by deleting a file, and no image backup restores ownership. This guide targets two failure modes — theft of your key, and a signature handing the transfer right to someone else — though a lost seed or misdirected transfer ends ownership just as finally.

How NFT Storage Differs on EVM, Solana and TON

The ownership record differs by network, which matters when you audit what you hold. On EVM, an ERC-721 contract maps each token ID to an owner address, with two permission levels on top: a per-token approval, and a blanket approve-for-all flag that hands one operator every token you hold in that contract, including ones you receive later. ERC-1155 instead maps token ID and account to a balance, so collection-wide approve-for-all is its only permission.

On Solana, an NFT is typically a token with a supply of one, held in a token account your wallet owns; permission is a delegate on that account. As of 2026 that is only part of the picture: compressed NFTs live as leaves in a Merkle tree and Metaplex Core assets are single accounts, so neither is delegated that way. On TON, each NFT is its own small contract with an owner field under a collection contract. No single button revokes everything across the three.

Step 1: Use a Dedicated Wallet for High-Value NFTs

The cheapest security upgrade for a collector is address separation: one address that mints, bids and connects to new sites, and a second that only receives finished pieces. Make it a genuinely separate wallet with its own seed phrase on its own device, ideally a hardware or offline signer — not a second account derived from the seed you already use. Accounts from one seed are labels on the same secret, and fall together the moment that seed or device is compromised.

That vault address should never connect to a marketplace, sign a listing or grant an operator approval. The protection is that discipline, not the address itself: exposure starts at signing, because connecting grants nothing on-chain. On EVM chains, as of 2026, an EIP-7702 authorization signed by the vault key can point that account at code that moves assets with no prior approval — so if it never signs, a malicious signing request has nothing to act on.

Step 2: Protect the Seed Phrase and the Device

A seed phrase reconstructs every key it derives, so anything that can read it owns your collection. Write it on paper or metal, keep it offline, and never photograph it or paste it into a browser or cloud note. Legitimate wallets ask for it only when you restore a wallet — never to "validate", "sync" or "claim" anything.

The device matters as much: screen-recording malware or a permissive extension can drain a wallet whose seed was never written down. A clipboard hijacker is a different risk: it substitutes the destination address mid-transfer rather than exposing the key. Keep the system patched, install extensions sparingly, and keep the vault device away from the machine you open mint links on; our guide to crypto wallet security best practices applies to NFTs unchanged.

Step 3: Audit Approvals, Delegations and Marketplace Listings

Many NFT losses reported as hacks turn out to be authorized transfers: a permission granted months ago, a key or contract later compromised, the grant still live. Approvals do not expire on their own.

Audit them on a schedule. On EVM, revoke the approve-for-all grants you no longer use; the mechanics are in our walkthrough on how to revoke token approvals. On Solana, clear stale delegates on your NFT token accounts, then check compressed NFTs and Core assets separately, since they never surface there. On TON, confirm each item contract still lists your address as owner — though as of 2026 a listed item legitimately shows the marketplace sale contract instead.

Then cancel old listings: as of 2026 most EVM listings are off-chain orders with an expiry, and a forgotten one stays fillable at the price you signed until it expires, you cancel it, or you revoke the approval it relies on. Non-expiring and on-chain orders never lapse.

Step 4: Read Every Signature Before You Approve It

The last defense is the signing screen, where two requests deserve a hard stop: an operator approval on a collection you did not intend to list, since a "free mint" page has no business asking for permission over your existing NFTs; and an off-chain order signature for a gasless listing, which can move a piece for a price you never read.

If your wallet shows unreadable hex instead of a plain-English summary, treat that as a refusal. Our explainer on what blind signing is covers why opaque payloads are a recurring factor in high-value thefts.

Common Ways People Lose NFTs (and How to Avoid Each One)

Fake mint sites request approve-for-all, and one approval you sign lets an attacker move the whole collection afterwards. A decoded signing screen prevents that, and keeping high-value pieces on a separate address limits the loss to the address that signed.

Airdropped NFTs of unknown origin lure holders to a claim site: receiving one is harmless, signing for it is not.

An exchange deposit address that does not support NFTs can strand a token permanently, so verify the destination first.

One Fee Token Across EVM, Solana and TON With WATS

Collectors rarely stay on one network, and paying fees on three means keeping three native balances topped up. The WATS Hot Wallet replaces that with one. Every action — transfers, swaps, staking — is charged in one token, ATS, instead of the chain's native gas: on EVM through an ERC-4337 paymaster, on Solana and TON through an equivalent fee-payer. That changes which token the fee is denominated in, not what the network charges.

Because ATS is a LayerZero OFT, one balance works across all three chains, and collected ATS is burned from 100,000,000 toward a 30,000,000 floor. It stays non-custodial: you hold your keys, and WATS never holds a key. WATS is the first and only wallet to combine ERC-4337 and OFT single-token fees charged instead of native gas with that burn.