[{"data":1,"prerenderedAt":32},["ShallowReactive",2],{"blog-content-en-how-to-store-nfts-safely-self-custody-wallet":3},{"slug":4,"title":5,"excerpt":6,"description":7,"bodyHtml":8,"faqItems":9,"howToSteps":19},"how-to-store-nfts-safely-self-custody-wallet","How to Store NFTs Safely in a Self-Custody Wallet (EVM, Solana and TON)","An NFT is a line in a contract that points at your address, not a file in your wallet. Here is how to hold one safely across EVM, Solana and TON: dedicated addresses, seed and device hygiene, approval audits, and signature discipline.","How NFT ownership works on EVM, Solana and TON, plus four steps to keep a collection safe: separate wallets, seed hygiene, approval audits, signing discipline.","\u003Cblockquote>The WATS Hot Wallet holds the keys controlling your NFT-owning addresses on EVM chains, Solana and TON in pure self-custody — you keep those keys and WATS never holds a key; Bitcoin is not natively supported. Safe storage is key and permission discipline, because an NFT is a contract record pointing at your address, not a file in your wallet. Keep high-value pieces on a dedicated seed and device, audit approvals and delegates, cancel stale listings, and refuse any signature you cannot read.\u003C\u002Fblockquote>\u003Ch2>What You Actually Own When You Hold an NFT\u003C\u002Fh2>\u003Cp>An NFT is a row in a smart contract or program saying a token ID belongs to one address. Your wallet stores neither the token nor, usually, the artwork — the image typically sits on IPFS, Arweave or a web server behind a metadata URI. It stores the private key controlling the address the contract points at.\u003C\u002Fp>\u003Cp>That distinction decides everything: you cannot lose an NFT by deleting a file, and no image backup restores ownership. This guide targets two failure modes — theft of your key, and a signature handing the transfer right to someone else — though a lost seed or misdirected transfer ends ownership just as finally.\u003C\u002Fp>\u003Ch2>How NFT Storage Differs on EVM, Solana and TON\u003C\u002Fh2>\u003Cp>The ownership record differs by network, which matters when you audit what you hold. On EVM, an ERC-721 contract maps each token ID to an owner address, with two permission levels on top: a per-token approval, and a blanket \u003Cem>approve-for-all\u003C\u002Fem> flag that hands one operator every token you hold in that contract, including ones you receive later. ERC-1155 instead maps token ID and account to a balance, so collection-wide approve-for-all is its only permission.\u003C\u002Fp>\u003Cp>On Solana, an NFT is typically a token with a supply of one, held in a token account your wallet owns; permission is a \u003Cstrong>delegate\u003C\u002Fstrong> on that account. As of 2026 that is only part of the picture: compressed NFTs live as leaves in a Merkle tree and Metaplex Core assets are single accounts, so neither is delegated that way. On TON, each NFT is its own small contract with an owner field under a collection contract. No single button revokes everything across the three.\u003C\u002Fp>\u003Ch2>Step 1: Use a Dedicated Wallet for High-Value NFTs\u003C\u002Fh2>\u003Cp>The cheapest security upgrade for a collector is address separation: one address that mints, bids and connects to new sites, and a second that only receives finished pieces. Make it a genuinely separate wallet with its own seed phrase on its own device, ideally a hardware or offline signer — not a second account derived from the seed you already use. Accounts from one seed are labels on the same secret, and fall together the moment that seed or device is compromised.\u003C\u002Fp>\u003Cp>That vault address should never connect to a marketplace, sign a listing or grant an operator approval. The protection is that discipline, not the address itself: exposure starts at signing, because connecting grants nothing on-chain. On EVM chains, as of 2026, an EIP-7702 authorization signed by the vault key can point that account at code that moves assets with no prior approval — so if it never signs, a malicious signing request has nothing to act on.\u003C\u002Fp>\u003Ch2>Step 2: Protect the Seed Phrase and the Device\u003C\u002Fh2>\u003Cp>A seed phrase reconstructs every key it derives, so anything that can read it owns your collection. Write it on paper or metal, keep it offline, and never photograph it or paste it into a browser or cloud note. Legitimate wallets ask for it only when you restore a wallet — never to \"validate\", \"sync\" or \"claim\" anything.\u003C\u002Fp>\u003Cp>The device matters as much: screen-recording malware or a permissive extension can drain a wallet whose seed was never written down. A \u003Cstrong>clipboard hijacker\u003C\u002Fstrong> is a different risk: it substitutes the destination address mid-transfer rather than exposing the key. Keep the system patched, install extensions sparingly, and keep the vault device away from the machine you open mint links on; our guide to \u003Ca href=\"\u002Fblog\u002Fcrypto-wallet-security-best-practices\">crypto wallet security best practices\u003C\u002Fa> applies to NFTs unchanged.\u003C\u002Fp>\u003Ch2>Step 3: Audit Approvals, Delegations and Marketplace Listings\u003C\u002Fh2>\u003Cp>Many NFT losses reported as hacks turn out to be authorized transfers: a permission granted months ago, a key or contract later compromised, the grant still live. Approvals do not expire on their own.\u003C\u002Fp>\u003Cp>Audit them on a schedule. On EVM, revoke the \u003Cstrong>approve-for-all\u003C\u002Fstrong> grants you no longer use; the mechanics are in our walkthrough on \u003Ca href=\"\u002Fblog\u002Fhow-to-revoke-token-approvals\">how to revoke token approvals\u003C\u002Fa>. On Solana, clear stale \u003Cstrong>delegates\u003C\u002Fstrong> on your NFT token accounts, then check compressed NFTs and Core assets separately, since they never surface there. On TON, confirm each item contract still lists your address as owner — though as of 2026 a listed item legitimately shows the marketplace sale contract instead.\u003C\u002Fp>\u003Cp>Then cancel old listings: as of 2026 most EVM listings are \u003Cstrong>off-chain orders\u003C\u002Fstrong> with an expiry, and a forgotten one stays fillable at the price you signed until it expires, you cancel it, or you revoke the approval it relies on. Non-expiring and on-chain orders never lapse.\u003C\u002Fp>\u003Ch2>Step 4: Read Every Signature Before You Approve It\u003C\u002Fh2>\u003Cp>The last defense is the signing screen, where two requests deserve a hard stop: an \u003Cstrong>operator approval\u003C\u002Fstrong> on a collection you did not intend to list, since a \"free mint\" page has no business asking for permission over your existing NFTs; and an \u003Cstrong>off-chain order signature\u003C\u002Fstrong> for a gasless listing, which can move a piece for a price you never read.\u003C\u002Fp>\u003Cp>If your wallet shows unreadable hex instead of a plain-English summary, treat that as a refusal. Our explainer on \u003Ca href=\"\u002Fblog\u002Fwhat-is-blind-signing\">what blind signing is\u003C\u002Fa> covers why opaque payloads are a recurring factor in high-value thefts.\u003C\u002Fp>\u003Ch2>Common Ways People Lose NFTs (and How to Avoid Each One)\u003C\u002Fh2>\u003Cp>Fake mint sites request \u003Cstrong>approve-for-all\u003C\u002Fstrong>, and one approval you sign lets an attacker move the whole collection afterwards. A decoded signing screen prevents that, and keeping high-value pieces on a separate address limits the loss to the address that signed.\u003C\u002Fp>\u003Cp>Airdropped NFTs of unknown origin lure holders to a claim site: receiving one is harmless, signing for it is not.\u003C\u002Fp>\u003Cp>An exchange deposit address that does not support NFTs can strand a token permanently, so verify the destination first.\u003C\u002Fp>\u003Ch2>One Fee Token Across EVM, Solana and TON With WATS\u003C\u002Fh2>\u003Cp>Collectors rarely stay on one network, and paying fees on three means keeping three native balances topped up. The \u003Ca href=\"\u002Fhot-wallet\">WATS Hot Wallet\u003C\u002Fa> replaces that with one. Every action — transfers, swaps, staking — is charged in one token, ATS, instead of the chain's native gas: on EVM through an ERC-4337 paymaster, on Solana and TON through an equivalent fee-payer. That changes which token the fee is denominated in, not what the network charges.\u003C\u002Fp>\u003Cp>Because ATS is a LayerZero OFT, one balance works across all three chains, and collected ATS is burned from 100,000,000 toward a 30,000,000 floor. It stays non-custodial: you hold your keys, and WATS never holds a key. WATS is the first and only wallet to combine ERC-4337 and OFT single-token fees charged instead of native gas with that burn.\u003C\u002Fp>",[10,13,16],{"q":11,"a":12},"Where is an NFT actually stored — in my wallet or on the blockchain?","Ownership is stored on the blockchain, as a record in a smart contract or program that maps a token to your address, while the artwork itself usually lives off-chain on IPFS, Arweave or a web server, referenced by a metadata URI. A self-custody wallet holds no NFT at all — only the private key that controls the owning address. In the WATS Hot Wallet that key stays with you across EVM chains, Solana and TON, and WATS never holds a key.",{"q":14,"a":15},"Can someone steal my NFT without my private key?","Yes, if you previously granted a transfer permission. An operator approval on EVM or a token-account delegate on Solana lets another party move the NFT without touching your key. A forgotten marketplace listing is a different problem: not an unconsented transfer, but a sale anyone can complete at the price you already signed. Revoking stale permissions and cancelling old listings closes both paths.",{"q":17,"a":18},"Does moving an NFT to a second wallet remove old approvals?","It removes the NFT from the reach of approvals granted on the old address, since permissions are tied to the address that granted them. The old grants themselves remain active until you revoke them, so they still apply to anything left behind or received there later.",[20,23,26,29],{"title":21,"body":22},"Use a dedicated wallet for high-value NFTs","Keep a dedicated vault wallet that only receives finished pieces, with its own seed phrase on its own device — ideally a hardware or offline signer, not another account derived from the seed you already use — and never connect it, sign a listing or grant an approval from it.",{"title":24,"body":25},"Protect the seed phrase and the device","Store the seed phrase offline on paper or metal, never in a photo, cloud note or browser field. Keep the device patched and free of unnecessary extensions, since screen-capture malware and permissive extensions can compromise a wallet whose seed was never written down.",{"title":27,"body":28},"Audit approvals, delegations and marketplace listings","Review EVM approve-for-all grants, Solana token-account delegates, compressed NFTs and Metaplex Core assets, and TON item ownership separately, then revoke every permission you no longer use and cancel any listing you no longer want filled.",{"title":30,"body":31},"Read every signature before you approve it","Stop on any request for operator permission over a collection you did not intend to list, and on off-chain order signatures used for gasless listings. If the wallet shows an unreadable payload instead of a plain-English summary, reject it.",1786059318515]