WalletDeploy — Cold Wallet Program Management for VS Code
Deploy, upgrade, freeze, and recover Solana programs using your hardware cold wallet — directly from your editor. No CLI, no hot keys.
Patent Pending · US 64/034,378 · US 64/041,067
Features
No-CLI Deploy & Upgrade
- Select a
.so binary → two wallet taps → program deployed or upgraded
- Ephemeral keypair handles buffer creation and chunk writing automatically
- Cold wallet is upgrade authority from block 0
- On-chain BWD memo audit trail for every operation
- Works with any program size
- Upgrade — one click to upgrade your program
- Transfer Authority — move upgrade authority to any address
- Status — see current authority and upgrade status inline
Hover — Program Info on Mouseover
Hover over any program ID in a declare_id!() macro to see:
- Current upgrade authority
- Data size
- Upgradeable vs Frozen status
Program Inspector
- Scan any wallet for programs you control
- Shows Upgradeable vs Frozen status
- Correct ProgramData layout parsing
Buffer Inspector
- Scan any wallet for locked buffers with SOL
- One-click recover all locked SOL
- Excludes empty (0-lamport) buffers
All Admin Operations
- Deploy Program — no CLI, two wallet taps
- Upgrade Program — no CLI, two wallet taps
- Transfer Upgrade Authority
- Recover SOL from Buffer
- Extend Program
- Close Program (irreversible)
- Freeze Program (irreversible, double-confirm)
Right-click any program ID or buffer address in your editor for quick access to Upgrade, Transfer Authority, and Recover SOL.
Supported Wallets
- Phantom (browser extension via local bridge)
- Solflare (browser extension via local bridge)
- Tangem (NFC card via WalletConnect)
- Keystone (QR air-gapped via WalletConnect)
- Any WalletConnect-compatible wallet
How It Works
Quick Start — Scan (no wallet connection needed)
- Ctrl+Shift+P →
WalletDeploy: Scan for Programs You Control
- Enter any wallet address (or connect wallet first to auto-fill)
- See all programs with Upgradeable/Frozen status
Or scan for locked buffers with recoverable SOL the same way. Connect your wallet first for auto-fill, or just paste any address.
Full Flow — Deploy, Upgrade, or Admin
- Click
WalletDeploy in the status bar (or Ctrl+Shift+P → WalletDeploy: Connect Hardware Wallet)
- Choose Phantom, Solflare, or WalletConnect (QR code for Tangem/Keystone)
- A browser tab opens at walletdeploy.com/bridge.html — approve the connection there
- Use any command: Ctrl+Shift+P → type "WalletDeploy", or right-click a program ID, or use CodeLens buttons above
declare_id!()
- Approve in your wallet (Phantom/Solflare popup appears in browser)
- Transaction confirmed — Explorer link in Output panel
Note: The bridge tab can be minimized after connecting. It stays active in the background and pops up only when a signature is needed. Switching between mainnet and devnet requires reconnecting (the extension handles this automatically).
Settings
Ctrl+, → search "walletdeploy" → set cluster to devnet for testing.
Configuration
| Setting |
Default |
Description |
walletdeploy.cluster |
mainnet-beta |
Solana cluster (mainnet-beta, devnet, testnet) |
walletdeploy.rpcUrl |
(empty) |
Custom RPC URL (leave empty for default) |
walletdeploy.priorityFee |
50000 |
Priority fee in microlamports per compute unit |
On-Chain Audit Trail
Every operation includes an on-chain memo recording exactly what was signed. Deploy and upgrade operations include a BufferWriteDelegate (BWD) memo — a cryptographic proof of authorization permanently recorded on Solana.
Commands
| Command |
Description |
WalletDeploy: Deploy / Upgrade Program (No CLI) |
Full no-CLI deploy or upgrade flow |
WalletDeploy: Upgrade Program |
Upgrade via .so file selection |
WalletDeploy: Transfer Upgrade Authority |
Move authority to any address |
WalletDeploy: Recover SOL from Buffer |
Close buffer, recover locked SOL |
WalletDeploy: Extend Program |
Add bytes before upgrading to larger binary |
WalletDeploy: Close Program |
Permanently close, recover all SOL |
WalletDeploy: Freeze Program (Irreversible) |
Remove upgrade authority forever |
WalletDeploy: Scan for Programs You Control |
Find all programs by authority |
WalletDeploy: Scan for Locked Buffers |
Find buffers with recoverable SOL |
WalletDeploy: Connect Hardware Wallet |
Connect Phantom, Solflare, or WalletConnect |
Security
- Zero hot keys — private key never leaves your hardware wallet
- Zero backend — all transaction construction happens locally
- Zero custody — WalletDeploy never stores or accesses your keys
- Immutable audit trail — every operation recorded on-chain
Links
Zero CLI. Zero hot keys. Zero custody. Cold auth for every chain.