TokenPocket: keys, security, fees and reviews
In short
- Key control
- Self-custodial: keys and passwords are generated and stored on the user's device only.
- Fees
- Buy / sell: TP Card: a 1% fee on crypto deposits into the card, plus a fee to mint the card's account NFT.
- Risks and caveats
- Self-custody: TokenPocket cannot recover a lost password, private key or recovery phrase.
- Checked
- 1 November 2026
Visitor ratings: do you like TokenPocket?
Key facts
- Official site
- tokenpocket.pro
Key facts checked on 1 November 2026 against official sources.
Status
Live: TokenPocket runs its mobile, browser-extension and hardware wallets on 1 November 2026, with a website footer naming TP Global Ltd.
What is TokenPocket
TokenPocket is a multi-chain self-custodial crypto wallet, offered as a mobile app, browser extension and the KeyPal hardware wallet. It supports Bitcoin, Ethereum, Solana, BNB Smart Chain, TRON, Aptos, Polygon and EVM chains, and includes swaps, a DApp browser and multisig wallets.
Who holds the keys
| Parameter | Details |
|---|---|
| Key control | Self-custodial: keys and passwords are generated and stored on the user's device only. |
| Recovery | Wallet password, private key, mnemonic and Keystore are not stored on TokenPocket's servers, and TokenPocket cannot retrieve them. |
| Custodian | TokenPocket says it cannot restrict users' crypto assets or transfers. |
Features and supported networks
| Parameter | Details |
|---|---|
| Platforms | Mobile wallet, browser extension and hardware wallet. |
| Supported networks | BTC, ETH, BSC, TRON, Aptos, Polygon, Solana, Cosmos, Polkadot, EOS, IOST and others. |
| Multisig | Privacy wallets, passphrase-protected hidden wallets, multisig and cold wallets, plus the KeyPal hardware wallet. |
| Swaps | Gas-free transfers of supported stablecoins on selected networks. |
| Derivatives access | The browser extension gives access to Hyperliquid perpetual futures; mobile was announced as coming. |
| Buy / sell | TP Card, a Mastercard/Visa debit card launched with a partner financial institution, runs on Arbitrum. |
Security and audits
- Keys are generated and stored on the device only; TokenPocket's servers do not hold passwords, private keys or mnemonics.
- The wallet offers token security checks, approval risk monitoring and high-risk signature warnings.
- In October 2022 TokenPocket reported an abnormal traffic attack on its website and said asset security was not affected.
Security incidents
| Date | What happened | Source |
|---|---|---|
| 1 October 2022 | Exploit: Transit Swap, the swap service incubated by TokenPocket and listed among its products, said it had been attacked by hackers and that its team suspended the service and the contract. The next day Transit said the hacker had returned about 70% of the stolen assets. No amount is stated in the captured posts. Funds returned: Transit said about 70% of the stolen assets were returned (2 October 2022). | x.com |
| 11 October 2022 | Outage: TokenPocket said its official website tokenpocket.pro was under an abnormal traffic attack and could not be accessed normally during emergency maintenance; it said asset security was not affected. | help.tokenpocket.pro |
Further incidents are reported by third parties (press, incident databases) but are not confirmed in the company’s own channels, so they are not listed here.
Fees
| Parameter | Details |
|---|---|
| Buy / sell | TP Card: a 1% fee on crypto deposits into the card, plus a fee to mint the card's account NFT. |
History
| Date | Event |
|---|---|
| April 2018 | TokenPocket founded. |
| August 2019 | Desktop wallet released, with TRON support. |
| March 2021 | Incubated the Transit swap service. |
| August 2021 | Incubated the KeyPal hardware wallet. |
| May 2022 | Acquired the dFox extension and rebranded it TokenPocket Extension. |
| February 2024 | TokenPocket describes it as an MSB licence; FinCEN's register shows an MSB registration for TP Global Ltd (FinCEN registers MSBs, it does not license them). |
| October 2024 | Introduced TP Card, a crypto-enabled debit card. |
Risks and caveats
- Self-custody: TokenPocket cannot recover a lost password, private key or recovery phrase.
- Perpetual futures accessed through the extension support leverage, which can increase both profits and losses.
- The extension terms treat Chinese users as excluded persons.
About the developer
- Developer
- Website footer: TP Global Ltd.
- Legal entity
- The Judicial Assistance Policy says TokenPocket is registered in the Cayman Islands and operated by TP Global.
- Legal entity
- The extension Term of Use is an agreement with TOKENPOCKET FOUNDATION LTD.
- Licence / registration
- FinCEN's MSB register lists TP Global Ltd, Grand Cayman, Cayman Islands, with a received date of 31 January 2024.
- Founded
- Founded in 2018.
Official links
- Website: www.tokenpocket.pro
- Support: help.tokenpocket.pro/en
- Docs: help.tokenpocket.pro/developer-en
- Source code: github.com/TP-Lab
- Security: bugrap.io/bounties/TokenPocket
- Blog: help.tokenpocket.pro/en/announcement/announcement
Questions and answers
Is TokenPocket self-custodial?
Yes. TokenPocket says keys and passwords are generated and stored on the user's device only, and it cannot retrieve a lost private key or recovery phrase.
Who operates TokenPocket?
The website footer names TP Global Ltd, and TokenPocket's judicial assistance policy says the wallet is registered in the Cayman Islands and operated by TP Global.
Which networks does TokenPocket support?
Bitcoin, Ethereum, Solana, BNB Smart Chain, TRON, Aptos, Polygon, all EVM-compatible chains, and others such as Cosmos and Polkadot.
Has TokenPocket had security incidents?
In October 2022 its incubated swap service Transit Swap was attacked by hackers and Transit said about 70% of the stolen assets were returned, and TokenPocket's website suffered a traffic attack that it said did not affect assets.
Sources
- TokenPocket — Home
- TokenPocket — About Us
- TokenPocket — User agreements index
- TokenPocket Help — Why TokenPocket
- TokenPocket Help — What is a decentralized wallet
- TokenPocket Help — How to trade perps
- TokenPocket Help — Extension Term of Use
- TokenPocket Help — Judicial Assistance Policy
- TokenPocket Help — TP Card FAQs
- TokenPocket Help — Website maintenance notice (11 October 2022)
- TokenPocket Help — Product policy adjustment for users in China (Chinese)
- FinCEN — MSB Registrant Search (TP Global Ltd)
- GitHub — TP-Lab
- Transit Finance on X — attack notice (1 October 2022)
- Transit Finance on X — funds returned update (2 October 2022)
More in this section
Related
How voting works
Votes are anonymous and carry no text. Each device has one vote per item; press the same button again to remove it. Cloudflare Turnstile checks that a person is voting. We keep a random device ID in a cookie and a salted hash of the IP address to limit abuse — no names, no accounts. Votes are visitors’ opinions, not investment advice.
Page updated: