@exodus/solana-plugin 1.36.5 → 1.37.0

package/CHANGELOG.md

@@ -3,6 +3,16 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.37.0](https://github.com/ExodusMovement/assets/compare/@exodus/solana-plugin@1.36.5...@exodus/solana-plugin@1.37.0) (2026-04-27)
+
+
+### Features
+
+
+* feat: add MoveFunds API for Solana (#7870)
+
+
+
 ## [1.36.5](https://github.com/ExodusMovement/assets/compare/@exodus/solana-plugin@1.36.4...@exodus/solana-plugin@1.36.5) (2026-04-16)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exodus/solana-plugin",
-  "version": "1.36.5",
+  "version": "1.37.0",
   "description": "Solana plugin for Exodus SDK powered wallets.",
   "type": "module",
   "main": "src/index.js",
@@ -28,7 +28,7 @@
     "@exodus/i18n-dummy": "^1.0.0",
     "@exodus/send-validation-model": "^1.0.0",
     "@exodus/solana-api": "^3.30.9",
-    "@exodus/solana-lib": "^3.22.5",
+    "@exodus/solana-lib": "^3.24.0",
     "@exodus/solana-meta": "^2.9.0",
     "@exodus/web3-solana-utils": "^2.9.0",
     "minimalistic-assert": "^1.0.1",
@@ -44,5 +44,5 @@
     "type": "git",
     "url": "git+https://github.com/ExodusMovement/assets.git"
   },
-  "gitHead": "4109b7a0cfe42fbfd8915543fac4264f478ce2dc"
+  "gitHead": "a6dde437af961c72c62f64eff53207ccfaeacc95"
 }

package/src/create-asset.js

@@ -32,6 +32,7 @@ import ms from 'ms'
 
 import { createHistoryMonitorFactory, securityChecks } from './create-asset-utils.js'
 import { createGetBalanceForAddress } from './get-balance-for-address.js'
+import { moveFundsFactory } from './move-funds.js'
 import sendValidationsFactory from './send-validations.js'
 import { createWeb3API } from './web3/index.js'
 
@@ -120,6 +121,13 @@ export const createSolanaAssetFactory =
       assetClientInterface,
     })
 
+    const moveFunds = moveFundsFactory({
+      baseAssetName,
+      solanaApi: rpcApi,
+      assetClientInterface,
+      createTx,
+    })
+
     const stakingApi = stakingApiFactory({
       assetName: baseAssetName,
       assetClientInterface,
@@ -163,6 +171,7 @@ export const createSolanaAssetFactory =
       family: ASSET_FAMILY.SOLANA,
       feeMonitor: false,
       feesApi: true,
+      moveFunds: true,
       nfts: true,
       staking: {},
       isTestnet,
@@ -248,6 +257,7 @@ export const createSolanaAssetFactory =
           .filter((asset) => asset.name !== base.name)
           .map(createToken),
       hasFeature: (feature) => !!features[feature], // @deprecated use api.features instead
+      moveFunds,
       privateKeyEncodingDefinition: { encoding: 'base58', data: 'priv|pub' },
       securityChecks,
       sendTx,

package/src/move-funds.js

@@ -0,0 +1,159 @@
+import {
+  getAddressFromMpcKey,
+  getAddressFromPrivateKey,
+  getPrivateKeyFromSecretKey,
+  isMpcKey,
+  isValidAddress,
+  signUnsignedTx,
+  signUnsignedTxWithMpcKey,
+} from '@exodus/solana-lib'
+import assert from 'minimalistic-assert'
+
+const importers = {
+  seed: {
+    getAddress: (secretKey) => {
+      const privateKey = getPrivateKeyFromSecretKey(secretKey)
+      return getAddressFromPrivateKey(privateKey)
+    },
+    sign: (unsignedTx, secretKey) => {
+      const privateKey = getPrivateKeyFromSecretKey(secretKey)
+      return signUnsignedTx(unsignedTx, privateKey)
+    },
+  },
+  mpc: {
+    getAddress: getAddressFromMpcKey,
+    sign: signUnsignedTxWithMpcKey,
+  },
+}
+
+const getImporter = async (secretKey) => {
+  const isMpc = await isMpcKey(secretKey)
+  return isMpc ? importers.mpc : importers.seed
+}
+
+// Sentinel walletAccount used when calling baseAsset.api.createTx from the move-funds context.
+// createTx requires a truthy walletAccount; for move-funds (external key import) there is no
+// real wallet account, so we pass this value. The only wallet-account-specific call inside
+// createTx (getAccountState for token delegation) is not relevant for move-funds.
+const MOVE_FUNDS_WALLET_ACCOUNT = 'exodus:move-funds'
+
+export const moveFundsFactory = ({ baseAssetName, solanaApi, assetClientInterface, createTx }) => {
+  assert(solanaApi, 'solanaApi is required')
+  assert(assetClientInterface, 'assetClientInterface is required')
+  assert(createTx, 'createTx is required')
+
+  async function prepareSendFundsTx({ assetName, input, toAddress, MoveFundsError }) {
+    assert(assetName, 'assetName is required')
+    assert(input, 'input is required')
+    assert(toAddress && isValidAddress(toAddress), 'valid toAddress is required')
+    assert(MoveFundsError, 'MoveFundsError is required')
+
+    // MPC keys are base58-encoded 64-byte values where the first 32 bytes are a scalar
+    // (not a seed). Check before the regular base58 path since both share the same encoding.
+    const secretKey = input.trim()
+
+    let fromAddress
+
+    try {
+      const importer = await getImporter(secretKey)
+      fromAddress = await importer.getAddress(secretKey)
+    } catch {
+      throw new MoveFundsError('private-key-invalid')
+    }
+
+    if (fromAddress === toAddress) {
+      throw new MoveFundsError('private-key-own-key', { fromAddress })
+    }
+
+    const assets = await assetClientInterface.getAssetsForNetwork({ baseAssetName })
+    const asset = assets[assetName]
+    assert(asset, 'asset is required')
+
+    const baseAsset = asset.baseAsset
+    const isToken = asset.name !== baseAssetName
+
+    const rawBalance = await solanaApi.getBalance(fromAddress)
+    const balance = baseAsset.currency.baseUnit(rawBalance)
+
+    if (!balance || balance.isZero) {
+      throw new MoveFundsError('balance-zero', { fromAddress })
+    }
+
+    let unsignedTx
+    let fee
+
+    if (isToken) {
+      const { balances } = await solanaApi.getTokensBalancesAndAccounts({ address: fromAddress })
+      const amount = asset.currency.baseUnit(balances?.[assetName] ?? 0)
+
+      // Token transfer: fee is paid in SOL, full token balance is sent.
+      try {
+        ;({ unsignedTx, fee } = await createTx({
+          asset,
+          walletAccount: MOVE_FUNDS_WALLET_ACCOUNT,
+          fromAddress,
+          toAddress,
+          amount,
+          useFeePayer: false,
+        }))
+      } catch {
+        throw new MoveFundsError('balance-negative', { fromAddress })
+      }
+
+      if (balance.lt(fee)) {
+        throw new MoveFundsError('token-fee-insufficient', { fromAddress })
+      }
+
+      return { fromAddress, toAddress, amount, fee, secretKey, unsignedTx }
+    }
+
+    // SOL transfer: estimate fee via a self-send (stable estimation, avoids destination
+    // rent-exemption check for new accounts), then create the real tx with balance - fee.
+    try {
+      ;({ fee } = await createTx({
+        asset,
+        walletAccount: MOVE_FUNDS_WALLET_ACCOUNT,
+        fromAddress,
+        toAddress: fromAddress,
+        amount: asset.currency.baseUnit(1),
+        useFeePayer: false,
+      }))
+    } catch {
+      throw new MoveFundsError('balance-negative', { fromAddress })
+    }
+
+    const amount = balance.sub(fee)
+    if (amount.isNegative || amount.isZero) {
+      throw new MoveFundsError('balance-negative', { fromAddress })
+    }
+
+    try {
+      ;({ unsignedTx, fee } = await createTx({
+        asset,
+        walletAccount: MOVE_FUNDS_WALLET_ACCOUNT,
+        fromAddress,
+        toAddress,
+        amount,
+        useFeePayer: false,
+      }))
+    } catch {
+      throw new MoveFundsError('balance-negative', { fromAddress })
+    }
+
+    return { fromAddress, toAddress, amount, fee, secretKey, unsignedTx }
+  }
+
+  const sendFunds = async ({ secretKey, unsignedTx }) => {
+    assert(secretKey, 'secretKey or mpcKey is required')
+    assert(unsignedTx, 'unsignedTx is required')
+
+    const importer = await getImporter(secretKey)
+    const { rawTx, txId } = await importer.sign(unsignedTx, secretKey)
+
+    await solanaApi.broadcastTransaction(rawTx)
+
+    return { txId }
+  }
+
+  return { prepareSendFundsTx, sendFunds }
+}