Close a Stellar account, cleanly.

Unwind your DeFi positions, strip trustlines and signers, then merge what's left to a wallet or exchange, reserve and all.

Demolish an account Read the docs View on GitHub

Open source

Client-side signing

Non-custodial · keys stay local

Demolition planexample

Audit account statedone

Withdraw Blend suppliesdone

Close Soroswap LP positionsigning

Sell trustline balancesqueued

Remove trustlinesqueued

Drop signers & data entriesqueued

ACCOUNT_MERGE → destinationqueued

Reserve recovered+1.0 XLM

Why it's needed

Emptying an account isn't closing it

Other paths move your balances out, but can't run ACCOUNT_MERGE, so the account and its reserve stay locked until it is merged. Each gets a little further. Only one finishes.

What closing an account takes

Exchange

1/6

Classic tools

3/6

Demolisher

6/6

Move asset balances

Send tokens to a destination wallet or exchange.

Remove trustlines

Zero balances and drop every issued-asset trustline.

Cancel offers

Clear classic DEX offers blocking the merge.

Unwind Soroban DeFi

Withdraw Blend, Aquarius and Soroswap positions.

Revoke SEP-41 allowances

Set contract spend approvals back to zero.

ACCOUNT_MERGE

Recover the base reserve and remove the ledger entry.

Coverage

Everything attached to an account

Every entry discovered and sequenced, every DeFi call checked against a hardcoded allow-list before you sign.

01CLASSIC

DEX offers

Open buy and sell orders are cancelled so they stop reserving subentries.

02CLASSIC

Trustlines

Issued-asset balances are routed out, then each trustline is removed.

03CLASSIC

Data entries

Every account_data key is unset before the merge.

04CLASSIC

Signers

Extra signers are stripped and thresholds reset to a clean single-signer state.

05CLASSIC

Claimable balances

Claimable balances you can claim right now are settled before the merge.

06SOROBAN

Blend positions

Supplies are withdrawn and borrows repaid where you still hold the debt asset, before merge.

07SOROBAN

Aquarius pools

AMM positions on Aquarius are exited back into the underlying assets.

08SOROBAN

Soroswap LP

Liquidity is withdrawn from Soroswap pairs and routed back to you.

09SOROBAN

Blend backstop

Backstop deposits are queued for withdrawal (17 days on the v2 backstop, 21 on v1). The account stays open until the queue unlocks; run the close again then to withdraw and finish it.

10SOROBAN

SEP-41 allowances

Outstanding token allowances are zeroed before the account is dropped.

11RESERVE

Subentry reserve

Every subentry is removed so the full base reserve is freed at merge.

12MERGE

ACCOUNT_MERGE

What is left, native balance and base reserve, is merged to the destination.

How it works

You see every step before anything happens

No surprise signatures. You review the full plan, then approve, the step that separates this from a scam.

Connect

Connect through Freighter, xBull, Albedo, Rabet, Lobstr, Hana, Ledger, WalletConnect, and more. No keys leave your device.

Audit

Every offer, trustline, data entry, signer, claimable balance, and Soroban position attached to the account is discovered.

Review & signYOU APPROVE

The full plan is built up front, with Soroban fees from a live simulation. With a wallet you approve each transaction there; with a pasted secret key the app signs in your browser only after your typed confirmation.

Merge

Transactions are submitted in dependency order. The account is merged and its base reserve is recovered.

The dry-run

Everything is staged behind your signature

The full plan is built up front, with Soroban steps simulated. Nothing is submitted until you approve it.

Demolition plan5 TRANSACTIONS · DRY RUN

Withdraw Blend USDC supply0.00010 XLM

Close Soroswap XLM/USDC LP0.00012 XLM

Sell trustline balances to XLM0.00008 XLM

Remove 3 trustlines and 2 signers0.00006 XLM

ACCOUNT_MERGE to destination0.00005 XLM

Held until you sign

Each transaction runs only after you approve it, in dependency order. Nothing runs before you do.

Review & sign

Built up frontSoroban fees from a live simulation, not estimates.

Dependency-orderedThe exact sequence that will run, nothing hidden.

No surprise signaturesA wallet asks you for every transaction. A pasted key signs only after your typed confirmation.

Security

NEVER

Four hard promises a phishing site can't make

A tool that drains accounts is a target by definition. These guarantees are enforced in code, not policy. It has not yet completed an independent security audit, so treat mainnet use accordingly.

Your keys never reach a server

Your keys sign in your wallet, or in your browser if you paste a secret key. The only server-side signer is the exchange mediator, which signs its own forward and never sees your key. The app code is open source and you can verify it before connecting.

Every DeFi call is on a hardcoded allow-list

DeFi exits call only the hardcoded Blend, Aquarius and Soroswap allow-list, re-verified before each signature. Token revokes and transfers call the token's own contract and are shape-checked before signing.

No surprise signatures

The full plan is built up front and Soroban steps are simulated for real fees. With a wallet you approve every transaction there. With a pasted secret key the app signs locally, only after your typed confirmation.

Open source, auditable

Apache-2.0 licensed, source on GitHub. Read the code, run it yourself, and verify every contract call.

One exception, by design

The mediator account is the only server-held signing secret. It signs a strict two-operation forward envelope (a payment, then a merge) for exchange merges, and can never touch your account directly or see your key.

Coverage

Protocols and wallets it speaks to

Soroban DeFi positions unwound alongside classic assets, every DeFi protocol call on a hardcoded allow-list.

Works with

DeFi protocols

BBlend

AAquarius

SSoroswap

Connect via

Wallets

FFreighter

XxBull

AAlbedo

RRabet

LLobstr

HHana

LLedger

WWalletConnect

+ raw secret key as a last-resort fallback, entered locally, never persisted.

Allowance viewer

Stellar's answer to revoke.cash

Paste any G… or C… address and list the SEP-41 token allowances it set in the last 7 days of on-chain events. Revoke them one by one or in a sweep from the wallet that owns the address. No closure required.

Open allowance viewer

soroswap router

USDC · unlimited

REVOKE

blend pool v2

XLM · 12,450.00

REVOKE

aquarius amm

yXLM · unlimited

REVOKE

Questions & objections

The honest answers, before you connect

A tool that drains accounts should expect skepticism. Here's exactly how it works, and what it can't do.

Read the security docs

Exchanges accept the transfer, but they do not run ACCOUNT_MERGE. Your trustlines, signers, data entries, and the base reserve stay locked in the account until it is merged some other way. Demolisher actually closes the account.

No. The wallet integrations (Freighter, xBull, Albedo, Rabet, Lobstr, Hana and more via stellar-wallets-kit, plus Ledger hardware and WalletConnect mobile) keep the key on your device. The secret-key fallback is a last-resort option, entered locally in your browser, never sent to a server.

When merging to an exchange address that requires a memo, the mediator signs a strict two-operation forward envelope (payment, then merge) so funds arrive with the right memo. It is the only signer of that envelope, never sees your key, and cannot touch your account directly.

Blend, Aquarius and Soroswap. Each integration calls only the hardcoded official contract addresses, re-verified before every signature.

A standalone tool, at /allowances, that lists the SEP-41 token allowances any account set in the last 7 days of on-chain events, and lets you revoke them from the wallet that owns the account. Think of it as the Stellar analog of revoke.cash.

Yes. Apache-2.0 licensed, source on GitHub. Read the code and run it yourself.

Documentation

Everything is documented

The closure plan, the mediator path, the allowance viewer, the multisig coordination, the security model. Every claim in the docs traces back to a specific file in the source.

Getting started

Open the live app, run the demo flow, connect a real wallet, or paste a secret key.

How it works

The audit, the plan tree, the 9-phase classical batch, the simulator, the executor.

Destinations & mediator

Sending recovered XLM to a wallet, and how the mediator path reaches an exchange.

Security

What the deployment can do, the contract allow-list, the safety gates, the CSP.

Allowance viewer

Audit and revoke SEP-41 token approvals on any address.

Self host

Install, configure environment variables, run under your own domain.

Open the full docs