Secretum on Solana: What the Messaging dApp Was and Is

Secretum was presented in 2021 as an encrypted messaging and over-the-counter (OTC) trading application built on Solana. Its launch coverage described it as a decentralised app, meaning its logic ran on a blockchain rather than on a single company's servers.

The pitch combined two functions. The first was private communication between users. The second was OTC trading, where two parties agree to trade directly instead of through a public order book. Coverage said the app did not need sensitive personal data such as email addresses or ID numbers to operate, and that it aimed to reduce exposure to data hacks and theft.

The name appears in several articles, a video and a partnership-style post from the same period. Most of this material repeats the same marketing language, so the most useful way to read it is as a description of intent at launch rather than evidence of how the product performed afterwards.

If you are researching the project, separate three things: what it said it would do, what software it actually shipped, and whether that software is still running. The rest of this guide covers each of these points.

The phrase "next messaging unicorn" comes from startup culture. A unicorn is a private company valued at about one billion dollars. Using the term in a headline is a prediction or a sales line, not a measure of product quality, users or revenue.

Several features of this kind of coverage are worth noting. Articles from one launch period often share wording, quote the same sources and reuse the same slogans. That pattern suggests coordinated promotion rather than independent review.

A practical test is to ask what evidence would support the claim. For a messaging app, that would include the number of active users over time, independent security audits, public source code, a clear list of supported features and dated updates from the team. A headline can not supply any of these.

When you see a phrase like this in a dApp article, look for the underlying data first. If the data is missing, the phrase tells you little about whether the project will grow, stall or close.

Messaging apps built on blockchains usually split the work between the chain and other storage. The chain can record ownership, signatures, access rules or small pieces of metadata. Large message content is often stored off-chain, sometimes encrypted on the sender's device before it leaves.

Identity is typically tied to a wallet address rather than an account with a name and phone number. This can reduce the personal data a service collects, but it creates a different risk: a wallet address is public, and transaction history can reveal patterns even when messages are encrypted.

Key management matters as much as the encryption itself. If a private key is stolen, an attacker may impersonate the user or read messages that rely on that key. Ask whether keys are generated and stored on your device, whether they can be recovered and by whom, and what happens if you lose your device.

Before relying on any such app, read its technical documentation. Look for a description of what is encrypted, what is public, where data is stored, and how keys are handled. If that information is vague, treat the privacy claim as unproven.

Over-the-counter trading means two parties agree a price and settle a trade directly, rather than placing orders on a public exchange. OTC desks are common in traditional finance and in crypto, and they can suit large trades that would move a public market.

In a decentralised setting, the main question is counterparty risk. Who is on the other side of the trade, and what stops them from failing to deliver? A smart contract can hold funds in escrow, but only if the contract is sound and its rules are clear. A chat-based negotiation alone offers no such protection.

Pricing is another issue. Off-platform prices can differ from public market prices, and a quoted price may move before settlement. Fees, slippage and the time a trade takes to finalise all affect the real cost.

Regulation also varies. Rules on crypto trading, custody and money transmission depend on where you live and where the counterparty is based. Check the rules that apply to you before you trade, and do not treat a decentralised label as a legal shield.

The launch-era material gives a clear picture of what was promised in 2021. It does not, on its own, show whether the app is live, how many people use it, whether it has been audited or whether the team is still active.

To assess current status, look for dated evidence. Useful signals include a working application that you can test with a small amount, a public code repository with recent commits, a published audit report from a named firm, and announcements dated within the last year or two. Also check whether the official website, social accounts and documentation still exist and whether they agree with each other.

Negative signals matter too. A project whose links are broken, whose announcements stopped years ago or whose team cannot be identified should be treated with caution. Absence of news is not proof of failure, but it is a reason to verify before acting.

If you cannot confirm current operation, the safest assumption is that the product's status is unknown. Do not send funds or sensitive information on the basis of 2021 coverage alone.

You can check any Solana dApp with a short process. None of these steps requires special tools, and each one gives you a piece of evidence to weigh.

1. Find the official website by typing the address directly, not by following a link from a chat or advert.
2. Search for the program or token address on a Solana block explorer and confirm that it is active and has recent transactions.
3. Look for a public code repository and check the date of its latest commit.
4. Find an audit report, note the firm and the date, and check that the audited version matches the live code.
5. Compare announcements across the official site, documentation and social channels, and check their dates.
6. Search for independent coverage from outlets that do not publish the project's own material.
7. Ask whether the team is named, reachable and has a track record you can check.

If any step fails, pause before connecting a wallet. A missing audit, unclear team or inactive program does not prove a scam, but it means you are taking on more risk than the marketing suggests.

Connecting a wallet to any dApp carries risk. Approving a transaction can grant a program the right to move assets, so read each request before signing.

• Use a dedicated wallet with only the funds you need for testing.
• Never share your seed phrase or private key with anyone, including people who claim to be support staff.
• Be wary of direct messages offering help, airdrops or urgent account checks, since these are common phishing methods.
• Check the domain carefully. Fake sites copy names and logos.
• Review and revoke token approvals or permissions you no longer use.
• Keep your device and wallet software updated and protect them with a strong passcode.
• Consider a hardware wallet for larger balances.

If you think you have signed something harmful, move remaining funds to a new wallet you control, stop using the compromised one, and document the transactions. Changing passwords on linked accounts is also wise.

These habits do not remove all risk, but they reduce the chance that a single mistake leads to a total loss.

If your interest is in Solana-based messaging or private communication, the most useful next step is to understand the wider ecosystem before choosing a tool. Several established Solana projects are more widely documented and can help you learn how on-chain applications behave.

Jupiter is a Solana DEX aggregator that routes token swaps across liquidity sources and offers other trading features. Studying how it displays routes, fees and approvals is a good way to practise reading transaction prompts.

Jito Liquid Staking, Marinade Liquid Staking and BlazeStake are Solana staking protocols that issue liquid staking tokens. They show how staking rewards and token wrappers work, which helps when you compare any yield claim.

Kamino Finance offers lending, liquidity vaults and leverage tools on Solana. Its documentation is a useful example of how a DeFi protocol explains risks such as liquidation and smart contract exposure.

Whatever you study, check current figures such as fees, rates and total value locked on the project's own pages or on public data sites, since these change often.