Security

Verifiable downloads

The Windows miner is published with a SHA-256 checksum so you can confirm the file is untampered before running it. Current SoloLuckMiner-v1.10.1.exe: e201387dc8135f3a2d202bf0449f99ae8ac160986d140c76b4bf11678370c801. Verify with sha256sum SoloLuckMiner-v1.10.1.exe and compare — a live manifest of every download's checksum is at /SHA256SUMS.txt, computed from the exact files being served. The source is published too, so you can build it yourself. Downloads are versioned per release (old unversioned URLs redirect to the current release); the checksum manifest is the integrity reference.

We never hold your keys

SoloLuck is non-custodial. You mine with your own Bitcoin address as the username; if you solve a block, the Bitcoin network pays it straight to that address. There is no account, no balance, no deposit and no withdrawal — nothing for us to hold, freeze or lose.

What we log

No accounts, no KYC, no advertising or third-party cookies, no trackers. We keep first-party aggregate page-view counters only; requests are recorded in standard web-server logs, rotated daily and kept 14 days — we measure page-views, not individuals. Interface preferences live in your browser's local storage; the opt-out at /optout sets one first-party cookie. Full detail on /privacy.

Reporting a vulnerability

Found a security issue? Please report it responsibly via our official Telegram channel @SoloLuckPool. We will never DM you first or ask for your seed or private keys. Machine-readable reporting info: /.well-known/security.txt.

Infrastructure

The pool runs on a Jakarta VPS with an encrypted TLS stratum endpoint (port 3334), host firewalling and per-tier difficulty. Uptime is watched from an operator-run node in Indonesia (a single vantage, not a global probe network). Service is best-effort with no guarantee — see the risk disclosure.