Security

12 pages in this section.

Sealevel attack surface for Solana programs: account validation, signer and owner checks, PDA seeds, reinit, arithmetic, CPI reentrancy, and audit workflow.

Explainer Program Security Auditing Security Audit

Security Basics

Learn Solana program security basics: threat model, account validation, signer checks, and fail-closed design on Anchor 0.32.1.

Rust Program Security Auditing Basics Security

Signer & Owner Checks

Learn how to prevent Solana program exploits by validating signers and owners. Understand when to apply these checks with code examples.

Rust Program Security Auditing Signer Owner

Account Validation Attacks

Rust Program Security Auditing Account Validation Type Confusion

PDA & Seed Attacks

Learn how attackers exploit Program Derived Address (PDA) seed and bump vulnerabilities to impersonate vaults, bypass authority, or collide with other programs.

Rust Program Security Auditing Pda Seeds

Arithmetic & Overflow

Learn to prevent overflow and rounding bugs in Rust programs. Implement checked arithmetic and u128 intermediates for safe token math.

Rust Program Security Auditing Arithmetic Overflow

Reinitialization Attacks

Rust Program Security Auditing Reinit Init If Needed

CPI & Reentrancy Risks

Rust Program Security Auditing Cpi Reentrancy

Sealevel Attacks Catalog

Rust Program Security Auditing Sealevel Catalog

Audit Workflow

Rust Program Security Auditing List Decision Tree

Security Best Practices

Learn 25 essential program security practices for Rust, including signer validation, typed accounts, PDA security, checked math, and CPI risk mitigation.

Rust Program Security Auditing Best Practices List

Security Highlights Summary

A single-page roundup of every highlight bullet from the 11 pages in the Security section, grouped by source page so you can scan all 64 takeaways without opening each article individually.

Highlights Summary Program Security Auditing

Security

Search Documentation

Security