Security

11 pages in this section.

Sealevel attack surface for Solana programs: account validation, signer and owner checks, PDA seeds, reinit, arithmetic, CPI reentrancy, and audit workflow.

Explainer Program Security Auditing Security Audit

Security Basics

The Solana threat model for programs.

Rust Program Security Auditing Basics Security

Signer & Owner Checks

The most common, most costly omissions.

Rust Program Security Auditing Signer Owner

Account Validation Attacks

Rust Program Security Auditing Account Validation Type Confusion

PDA & Seed Attacks

Bump/seed manipulation and impersonation.

Rust Program Security Auditing Pda Seeds

Arithmetic & Overflow

Checked math and rounding safety.

Rust Program Security Auditing Arithmetic Overflow

Reinitialization Attacks

Rust Program Security Auditing Reinit Init If Needed

CPI & Reentrancy Risks

Rust Program Security Auditing Cpi Reentrancy

Sealevel Attacks Catalog

Rust Program Security Auditing Sealevel Catalog

Audit Workflow

Rust Program Security Auditing List Decision Tree

Security Best Practices

Fail-closed, minimal-trust program design.

Rust Program Security Auditing Best Practices List

Security

Search Documentation

Security