#solana

11 posts tagged with solana.

Breaking open a propAMM

At Accelerate 2025, we talked about making Solana programs open source. A year later, agents have taken over the world, so we wanted to see how far we could push things by applying our techniques to the historically secretive world of propAMMs. Renato Marziano, Robert Chen

Solana: the hidden dangers of lamport transfers

Solana’s lamport transfer logic hides dangerous edge cases — from rent-exemption quirks to write-demotion traps. We dissect a deceptively simple smart contract game to expose how transfers to arbitrary accounts can silently fail, brick your program, or crown an eternal king. Nicola Vella

Solana multisig security

What can teams do if their multisig signers are compromised? We explore Solana’s transaction signing model and present a procedure for safe signing in the presence of malicious signers on Solana. Robert Chen

Solana: jumping around in the VM

An exploration of low-level Solana VM behavior. How to escalate from a powerful memory corruption primitive to full program control. Nicola Vella, Robert Chen

Solana formal verification: a case study

We present a novel framework for formal verification of Solana Anchor programs — and a case study application to the Squads multisig. Harrison Green

Rust, realloc, and references

Rust is safe… right? Not if your dependencies are unsafe… A deep dive into a subtle Solana SDK bug, Rust internals, and how we found it all. Ethan Wu

Reverse engineering Solana with Binary Ninja

An introduction to our open-source Binary Ninja plugin for blackbox Solana program analysis along with an executive reference to the Solana runtime. Harrison Green

The story of the curious rent thief

A tale of pickpockets preying on the Solana ecosystem. Read our investigation into the persistent theft of rent from uninitialized accounts. This is the story of the Solend rent thief. OtterSec

Becoming a millionaire, 0.000150 BTC at a time

How we discovered a critical issue in Solana’s stable swap implementation. A story about arbitrage and rounding. OtterSec

Solana: an auditor’s introduction

A security-focused introduction to Solana, exploring the underlying runtime environment, security boundaries, and implications. An important resource for all developers who want to write more secure code. OtterSec

The $200m bluff: cheating oracles on Solana

How we fooled oracles to beat the house. An exploration into liquidity tokens and oracle price manipulation. OtterSec