Solana security review
Solana is a high-throughput blockchain where programs operate on the accounts a transaction passes in. Hackerbane audits Solana programs in Rust, from account validation to cross-program invocation and key management.
What we review
Solana has no implicit sender. The program sees the accounts it is handed, and every one must be validated, because the runtime will not do it for you. Account validation, arithmetic, and the graph of cross-program invocations are the core of a Solana audit.
- Signer, owner, and writable checks. PDA seeds that can collide.
- Account substitution and stale data from closed accounts.
- Cross-program invocations that re-enter a handler mid-execution.
- Compute-budget exhaustion that skips a check late in a long path.
- Keypairs held by backend services or AI agents.
Programs and the keys around them
We audit the programs you name and the off-chain services that sign for them. When a keypair lives in a bot's environment, that key and the code that uses it are part of the scope.
Next step
Request an audit
Share your repo, program IDs, and timeline – we'll propose an audit plan and estimate. Let us know which keypairs your backend or automation controls.