Rust security review
Rust is the systems language behind Solana programs, CosmWasm contracts, Polkadot runtimes, and most blockchain node software. Hackerbane audits Rust that holds funds, runs a client, or handles keys.
What we review
Rust is a language, not a chain, and the bugs follow the runtime. On Solana we focus on account validation and compute. In CosmWasm, entry points and IBC. In a node client, parse paths that can split a network. Our review is calibrated to each.
- Missing signer or owner checks, account substitution, and PDA mix-ups.
- Unsafe blocks next to deserialization or foreign functions that handle keys.
- Integer and rounding bugs the type system does not catch.
- Re-entrancy through cross-program or cross-contract calls.
- Hosts that keep a production key in the same process as untrusted input.
Where Rust audits fit
Our Rust practice covers code that signs, spends, or secures a network: on-chain programs, node software, and the services around them. Bring the crates that touch value or keys and we'll scope the review around them.
Next step
Request an audit
Share your repo, the runtime it targets (Solana, CosmWasm, a parachain, a client, or an AI host), and your timeline – we'll propose an audit plan and estimate.