Awesome Solana Security

Resources to help you build better and more secure Solana programs. Kept up to date.

Development Resources

• GOATED resource to get started (Ethereum knowledge required): https://www.rareskills.io/solana-tutorial
• Solana handbook: https://ackee.xyz/solana/book/latest/

Official Resources

• Solana docs: https://solana.com/docs/
• Solana course: https://solana.com/developers/courses
• Solana cookbook: https://solana.com/developers/cookbook
• Solana examples with multiple programing language supported: https://github.com/solana-developers/program-examples
• Solana bootcamp 2024: https://github.com/solana-developers/developer-bootcamp-2024

Tools

• Solana playground: https://beta.solpg.io/
• Rust playground: https://play.rust-lang.org/

Anchor

We highly recommend using Anchor, a framework for building secure Solana programs.

• Anchor docs: https://www.anchor-lang.com/docs
• Anchor book: https://book.anchor-lang.com/
• Anchor by example: https://examples.anchor-lang.com/
• Anchor wiki: https://docs.rs/anchor-lang
• Anchor spl wiki: https://docs.rs/anchor-spl

Solana Program Library (SPL)

SPL is an official collection of programs to build your own Solana program with. Because they are official, they are more widely used and less likely to have bugs and security issues.

• SPL docs: https://spl.solana.com/

Places to ask questions

• Solana stack exchange: https://solana.stackexchange.com/

Rust

If you need a primer on Rust, these resources are for you.

• Rust book: https://doc.rust-lang.org/book/
• Rust by example: https://doc.rust-lang.org/rust-by-example/index.html

Security Resources

• Solana security course: https://solana.com/developers/courses/program-security
• Security roadmap: https://github.com/Rektoff/Security-Roadmap-for-Solana-applications
• Program examples with vulnerabilities: https://github.com/urataps/solana-audit-examples
• Token-2022 Security
  • Part 1: https://blog.offside.io/p/token-2022-security-best-practices-part-1
  • Part 2: https://blog.offside.io/p/token-2022-security-best-practices-part-2
  • Additional: https://neodyme.io/en/blog/token-2022

Audit Contests

Solana security audits that are publically available.

• Orderly on Sherlock: 2 High & 1 Medium
• WOOFi on Sherlock: 2 High & 3 Medium
• Andromeda on Sherlock: 1 High & 15 Medium
• Pump Science on Code4rena: 2 High & 3 Medium

NOTE: you may need to log into Cantina to read these

• Grass on Cantia: 13 High & 6 Medium
• Olas on Cantia: 2 High & 3 Medium
• Tensor on Cantia: 5 High & 10 Medium