Security Journal
Latest Writeups & Insights
Deep technical breakdowns of smart contract vulnerabilities, Anchor layouts, and stablecoin precision errors from our security research team.
The Seed Set Is Your Schema: Reading PDA Identity Bugs in Anchor
One missing seed in a Solana governance program froze every vote and let anyone drain the escrow. A teardown of what a PDA seed set actually promises the runtime.
Read Full Article →
One Account Type to Rule Them All: Anchor V2's Slab and the Duplicate-Mutable Check
Anchor V2 collapsed every account into one type, Slab, and replaced its duplicate-account checks with a single bitmask test. A teardown of both, ending on a bug shipping today.
Read Full Article →
Decimals, Precision, and Validation: A Teardown of a Solana Stablecoin Engine
A teardown of the decimal, precision, and validation bugs that drain Solana stablecoin programs, from a real Cantina review.
Read Full Article →