domains / families / security / solana-vulnerability-scanner

solana-vulnerability-scanner

separate

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing. Use when auditing Solana/Anchor programs.

When to use

Auditing Solana programs (native Rust or Anchor)
Reviewing cross-program invocation (CPI) logic
Validating program-derived address (PDA) implementations
Pre-launch security assessment of Solana protocols
Reviewing account validation patterns
Assessing instruction introspection logic

Skill page

Source

Repository	Path
trailofbits/skills	`plugins/building-secure-contracts/skills/solana-vulnerability-scanner/SKILL.md`