⚡ SOLANA

Attack Simulator

🏠Home ⚔Attack Simulator 🧩Challenge Mode 📊Dashboard 📚Learn 📋Checklist 📑Report

Learn Solana security

SOLANA ATTACK

📋 Security Checklist

Essential security checks before deploying your Solana programs

Completion Status

0/24

0%

Checked

Validate signer status with #[account(signer)]

CRITICAL

Account Validation

Check account.owner matches program_id

CRITICAL

Account Validation

Verify data account types with Account<T>

CRITICAL

Account Validation

Avoid UncheckedAccount unless necessary

HIGH

Account Validation

Use unique, unpredictable seeds

CRITICAL

Program Derived Addresses

Include user keys in seed derivation

CRITICAL

Program Derived Addresses

Verify PDA matches expected address

HIGH

Program Derived Addresses

Document seed derivation logic

MEDIUM

Program Derived Addresses

Validate program ID before CPI

CRITICAL

Cross-Program Invocation

Use constraint checks for CPI targets

HIGH

Cross-Program Invocation

Verify instruction format with called program

HIGH

Cross-Program Invocation

Handle CPI failures gracefully

MEDIUM

Cross-Program Invocation

Apply all available Anchor constraints

HIGH

Anchor Best Practices

Use custom error types

HIGH

Anchor Best Practices

Implement proper error messages

MEDIUM

Anchor Best Practices

Test with malicious input

MEDIUM

Anchor Best Practices

Initialize accounts with safe defaults

HIGH

Data Integrity

Validate input data ranges

HIGH

Data Integrity

Prevent integer overflow/underflow

CRITICAL

Data Integrity

Implement proper access controls

CRITICAL

Data Integrity

Test all instruction paths with valid input

HIGH

Testing & Deployment

Test all instruction paths with invalid input

HIGH

Testing & Deployment

Perform security audit before mainnet

CRITICAL

Testing & Deployment

Use gradual rollout strategy

HIGH

Testing & Deployment

Deployment Safety Tips

✓Start with Devnet and Testnet before moving to Mainnet
✓Have a third-party security audit completed
✓Use gradual rollout with amount limits initially
✓Implement admin upgrade authority for critical fixes
✓Maintain emergency pause functionality