Lightlines
By trailofbits

solana-vulnerability-scanner

trailofbits5.3k installs

Find security flaws in Solana program code.

What it does

Checks Solana and Anchor programs for security flaws and returns cited findings, fixes, and a coverage table for all six vulnerability patterns.

When to use it

Use when auditing Solana or Anchor programs, reviewing CPI logic, or checking account validation, PDA implementations, and instruction introspection.

How to use it

Give it a Solana or Anchor codebase; it returns security findings, recommended fixes, and a coverage table for every vulnerability pattern.

What you provide

  • An existing project

Latest review

What you need · 2

Uses rg to locate CPI calls, PDA derivations, account validation, and instruction introspection in program source.

Uses solana-test-validator for local testing; the completion checklist requires local validator testing.


Access · 1

This skill

solana-test-validator

Execute

Starts a local Solana validator