solana-vulnerability-scanner

The scanner detects missing signer checks and sysvar spoofing by running pattern-specific checks across instruction handling and account deserialization. It applies to pre-launch audits and reports findings with severity and fix recommendations for each detected issue.

The scanner identifies six critical Solana-specific vulnerability patterns including arbitrary CPI, missing signer checks, sysvar spoofing, and account ownership issues. It systematically checks instruction handling and account deserialization logic to surface these high-impact security flaws.

The best way to audit cross-program invocation logic is using a systematic scanner that reviews CPI calls, PDA usage, and ownership checks. This approach produces actionable findings with fix recommendations to resolve issues before your program launches.

Yes, you can use the scanner to verify account ownership and sysvar handling. It performs pattern-specific checks across your Solana program sources to detect spoofing and ownership vulnerabilities, reporting each issue with recommended fixes.