solana-vulnerability-scanner

To scan for Solana vulnerabilities, the scanner analyzes Rust source files in programs/*/src/lib.rs to detect improper PDA validation and missing signer checks. It supports both native and Anchor programs by identifying six critical security patterns.

A Solana security audit checks for six vulnerability patterns: Arbitrary CPI, improper PDA validation, missing ownership checks, missing signer checks, sysvar spoofing, and improper instruction introspection. These patterns address critical Solana security risks.

Yes, the Solana vulnerability scanner works with Anchor programs. It requires Anchor.toml and Cargo.toml files in the project, utilizing Trail of Bits Solana lints and Anchor testing to perform platform-agnostic vulnerability detection.

Detect sysvar spoofing and arbitrary CPI by running the scanner on your project sources. It examines Rust code in programs/*/src/lib.rs to identify these vulnerabilities and generates structured outputs with references and actionable fixes.

Before running a Solana security audit, ensure your project includes Rust source files in programs/*/src/lib.rs, along with Anchor.toml, Cargo.toml, and tests directories. These files are required for the scanner to detect vulnerabilities.