Solana Security Patterns
10 critical vulnerabilities with
Anchor
and
Pinocchio
implementations
40 Programs
20 Vulnerable
20 Secure
42+ Tests
🔐
Pattern 01
Missing Signer Check
No signature verification allows impersonation
→
👤
Pattern 02
Missing Owner Check
Trusting unverified account data
→
🔄
Pattern 03
Account Reinitialization
Overwriting existing account authority
→
🎭
Pattern 04
Type Confusion
Wrong account type accepted as valid
→
🔢
Pattern 05
Arithmetic Overflow
Integer wraparound bypasses checks
→
🚪
Pattern 06
Unsafe Account Closing
Closed account can be revived
→
📞
Pattern 07
Arbitrary CPI
Calling unchecked external programs
→
👯
Pattern 08
Duplicate Accounts
Same account passed twice causes bugs
→
🎲
Pattern 09
Bump Seed Issues
Non-canonical PDA bump accepted
→
🔗
Pattern 10
PDA Sharing
Generic seeds create shared PDAs
→