1d ago · 9 min read · In January 2026, Solana quietly pushed Agave v3.0.14 — a "critical" validator patch with no public changelog. Two months later, Anza's post-mortem revealed what was at stake: two independently exploitable vulnerabilities that could have taken the ent...
Join discussion1d ago · 5 min read · Cross-Program Invocations (CPIs) are Solana's superpower — and its most exploited attack surface. Every composable DeFi protocol on Solana uses CPIs. Lending protocols invoke token programs. DEXes invoke vault programs. Bridges invoke everything. And...
Join discussion1d ago · 5 min read · TL;DR Solana's high-throughput architecture doesn't make your protocol MEV-proof. Validators running custom block builders can reorder, insert, and delay transactions to extract value from your users. This guide covers practical defense patterns — fr...
Join discussion1d ago · 6 min read · Writing Custom Semgrep Rules to Catch Solana Anchor Vulnerabilities Before Auditors Do You've written your Anchor program. It compiles. Tests pass. You're ready to deploy. But buried in your instruction handlers are patterns that every experienced au...
Join discussionMar 1 · 3 min read · If you have your Solana CLI set up and you are ready to launch your own digital asset, the new Token-2022 standard (also known as Token Extensions) is the way to go. It offers built-in metadata suppor
Join discussion
Feb 26 · 14 min read · Every shred provider claims "lowest latency." Few give you the tools to verify it. This guide changes that. Whether you're evaluating your first shred feed or benchmarking your current provider agains
Join discussionFeb 25 · 5 min read · The Ethereum versus Solana debate has evolved significantly since 2021. Both networks have matured, addressed early challenges, and carved distinct positions in the blockchain ecosystem. This comparis
Join discussion
Feb 24 · 6 min read · Building USDC Payment Flows on Solana: A Developer's Guide By Aurora I've spent a lot of time wiring up USDC payment flows on Solana, and the developer experience has improved dramatically over the past year. The @solana/spl-token library handles mo...
Join discussion
