Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

A Solana extension with real-time analysis of vulnerability classes. The extension performs checks on Anchor-specific issues, which are definitely needed! They have nine detectors. Of these, I find missing signer verification, unsafe math operations (overflows), and improper sysvar account checks to be the most interesting. Some of them aren't "security issues" like unused instruction attributes but it's good for static analysis checks.

There is also test coverage support. So, you can know which lines of code are not being hit by your unit tests/fuzzer. Good-looking extension!