Solana program audits that understand accounts, not just code.

On the EVM, state lives inside the contract and the compiler enforces types. On Solana, state lives in accounts that anyone can pass to your instruction, and it is the program's job to verify every single one. Most of the large Solana incidents — forged accounts, fake sysvars, unchecked token mints, CPI into attacker-controlled programs — came from a missing or incomplete check, not from a memory-safety bug in Rust. Our audit follows the account model instruction by instruction: which accounts does this take, what does the program assume about each, and what happens if an attacker supplies a different one?

Anchor removes a lot of boilerplate and a lot of bugs, but it introduces its own: constraints that are weaker than they look, `init_if_needed` reinitialisation paths, `remaining_accounts` that are never validated, and account types that can be substituted when discriminators are not checked. Native programs without Anchor get the full manual treatment, since nothing is checked for free. We also review Token-2022 extension handling, which has become a frequent source of fee and transfer-hook surprises.

The same team audits Rust across the ecosystem: CosmWasm contracts, Substrate and Polkadot pallets, NEAR contracts, and off-chain Rust components such as indexers, relayers, sequencers and signing services. Ownership and the borrow checker remove whole classes of memory bugs, but logic, concurrency, serialisation and arithmetic issues remain — and those are the ones we look for.

Every Critical and High finding ships with a test that reproduces it against a local validator: an Anchor TypeScript test or a Rust integration test, whichever your team uses. You can run it before the fix to see the exploit and after the fix to confirm it is closed. We do not report theoretical issues as Critical; if we cannot demonstrate impact, we say so and rate accordingly.

A single Anchor program of modest size takes about a week. A protocol with several programs and complex CPI flows takes two to three weeks. Quotes are fixed and in writing, retest included, and we can usually start within one to two weeks of signing.