Program derived addresses (PDAs) are used in virtually all Solana smart contracts. While excellent resources (e.g., the Solana Cookbook) exist for understanding PDAs, there is one important caveat deserving special attention: PDAs of a Solana program can have the same seeds with multiple valid bumps, giving multiple different addresses (quote…

Sec3 (formerly Soteria) has a team of top experts in security audits of smart contracts. In the last few months, we’ve observed an increasing number of vulnerabilities in DeFi applications that fall into a common pattern: bi-directional rounding: If a smart contract has a bi-directional function or functions (e.g., swap…

We are glad to announce the first release of Soteria Premium: an auto- auditing service offered by Soteria team to scan a large list of security vulnerabilities in Solana smart contracts. Soteria Premium has a number of features: It detects 25+ types of common security vulnerabilities in Solana programs written…