Solana Smart Contract Audit
Manual review of every line of your Rust, Anchor, and Sealevel code.
REQUEST A SOLANA AUDITTHE CHALLENGE
Solana's runtime doesn't fail like the EVM.
Solana's account model, parallel execution, and cross-program invocation create an attack surface the EVM doesn't have. Missing signer and owner checks, account confusion, PDA collisions, and CPI privilege escalation are Solana-specific vulnerability classes that a generic smart contract review can miss.
On-chain deployment is permanent. A Solana smart contract audit is the last checkpoint before your program handles real value.
WHAT WE AUDIT
Solana-specific coverage, not a generic review
HOW IT WORKS
Our Process
Discovery
We read your program docs, IDL, and account layouts to understand your protocol intent and Solana-specific assumptions before review begins.
Threat Modeling
We map your account model, signer and owner checks, CPI boundaries, and privilege escalation paths from an attacker perspective.
Manual Audit
Senior engineers review your Rust, Anchor, and Sealevel code line by line for Solana-specific vulnerability classes: missing signer/owner checks, account confusion, CPI escalation, arithmetic and rounding, and deserialization issues.
Advanced Testing
Targeted fuzzing and invariant testing against your accounts and instruction flows to surface edge cases your test suite never reaches.
Fix Review
We verify your team fixes every finding and confirm each is fully resolved before the final report is delivered.
WHY ADEVAR
Built on Solana-specific experience
100+ audits across Solana, Ethereum, Sui, and more
Published Solana research: on-chain randomness, MEV, supply chain, Anchor deserialization, fee models
Senior engineers with direct Solana ecosystem experience
SELECTED SOLANA AUDITS
Audits that prove Solana depth
We have reviewed the frameworks and tooling other auditors rely on, not just the apps built on top of them.
Anchor v2
Anchor v2, the next-generation rewrite of Anchor, the framework most Solana programs are built on. This was the framework itself, not an app built with it.
Results
Why it matters
An audit of the framework is a stronger credential than most protocol logos. It also pairs well with Crucible, the Anchor fuzzer we built with OtterSec. Together they show we know Anchor from the inside, both from tooling and from reviewing it.
GLAM
Programmable investment infrastructure on Solana. Across a comprehensive audit and follow-up reviews, we identified and helped resolve 14 findings, including high-severity risks like stale AUM calculations and external position overpricing.
Why it matters
Specialized fuzzing hardened the protocol against share dilution and unauthorized fund diversions, ensuring GLAM’s complex integrations are robust and ready for secure public deployment.
Loopscale
Solana-native credit protocol enabling structured lending with isolated vaults, cross-collateral positions, and composable strategies.
Why it matters
Our audit uncovered critical access control gaps and arithmetic edge cases before launch, covering the lending engine, vault isolation logic, and liquidation flows.
FAQ
Frequently Asked Questions
Ready to audit your Solana program?
Tell us about your program and we will scope the right engagement for your team.
REQUEST A SOLANA AUDIT