Sec3

5

12

385

Sec3 रीट्वीट किया

Metaplex@metaplex·11 Şub

The Token Metadata program is officially immutable. Three firms have each done a full audit of the program in sequence for security: @neodyme, @osec_io, and @sec3dev. With no more upgrade authority, assets created with the program are secured on Solana, forever.

English

14

13

98

25.2K

Sec3@sec3dev·10 Ara

We are excited to be heading to @SolanaConf soon! Most of our time at Sec3 is spent deep inside individual @Solana programs, looking at one code base at a time. To round out the year, we wanted to zoom out and ask a bigger question: What do all these audits, taken together, actually say about Solana security right now? Here’s what we saw: • Dataset: 163 Solana audits from a mix of public reports and anonymized Sec3 engagements • Findings: 1,733 total issues, 1,669 of them vulnerability-level • Typical review: ~10 findings, with ~1.4 High or Critical issues We also looked at how framework choices shape the risk as well as provide a practical guide projects launching and maintaining good security posture If you want to go deeper into the data, charts, and concrete checklists, the report is public: Web version + link to download full PDF: solanasec25.sec3.dev

English

4

1

10

595

Sec3 रीट्वीट किया

Chris@chrisdoubleu_·8 Ara

AI agents exploited smart contracts worth $4.6mn in simulated attacks, with capabilities doubling every 1.3 months, but they still needed source code access. Non-public source code programs have some protection: AI reverse engineering exists but is far less capable than source code analysis. Though this gap will narrow. red.anthropic.com/2025/smart-con…

English

1

0

298

Sec3 रीट्वीट किया

MonkeFoundry@MonkeFoundry·25 Kas

We’re proud to welcome @sec3dev as our Security Partner ! Sec3 will support our first cohorts with priority access to security expertise and guidance, helping early-stage teams build safer products on @solana. This collaboration strengthens our shared mission of empowering builders and supporting the ecosystem.

English

7

70

3.2K

Sec3 रीट्वीट किया

Project 0@project0·13 Eki

The Project 0 program code has been audited 11 times, & is one one of the most stress-tested DeFi protocols on Solana. The P0 risk & liquidity engine is built on @marginfi, which has handled +$100B in lends, borrows, withdrawals, & flashloans through all market conditions on Solana for 3 years while protecting user solvency.

English

@redacted_noah @sec3dev github.com/sec3-service/I…

3

24

2.1K

Sec3 रीट्वीट किया

Happy Pirate | ソラナ | Triton.One@SteveCleanBrook·18 Ağu

QME

2

9

1.4K

Sec3 रीट्वीट किया

Harsh Ghodkar@0xharsh1001·15 Ağu

why is @sec3dev 's IDL guesser not yet added in any of the explorer

English

3

6

991

Sec3@sec3dev·19 Ağu

@SteveCleanBrook @redacted_noah Thanks for the tag @SteveCleanBrook please feel free to reach out @redacted_noah if there are features you'd like us to add!

English

3

35

Happy Pirate | ソラナ | Triton.One@SteveCleanBrook·18 Ağu

@redacted_noah Just use IDL guesser by @sec3dev

English

3

0

9

286

Noah 🎈@redacted_noah·18 Ağu

Programs that don't publish their IDL should be deleted from mainnet. Should I make the SIMD?

English

25

9

119

16.5K

Sec3@sec3dev·31 Tem

@orca_so 🦉 ❤️ 🐳

QME

47

Sec3 रीट्वीट किया

Orca 🌊@orca_so·30 Tem

Orca 🤝 Owl Seeing the ongoing commitment to security with @sec3dev's team has been second to none. Our team is looking forward to working alongside Sec3 to keep security and trustworthiness a top priority.

🐳 Thrilled to announce our ongoing security partnership with @orca_so! Together, we're ensuring Orca's Whirlpool and Wavebreak protocols remain secure and trustworthy for the community. Wavebreak is Orca's upcoming launchpad featuring an anti-bot mechanism to protect token launches from bots and snipers Huge thanks to Orca's dev team for their exceptional diligence and collaboration throughout this process. Let's dive deeper together! 🌊🔒

English

16

5

54

9.2K

Sec3@sec3dev·30 Tem

🐳 Thrilled to announce our ongoing security partnership with @orca_so! Together, we're ensuring Orca's Whirlpool and Wavebreak protocols remain secure and trustworthy for the community. Wavebreak is Orca's upcoming launchpad featuring an anti-bot mechanism to protect token launches from bots and snipers Huge thanks to Orca's dev team for their exceptional diligence and collaboration throughout this process. Let's dive deeper together! 🌊🔒

English

8

9

26

10.8K

Sec3 रीट्वीट किया

FusionAMM@FusionAMM·27 Tem

Fusion AMM is officially secured by @oshield_io and @sec3dev. Big thanks to both auditors for adhering to the highest industry standards. We will continue working alongside them to maintain top-tier security across the protocol.

English

16

1.7K

Sec3@sec3dev·5 Haz

Watch the announcement of the release of IDL Guesser at @SolanaConf here! youtube.com/watch?v=bymudc…

YouTube

We’re excited to release IDL Guesser - an open-source CLI that rips the IDL out of any closed-source Anchor program ! Blog: sec3.dev/blog/idl-guess… Code: github.com/sec3-service/I… The Gap: about half of the top-100 Solana programs ship with no IDL. Can’t decode transactions, fuzzers stall, auditors waste hours reverse-engineering How it works: • Finds sol_log("Instruction: …") in the ELF • Walks Anchor’s try_accounts control-flow graph to map signers & mutables info Brute-probes arg sizes, recalculates 8-byte discriminators • Spits out ready-to-use JSON. Early testing shows the tool recovers the vast majority of instructions. The tool just won 1st prize at Reverse Engineering Closed Source Solana Programs hackathon hosted by Accretion. Try it now - github.com/sec3-service/I…

English

2

9

1.4K

Sec3@sec3dev·19 May

Our CEO @chrisdoubleu_ presenting IDL guesser to @SolanaConf Publish your IDL or we’ll guess it 😉

We’re excited to release IDL Guesser - an open-source CLI that rips the IDL out of any closed-source Anchor program ! Blog: sec3.dev/blog/idl-guess… Code: github.com/sec3-service/I… The Gap: about half of the top-100 Solana programs ship with no IDL. Can’t decode transactions, fuzzers stall, auditors waste hours reverse-engineering How it works: • Finds sol_log("Instruction: …") in the ELF • Walks Anchor’s try_accounts control-flow graph to map signers & mutables info Brute-probes arg sizes, recalculates 8-byte discriminators • Spits out ready-to-use JSON. Early testing shows the tool recovers the vast majority of instructions. The tool just won 1st prize at Reverse Engineering Closed Source Solana Programs hackathon hosted by Accretion. Try it now - github.com/sec3-service/I…

English

2

1

10

936

Sec3 रीट्वीट किया

Armani Ferrante@armaniferrante·19 May

This is dope

We’re excited to release IDL Guesser - an open-source CLI that rips the IDL out of any closed-source Anchor program ! Blog: sec3.dev/blog/idl-guess… Code: github.com/sec3-service/I… The Gap: about half of the top-100 Solana programs ship with no IDL. Can’t decode transactions, fuzzers stall, auditors waste hours reverse-engineering How it works: • Finds sol_log("Instruction: …") in the ELF • Walks Anchor’s try_accounts control-flow graph to map signers & mutables info Brute-probes arg sizes, recalculates 8-byte discriminators • Spits out ready-to-use JSON. Early testing shows the tool recovers the vast majority of instructions. The tool just won 1st prize at Reverse Engineering Closed Source Solana Programs hackathon hosted by Accretion. Try it now - github.com/sec3-service/I…

English

14

6

72

91.4K

Sec3@sec3dev·13 May

We just added a new check to #Solana #Sec3dev X-ray Vulnerbility Scanner: detection of unvalidated CPI program IDs. We’re all tooling up from time to time. Community version of the Sec3 X-ray is open source—Sec3 and the broader community can all add checks. We’re happy to support teams improving coverage. github.com/sec3-product/x…

English

4

12

1.1K

Sec3@sec3dev·1 May

@r0bre @anarcaze @loopscale @accretion_xyz @SuperteamEarn @oshield_io Hey @r0bre please see our latest update

We’re currently working with Loopscale to review their code. To address recent inquiries: the exploited feature was not within our audit scope at the time of the incident. We remain deeply committed to supporting Loopscale through the audit process, strengthening their security posture, and collaborating to mitigate future risks.

English