@flint_trade_ on Solana. Formerly @anza_xyz. Proof types maxi. Spare time keys, microtones, scifi, tabletop, human languages
Joined October 2018
- Tweets1.9K
- Following463
- Followers2K
- Likes4.6K
Pinned Tweet
Most Solana programs are one typo - or one agent mistake - away from disaster.
Security pros warned us 5 years ago to not do this, but everybody does it. Examples do it. Agents do it. Auditors clear it. Millions drain.
fn withdraw(...) -> Result {
if record.owner != *user.key {
return Err(IllegalOwner);
}
if amount > record.quote {
return Err(InsufficientFunds);
}
// more `if`s here - hope we have enough!
record.quote -= amount;
transfer_out(destination, amount)
}
For both safety and performance, it's time to learn from decades of critical systems engineering, embrace the strength of Rust, and "Parse, Don't Validate." Runtime checks don't belong in a program's internals. They belong at the boundaries.
Read Here 👉 👉 flint.trade/blog/fragile-cod…
Pete retweeted
If you were hesitant to quote on Solana, message me
You're 5 steps from quoting live Solana flow:
1. Get a maker_id
2. Dashboard: quoting key, enable markets, deposit
3. Add the SDK to your project
4. Initialize the client + quoter
5. Submit a quote
docs.flintlabs.dev/overview/…
Pete retweeted
I'd love to see a writeup on design patterns that you've seen lead to fewer bugs. Loved this for example,
flint.trade/blog/fragile-cod…
Pete retweeted
Perp traders, what feature would you like to see on Flint?
37%Trailing SL & TP
20%TWAP execution
27%Copy trading
17%Custom price/risk alerts
30 votes • Final results Pete retweeted
Why Build On Solana?
Last week, at a few conference side events, multiple people brought up the on-chain cost of running a heavy, compute-intensive application like a PerpDex on @solana.
It was always phrased as if running your application on Solana was basically not worth it, extractive by the chain or merely a marketing play.
The L2 and corpo-chain narratives have unfortunately muddied the water here and I think a stronger re-invigoration of the messages around real ‘DeFi’ is necessary; a clear and clean call. Let me try.
The chain fees paid by application developers, operators and users are not ‘wasted’; we are paying for and receiving a service.
Firstly, we are paying for compute à la AWS; we publish a program which is executable on a VM that at some point in the stack runs on real hardware someone has to maintain; computers, networking infra and more. That’s just the beginning, and with centralized computing it’s ‘cheap’ because you’re trusting whoever runs it.
Secondly, and mainly, we are paying for consensus and security of the state the computer operates on. At the time of writing, the state of the network is secured by staked SOL valued at 65 billion USD (take 1/3 or 2/3 of that depending on whether you’re talking about halting or finalizing).
If decentralization and verifiability are goals, you need a credibly decentralized, high-stake-TVL chain. How much do you think that will cost you? What do you think the developers, devops, computers and seed capital will cost you to build an L1 and start a network? At the very least a few million a year, with far less stake valuation, high start-up costs, and a massive distraction.
Now, you are no longer building your application and all the domain-specific aspects of it; you are now bogged down building a chain stack, from code, to infra, to marketing and BD.
Just use Solana.
Pete retweeted
this is quite possibly the best article ive read about development on solana
when i started out with rust, i really fell in love with the type system. it's really what makes rust powerful.
i always did explicit types for everything
unfortunately when i got into solana, i noticed that we don't really do that here, and especially with Anchor it's difficult to do something out of the ordinary
so this makes me very happy, and after reading the article i am super bullish on @flint_trade_
Most Solana programs are one typo - or one agent mistake - away from disaster.
Security pros warned us 5 years ago to not do this, but everybody does it. Examples do it. Agents do it. Auditors clear it. Millions drain.
fn withdraw(...) -> Result {
if record.owner != *user.key {
return Err(IllegalOwner);
}
if amount > record.quote {
return Err(InsufficientFunds);
}
// more `if`s here - hope we have enough!
record.quote -= amount;
transfer_out(destination, amount)
}
For both safety and performance, it's time to learn from decades of critical systems engineering, embrace the strength of Rust, and "Parse, Don't Validate." Runtime checks don't belong in a program's internals. They belong at the boundaries.
Read Here 👉 👉 flint.trade/blog/fragile-cod…
If it's not verifiable, it's not DeFi
Real DeFi is on-chain and verifiable, everything else is trust with better branding.
@Josh_E_Wa at @SolanaSummitOrg 🇸🇬
Where your Solana / Rust bug gets caught:
trusted types → in your editor
const asserts/lints → when you compile
pinning tests → when you run tests
runtime checks → in production ... hopefully
Move everything you can up the list.
Read how at flint.trade/blog/fragile-cod…
Pete retweeted
Flint is building a fully on-chain perp DEX on @solana.
Perps was always the goal and the biggest opportunity. Nearly $6T trading volume on perp DEXs in 2026.
Don’t have time to read the article? Here's a TL;DR 🧵
Pete retweeted
Enshrining validity into the type itself is one of my favourite things in here.
Type strength and weight nicely compliments the voracity of AI coding.
Great read overall.
Most Solana programs are one typo - or one agent mistake - away from disaster.
Security pros warned us 5 years ago to not do this, but everybody does it. Examples do it. Agents do it. Auditors clear it. Millions drain.
fn withdraw(...) -> Result {
if record.owner != *user.key {
return Err(IllegalOwner);
}
if amount > record.quote {
return Err(InsufficientFunds);
}
// more `if`s here - hope we have enough!
record.quote -= amount;
transfer_out(destination, amount)
}
For both safety and performance, it's time to learn from decades of critical systems engineering, embrace the strength of Rust, and "Parse, Don't Validate." Runtime checks don't belong in a program's internals. They belong at the boundaries.
Read Here 👉 👉 flint.trade/blog/fragile-cod…
Pete retweeted
Excited to say I have joined the team at @flint_trade_ !
Great leadership, strong team, decentralized vision.
Follow along as we question assumptions, push the boundaries and build the most transparent, efficient perp DEX we can dream up.
If you're a builder or curious about decentralized exchange ideas, notis on, let's talk this out
If you're a market maker, reach out - we have the lowest friction ways to quote spot and soon perps
I highly suggest following cofounders @thedavidgorski (ex Jito BAM tech lead) and @Josh_E_Wa (ex DYDX), and shoutout to @SuperteamCAN . I met David at our office meetup. xitter.cf/flint_trade_/status/21…
Pete retweeted
My diagnosis of the Solana compiler is that it’s bad at optimizing normal code, so Solana devs end up going out of their way to instrument the compiler and deviate from normal best practices.
Then the compiler further optimized for those patterns, reinforcing this very Solana-specific style of coding:
- sprinkle #[inline(always)] and #[inline(never)] everywhere
- break up enum-handling paths by hand
- drop into asm blocks
And now the code is harder to read, harder to maintain, and full of optimization boundaries that would get in the way of a normally functioning compiler.
I’ve shown one example of this with the memcmp libcall. Here’s another one:
xitter.cf/clairefxyz/status/2104…
btw couldn't have made this without @rishavmehraa he spent countless nights to narrow down the issue!
Pete retweeted
A maker can now quote on Solana and be net paid for it.
No Solana infra to build. No maker fees on Flint. Frontier Traders rebate pools on top.
The only thing you bring is your pricing.
Excited to share that Flint is now part of @SolanaFndn's Frontier Traders!
Reminder: Flint makers pay $0 fees, and are now eligible for the $15K spot rebate pools.
Pete retweeted
Flint is now live on Frontier Traders.
Market makers on Solana no longer need to build infra to quote. @flint_trade_ handles gas, landing, and fills, merged pro rata across every quote. Custody stays with the maker.
Solana leads all chains in onchain volume, and most of it moves through aggregators. Flint is how makers reach it.
