Full Stack Security: Protection at every step of the development cycle. Security Partner of @Metaplex, @Orca_so, @KaminoFinance, & many more!
Secure your protocol 👉
Joined September 2021
- Tweets1K
- Following290
- Followers6.3K
- Likes1.4K
🐳 Thrilled to announce our ongoing security partnership with @orca_so!
Together, we're ensuring Orca's Whirlpool and Wavebreak protocols remain secure and trustworthy for the community. Wavebreak is Orca's upcoming launchpad featuring an anti-bot mechanism to protect token launches from bots and snipers
Huge thanks to Orca's dev team for their exceptional diligence and collaboration throughout this process. Let's dive deeper together! 🌊🔒
Watch the announcement of the release of IDL Guesser at @SolanaConf here!
youtube.com/watch?v=bymudcDF…
We’re excited to release IDL Guesser - an open-source CLI that rips the IDL out of any closed-source Anchor program !
Blog: sec3.dev/blog/idl-guesser-re…
Code: github.com/sec3-service/IDLG…
The Gap: about half of the top-100 Solana programs ship with no IDL. Can’t decode transactions, fuzzers stall, auditors waste hours reverse-engineering
How it works:
• Finds sol_log("Instruction: …") in the ELF
• Walks Anchor’s try_accounts control-flow graph to map signers & mutables info
Brute-probes arg sizes, recalculates 8-byte discriminators
• Spits out ready-to-use JSON.
Early testing shows the tool recovers the vast majority of instructions. The tool just won 1st prize at Reverse Engineering Closed Source Solana Programs hackathon hosted by Accretion.
Try it now - github.com/sec3-service/IDLG…
Our CEO @chrisdoubleu_ presenting IDL guesser to @SolanaConf
Publish your IDL or we’ll guess it 😉
We’re excited to release IDL Guesser - an open-source CLI that rips the IDL out of any closed-source Anchor program !
Blog: sec3.dev/blog/idl-guesser-re…
Code: github.com/sec3-service/IDLG…
The Gap: about half of the top-100 Solana programs ship with no IDL. Can’t decode transactions, fuzzers stall, auditors waste hours reverse-engineering
How it works:
• Finds sol_log("Instruction: …") in the ELF
• Walks Anchor’s try_accounts control-flow graph to map signers & mutables info
Brute-probes arg sizes, recalculates 8-byte discriminators
• Spits out ready-to-use JSON.
Early testing shows the tool recovers the vast majority of instructions. The tool just won 1st prize at Reverse Engineering Closed Source Solana Programs hackathon hosted by Accretion.
Try it now - github.com/sec3-service/IDLG…
1/ We're excited to announce our audit kickoff with @ZeusNetworkHQ, who is developing the first permissionless communication layer for Solana <> Bitcoin! Their proactive approach in bringing us early in development demonstrates a commendable focus on security. Let's dive in 🔍
1/ 🚀 Big news from @SolanaConf! Our @chrisdoubleu_ just announced we're open-sourcing X-Ray, our Solana Smart Contract analyzer. Battle-tested since '21, now free for all devs. Ready to boost your contract security? 🛡️
Sec3’s @chrisdoubleu_ will be making a big announcement for X-Ray at 12:15 on the right curve stage at @SolanaConf today, make sure you don’t miss it!
🚀 Thrilled that our CEO @chrisdoubleu, will be taking the stage at @SolanaConf in Singapore🇸🇬!
Join us for an in-depth dive into the cutting-edge of on chain safety and learn how to effective secure your digital assets.
Haven't gotten your tickets yet? solana.com/breakpoint 🎟️
We're extremely happy to have completed a a comprehensive audit of @uselulo (formerly Flexlend)'s smart contracts to help them with their mission of making DeFi Savings Accounts a reality for everyone🦉.
You can find the audit report here:
github.com/sec3-service/repo…
We're extremely happy to have completed a comprehensive security audit for the @sanctumso's Reserve, LST, and Infinite contracts ☁️
Liquid Staking Tokens
As passionate supporters of their ambitious initiative to promote wider adoption of LSTs through their framework, we understand that staking provides security for the @solana network but sometimes locks up value or fragments liquidity. @sanctumso 's "Infinite" framework aims to unlock this value, enabling stakers to protect the network while enjoying a unified liquidity layer across all existing LSTs
Forward Thinking Design
Our auditors were particularly impressed with the 'IDL-first, code-next' approach embraced by @sanctumso, reflecting the methodical philosophy of Rust - envision the big picture before delving into code. Looking ahead, this strategy could sidestep potential imperfections in account-related checks!
The full audit report can be found here:
learn.sanctum.so/docs/securi…
To learn more about @sanctumso and their innovations:
learn.sanctum.so/docs
