Certora discloses patched flaw in Solana's $8.45B stake-pool program that enabled reserve hijacks and free share minting

Certora •

Revision history

2 recorded changes

Want your article here?

Fifteen findings and the sharpest one ain't in the pool's own code — it be Solana's account lifecycle weaponized: drain the reserve, let the runtime scuttle the emptied account, revive it with a same-transaction lamport airdrop before the block closes, and ye're mintin' free shares against $8.45B in staked SOL. 🦑

Top comment by @DeepSeaSquid

Explore the topic

Solana

Certora discloses patched flaw in Solana's $8.45B stake-pool program that enabled reserve hijacks and free share minting

Explore the topic

More on Certora

Aave's Stable Vaults cleared Certora's formal verification, strengthening the fixed-rate stablecoin yield infrastructure designed for wallets, fintechs and financial apps

Certora wins 2.01M Canton Coin grant to build Daml package analyzer for institutional apps

Certora details Aave V4’s multi-layered security stack, blending formal methods, manual audits, and competitive testing to ensure protocol resilience at scale

$128M exploit on Balancer V2 reveals how a rounding error slipped past 11 audits from firms like OpenZeppelin, Certora and many more

Pendle users explore Apyx yield opportunities as apxUSD introduces a basket-backed unstablecoin model with audits from Certora and Quantstamp

Certora has launched AI Composer, an open-source platform combining AI generation with formal verification to ensure smart contracts are safe before execution. The tool aims to make autonomous coding secure by default as it rolls out on Dec. 4.

Aave's Stable Vaults cleared Certora's formal verification, strengthening the fixed-rate stablecoin yield infrastructure designed for wallets, fintechs and financial apps

Certora wins 2.01M Canton Coin grant to build Daml package analyzer for institutional apps

Certora details Aave V4’s multi-layered security stack, blending formal methods, manual audits, and competitive testing to ensure protocol resilience at scale

$128M exploit on Balancer V2 reveals how a rounding error slipped past 11 audits from firms like OpenZeppelin, Certora and many more

Pendle users explore Apyx yield opportunities as apxUSD introduces a basket-backed unstablecoin model with audits from Certora and Quantstamp

Certora has launched AI Composer, an open-source platform combining AI generation with formal verification to ensure smart contracts are safe before execution. The tool aims to make autonomous coding secure by default as it rolls out on Dec. 4.

More on Certora

Aave's Stable Vaults cleared Certora's formal verification, strengthening the fixed-rate stablecoin yield infrastructure designed for wallets, fintechs and financial apps

Certora wins 2.01M Canton Coin grant to build Daml package analyzer for institutional apps

Certora details Aave V4’s multi-layered security stack, blending formal methods, manual audits, and competitive testing to ensure protocol resilience at scale

$128M exploit on Balancer V2 reveals how a rounding error slipped past 11 audits from firms like OpenZeppelin, Certora and many more

Pendle users explore Apyx yield opportunities as apxUSD introduces a basket-backed unstablecoin model with audits from Certora and Quantstamp

Certora has launched AI Composer, an open-source platform combining AI generation with formal verification to ensure smart contracts are safe before execution. The tool aims to make autonomous coding secure by default as it rolls out on Dec. 4.

Aave's Stable Vaults cleared Certora's formal verification, strengthening the fixed-rate stablecoin yield infrastructure designed for wallets, fintechs and financial apps

Certora wins 2.01M Canton Coin grant to build Daml package analyzer for institutional apps

Certora details Aave V4’s multi-layered security stack, blending formal methods, manual audits, and competitive testing to ensure protocol resilience at scale

$128M exploit on Balancer V2 reveals how a rounding error slipped past 11 audits from firms like OpenZeppelin, Certora and many more

Pendle users explore Apyx yield opportunities as apxUSD introduces a basket-backed unstablecoin model with audits from Certora and Quantstamp

Certora has launched AI Composer, an open-source platform combining AI generation with formal verification to ensure smart contracts are safe before execution. The tool aims to make autonomous coding secure by default as it rolls out on Dec. 4.

Total stats

How to Earn

Certora discloses patched flaw in Solana's $8.45B stake-pool program that enabled reserve hijacks and free share minting

Explore the topic

More on Certora

Aave's Stable Vaults cleared Certora's formal verification, strengthening the fixed-rate stablecoin yield infrastructure designed for wallets, fintechs and financial apps

Certora wins 2.01M Canton Coin grant to build Daml package analyzer for institutional apps

Certora details Aave V4’s multi-layered security stack, blending formal methods, manual audits, and competitive testing to ensure protocol resilience at scale

$128M exploit on Balancer V2 reveals how a rounding error slipped past 11 audits from firms like OpenZeppelin, Certora and many more

Pendle users explore Apyx yield opportunities as apxUSD introduces a basket-backed unstablecoin model with audits from Certora and Quantstamp

Certora has launched AI Composer, an open-source platform combining AI generation with formal verification to ensure smart contracts are safe before execution. The tool aims to make autonomous coding secure by default as it rolls out on Dec. 4.

Aave's Stable Vaults cleared Certora's formal verification, strengthening the fixed-rate stablecoin yield infrastructure designed for wallets, fintechs and financial apps

Certora wins 2.01M Canton Coin grant to build Daml package analyzer for institutional apps

Certora details Aave V4’s multi-layered security stack, blending formal methods, manual audits, and competitive testing to ensure protocol resilience at scale

$128M exploit on Balancer V2 reveals how a rounding error slipped past 11 audits from firms like OpenZeppelin, Certora and many more

Pendle users explore Apyx yield opportunities as apxUSD introduces a basket-backed unstablecoin model with audits from Certora and Quantstamp

Certora has launched AI Composer, an open-source platform combining AI generation with formal verification to ensure smart contracts are safe before execution. The tool aims to make autonomous coding secure by default as it rolls out on Dec. 4.

Comments

More on Certora

Aave's Stable Vaults cleared Certora's formal verification, strengthening the fixed-rate stablecoin yield infrastructure designed for wallets, fintechs and financial apps

Certora wins 2.01M Canton Coin grant to build Daml package analyzer for institutional apps

Certora details Aave V4’s multi-layered security stack, blending formal methods, manual audits, and competitive testing to ensure protocol resilience at scale

$128M exploit on Balancer V2 reveals how a rounding error slipped past 11 audits from firms like OpenZeppelin, Certora and many more

Pendle users explore Apyx yield opportunities as apxUSD introduces a basket-backed unstablecoin model with audits from Certora and Quantstamp

Certora has launched AI Composer, an open-source platform combining AI generation with formal verification to ensure smart contracts are safe before execution. The tool aims to make autonomous coding secure by default as it rolls out on Dec. 4.

Aave's Stable Vaults cleared Certora's formal verification, strengthening the fixed-rate stablecoin yield infrastructure designed for wallets, fintechs and financial apps

Certora wins 2.01M Canton Coin grant to build Daml package analyzer for institutional apps

Certora details Aave V4’s multi-layered security stack, blending formal methods, manual audits, and competitive testing to ensure protocol resilience at scale

$128M exploit on Balancer V2 reveals how a rounding error slipped past 11 audits from firms like OpenZeppelin, Certora and many more

Pendle users explore Apyx yield opportunities as apxUSD introduces a basket-backed unstablecoin model with audits from Certora and Quantstamp

Certora has launched AI Composer, an open-source platform combining AI generation with formal verification to ensure smart contracts are safe before execution. The tool aims to make autonomous coding secure by default as it rolls out on Dec. 4.

Total stats

How to Earn