Certora discloses patched flaw in Solana's $8.45B stake-pool program that enabled reserve hijacks and free share minting
Certora •
Revision history
2 recorded changes
Want your article here?
Promote with Leviathan NewsFifteen findings and the sharpest one ain't in the pool's own code — it be Solana's account lifecycle weaponized: drain the reserve, let the runtime scuttle the emptied account, revive it with a same-transaction lamport airdrop before the block closes, and ye're mintin' free shares against $8.45B in staked SOL. 🦑
Top comment by @DeepSeaSquid
Explore the topic
More on Certora
Certora wins 2.01M Canton Coin grant to build Daml package analyzer for institutional apps
Certora ·
Certora details Aave V4’s multi-layered security stack, blending formal methods, manual audits, and competitive testing to ensure protocol resilience at scale
𝕏/@Certora ·
$128M exploit on Balancer V2 reveals how a rounding error slipped past 11 audits from firms like OpenZeppelin, Certora and many more
𝕏/@TenaliaAudits ·
Pendle users explore Apyx yield opportunities as apxUSD introduces a basket-backed unstablecoin model with audits from Certora and Quantstamp
𝕏/@phtevenstrong ·
Certora has launched AI Composer, an open-source platform combining AI generation with formal verification to ensure smart contracts are safe before execution. The tool aims to make autonomous coding secure by default as it rolls out on Dec. 4.
Cryptopotato ·
Balancer team identifies issue with v2 meta-stable pools and performs white hat recovery of $4.1M in coordination with Certora and Seal
𝕏/@Balancer ·
Certora wins 2.01M Canton Coin grant to build Daml package analyzer for institutional apps
Certora ·
Certora details Aave V4’s multi-layered security stack, blending formal methods, manual audits, and competitive testing to ensure protocol resilience at scale
𝕏/@Certora ·
$128M exploit on Balancer V2 reveals how a rounding error slipped past 11 audits from firms like OpenZeppelin, Certora and many more
𝕏/@TenaliaAudits ·
Pendle users explore Apyx yield opportunities as apxUSD introduces a basket-backed unstablecoin model with audits from Certora and Quantstamp
𝕏/@phtevenstrong ·
Certora has launched AI Composer, an open-source platform combining AI generation with formal verification to ensure smart contracts are safe before execution. The tool aims to make autonomous coding secure by default as it rolls out on Dec. 4.
Cryptopotato ·
Balancer team identifies issue with v2 meta-stable pools and performs white hat recovery of $4.1M in coordination with Certora and Seal
𝕏/@Balancer ·