Superteam is a cheat code for Solana, shout out @SuperteamTR for helping me navigate through Turkey on a bike.
Thanks to @bitrefill and @solflare for supporting me on this mission.
Solana devs: 10 things to check before you ship to mainnet
1. Upgrade authority behind a multisig. Not 1 of m, not m of m. Add a timelock.
2. Every account validated: owner, discriminator, seeds, signer, writable.
3. Every CPI target pinned to a known program ID.
4. remaining_accounts parsed like hostile input: count, order, owner, duplicates.
5. No plain init on addresses others can create first (main offender: ATAs).
6. Accounts closed properly, so they can't be revived.
7. Checked math, rounding in the protocol's favor, no lossy casts.
8. Accounting that doesn't trust raw token balances.
9. Monitoring, a way to pause, and an incident plan with names and phone numbers.
10. A security.txt, so whoever finds your bug can actually reach you.
Want a second pair of eyes before launch? dms are open.
50+ Solana programs, including ten finance apps, all now on @osec_io's Anchor 2 RC2.
They're also now using Transaction version 1 - so you can fit more in a single transaction and CU limits are built in!
In 2027, EuroRust is going to Prague! 🇨🇿
Join us Oct. 13–16 for two conference days, a workshop day, an impl day, and a ton of fun side activities. Ferris can't wait! 🦀✨
Get your ticket now 👉
#EuroRust27#
🚨 Mainnet-beta validators: we're looking for volunteers to bring 20% of stake to Agave v4.4.0-rc.1 by EOD Friday, Oct 30 per routine upgrade procedure.
Some very special hardware devkits are coming to a London event near you.
Catch one of these at Breakpoint, the Solana Intelligence Summit, or Scale or Die.
Surfpool v1.7.0 is out!
This one does come with a minor breaking change, so be sure to check out the release notes if you're getting some unexpected behavior:
What's cooler than wearing a plastic badge that has your name printed on it?
Wearing a hardware badge that can display your name and run your applications!
Wanna know how to get one? 👇
With alpenglow coming to devnet in two hours, let's have another look together at the migration guide.
It will hopefully also have a live view of the transition from tower to alpenglow ready for the devnet launch. 🤞