PaulB🦀

Rust Security researcher in the making

[PaulB🦀 @BirnbaumPaulPro]

@godofprompt Gemini

[PaulB🦀 @BirnbaumPaulPro]

@WolfyBlair @boltdotnew That's a big red flag 🚩

[PaulB🦀 @BirnbaumPaulPro]

Yesterday, I've mention Solana's Token Program.

While it's tricky to explain it all in one tweet, I recommend this Article from
@pencilflip.

https://t.co/pNQhKVJ1PO

[PaulB🦀 @BirnbaumPaulPro]

@cholakovvv Contrats champ 💪

[PaulB🦀 @BirnbaumPaulPro]

Program Derived Addresses are special accounts owned by programs, not users.

They're generated from a program ID + seeds + bump — and have no private key.

✅ Program-owned

📦 Canonical bump = safest

PDAs = secure, predictable program-owned accounts

[PaulB🦀 @BirnbaumPaulPro]

What is the Solana Token Program?

It’s the standard for creating and managing tokens on Solana, similar to ERC-20 or ERC721 on EVM chains, but not deployed per token.

Instead of deploying a new contract, all tokens share the same program with different accounts.

[PaulB🦀 @BirnbaumPaulPro]

Interesting Introduction Article from @osec_io about Solana's Security.

https://t.co/33pYkewzBd

[PaulB🦀 @BirnbaumPaulPro]

To keep the network secure, the Solana runtime enforces strict rules:

✅ Only owning programs can modify accounts

💰 Total balances must stay the same

👀 Read-only accounts = untouchable balance

⚙️ All instructions run atomically

⏱️ Compute budget limits for resource abuse

[PaulB🦀 @BirnbaumPaulPro]

In Solana, everything is an account, like files on a computer.
There are 3 types:

🗂️ Data Accounts: store balances, stake ...
⚙️ Executable Accounts: run on-chain code
🧬 Native Program Accounts: built-in programs like System

Each account is either running code or storing data

[PaulB🦀 @BirnbaumPaulPro]

What is the System Program on Solana? 🛠️

It’s the backbone of the network responsible for:

📦 Creating accounts
🔁 Transferring SOL
🧠 Assigning ownership to programs
🧬 Generating PDAs

Every account interacts with it at some point.

It also owns each wallet:

[PaulB🦀 @BirnbaumPaulPro]

Solana Address Types 🧬

🔑Public Keys: 32-byte ed25519 curve points (can sign, have private keys)

🗝 PDAs (Program Derived Addresses): off-curve, no private key, can't sign.

PDAs are created using seeds + a bump, and let programs safely control accounts

[PaulB🦀 @BirnbaumPaulPro]

Solana Rent

Storing data on-chain requires a SOL balance proportional to account size, this is called Rent

Accounts with enough balance are rent-exempt and stay untouched
You get your full deposit back when the account is closed

Here is the price to pay for storing 32 bytes

[PaulB🦀 @BirnbaumPaulPro]

On Solana, tokens work differently from ERC20s.
Each token has a Mint account, but balances aren’t stored there.

Instead, each user has an Associated Token Account (ATA), a PDA derived from their address + Mint.
The user owns the ATA, but only the token program can mint tokens

[PaulB🦀 @BirnbaumPaulPro]

@siintemal Hi @siintemal, how can I reach out to you?

[PaulB🦀 @BirnbaumPaulPro]

For anyone learning Rust / Solana / Anchor, I can't recommend this Daily Solana Tip series enough.

I haven't finish it yet, but so far I'm leveling up my game at a much faster pace that I though.

Thanks @r0bre

[r0bre | Accretion.xyz @r0bre]

I want to post small daily solana tips for a while. Tiny ideas on how to write better and more secure Solana code. I will link the posts under this.
Let's start with an easy but long one..

[PaulB🦀 @BirnbaumPaulPro]

@ShieldifyAnon Nice I am currently gathering as much ressources I can find to level up my Rusty game.

Thanks for the sharing 🤩

[PaulB🦀 @BirnbaumPaulPro]

Ever try to look at yourself dead eyes to eyes in the mirror?

It really shifts the personality over time and gives you extra confidence.

[PaulB🦀 @BirnbaumPaulPro]

@Seecoalba @solana Wow, didn't expect that ecosystem to be that underdeveloped, there a lot of room for anyone to build tools on it.

Love it 🏗👷🛠️

[PaulB🦀 @BirnbaumPaulPro]

It's crazy how 10 minutes of sitting meditation, only bringing attention to your breath or heartbeat, can bring you hours of deep work afterward 🧘‍♂️

Not even mentioning the peace it mind it also bring.

[PaulB🦀 @BirnbaumPaulPro]

The Solana Blockchain is energy-efficient.

It does consume around 17Gwh per year, for around
100,000,000 Tx per day in average over the last month.

That's an equivalent of around 18.000 Americans Homes for a Year
Or
A Tesla Model 3 driving for 110,000,000 miles.