Solana explorer became much more comfortable to use!
- Many pages now also work on mobile!
- Logs directly next to their instructions
- Get account info directly from the accounts list!
- Share a transaction with a selected instruction
- Native program IDLs using the new IDL package
- Security.txt support via Program metadata program
- Metadata proxy to protect from ip leakage
Next up
- Even better mobile support
- Performance improvements
- IDL parsed instruction name previews
- <Recommend your favourite feature here>
Ever feel like you scrolling CT, someone talks about how this new syscall will make everything faster on Solana, you like the post, knowing damn well that you have no clue what they're talking about?
If so, read on if you want to join the cool crew ๐งต
Solana explorer became much more comfortable to use!
- Many pages now also work on mobile!
- Logs directly next to their instructions
- Get account info directly from the accounts list!
- Share a transaction with a selected instruction
- Native program IDLs using the new IDL package
- Security.txt support via Program metadata program
- Metadata proxy to protect from ip leakage
Next up
- Even better mobile support
- Performance improvements
- IDL parsed instruction name previews
- <Recommend your favourite feature here>
Find the IDL package and security.txt package here:
https://t.co/nz2ox0ahXm
The IDL explorer here:
https://t.co/Hz8o4XsW2M
And the Solana explorer example from the video here:
https://t.co/l2nsnCpPRY
Security is just creating paranoia trees, like a little kid repeatedly asking "but what if"
You need a dedicated signing laptop. Great.
But what if your employee/signer sets it up incorrectly or installs the wrong things?
You need mobile device management (mdm).
What if the mdm admin gets compromised?
You need monitoring/alerting on any mdm change.
What if the compromised admin disables that?
It should run on a different system with different auth and a dead man's switch.
What UI does your signer use to sign? app.squads?
Okay what if app.squads is compromised?
You need to have a diversity of signing clients (local squads ui, cli, app.squads).
What RPC do your signers use to sign? What if that's compromised.
You need to have a diversity of RPCs.
How do you review the transaction? Solana explorer? What if that's compromised.
You need a diversity of explorers + diversity of rpcs on them
Ultimately, paranoia is unlimited and you can get pretty deep. I do think that the fact this is necessary is a huge flaw in crypto, and I'm really hoping someone picks up my clear message signing multisig prototype.
On one hand, you should expect teams controlling smart contracts with high tvl have a high level of paranoia. On the other hand, it would be nice if the only thing you had to trust was your hardware wallet + a smart contract. Complex systems suck, we should be trying to simplify not virtue signal complexity.
I'm getting really excited when they change stuff at the core programs
There is a new instruction to the System Program: createAccountAllowPrefund
Let's look at
- why we need that
- how it works exactly
- how you need to be careful with it
haven't had so much fun in a while ๐
building in the @SuperteamUK world cup hackathon? we just shipped a new bracket challenge solana program example to get you ready for the group stage:
- pick all 32 knockout games,
- pay a fixed entry, and
- the one unique winner sweeps the pot.
fully on-chain, open source, fork it today.