How to check who can change the code of a Solana program you use. Takes 30 seconds:
1. Find the program ID (docs, explorer, or the transaction your wallet asks you to sign)
2. Run: solana program show <PROGRAM_ID>
3. Look at the Authority line
- none: immutable. Nobody can change the code.
- a normal wallet: one key can replace the program with anything. That key is the whole security model.
- a Squads multisig vault: check the members, the threshold, and whether there's a timelock.
Also look at Last Deployed In Slot. Recent upgrades you didn't hear about? Ask why.
Drift in April was a reminder that admin keys get compromised. If one key can change the program holding your money, that's your risk too.
With all the security issues going on, if you're working on engineering the future of money (finance, payments, etc) using any other language than @rustlang, this is backward and irresponsible move imo.
Let's sunset Cobol/Solidity/etc and move to Rust. Rust is the right foundation for our future and good news that train already left the station:
- Every single LLMs is picking Rust as a default
- Every component of tech stacks is actively being rewritten in Rust: web programming, devtools, GPU programming, storage engines, etc.
One of many great starting point: https://t.co/BArmFhQqK5
If you’re a team building on Ethereum or whatever L it is (I honestly don’t know), but want to build on Solana and need help, come meet me at @EFDevcon I’ll be there!
Also, don’t forget to attend Solana Summit India and its side events
fellas, if your girl:
- is the best thing that will happen to you this year
- exceeds your expectations
- teaches you something new
that's not your girl. that's solana summit india