BytesUnchecked

Welcome to BytesUnchecked, a reference repository for Solana developers to explore critical security patterns and their implementations in Anchor.

Overview

This project provides a side-by-side comparison of Insecure vs. Secure implementations for 7 common Solana vulnerability patterns.

1. Vulnerability Examples

Each example includes:

• The Exploit: A TypeScript test demonstrating how the vulnerability can be abused.
• The Fix: A secure implementation using Anchor framework best practices.
• The Analysis: A breakdown of the security flaw and the mitigation strategy.

---

The Vulnerability Matrix

ID	Vulnerability	Category	Focus
01	Missing Signer	Signature Verification	Identity Validation
02	Arithmetic Overflow	Logic	Checked Math
03	PDA Seed Leak	Privacy	PDA Security
04	Account Closing	Memory	Data Zeroing
05	Type Confusion	Account Validation	Discriminators
06	Zero-Copy Alignment	Memory	Memory Layout
07	Hook Reentrancy	CPI Logic	CEI Pattern