Directory by blockchain

Solana smart contract audit and development

Building and auditing Solana programs: the account model, Rust and Anchor, account validation and signer checks, key risk areas and preparation.

Solana is a high-throughput blockchain designed for low latency and parallel transaction execution. Its smart contracts, called programs, follow a model very different from the EVM, so Ethereum experience does not transfer directly. For a project, choosing Solana means working with Rust specialists and budgeting for a review focused on how accounts are passed and validated.

Building on Solana

Programs are stateless: data lives in separate accounts that each transaction must list explicitly, and the program is responsible for checking that every account it receives is the one it expects. Programs can call each other through cross-program invocations and control accounts derived from their own address (program derived addresses). Programs are upgradeable by default through an upgrade authority, which can be kept, transferred or removed.

Language: Rust, compiled for the Solana runtime
Framework: Anchor, which generates much of the account validation code
Tokens: the SPL token programs, including the newer token program with extensions
Not EVM-compatible

What auditors look at

Account validation: owner checks, signer checks, type confusion between accounts, and substitution of a legitimate account by an attacker's account
Program derived addresses: seed design, bump handling and collisions between different account types
Cross-program invocations: calling the expected program ID and the privileges passed along
Arithmetic and precision in token amounts, and rounding in favor of the protocol
Upgrade authority, account closing and reinitialization, and compute limits on large operations

Before requesting quotes

Specify whether the program uses Anchor or native Rust, and the Anchor version
Provide a description of every instruction with the accounts it expects and their constraints
Share tests that exercise failure cases, not only successful flows
State who holds the upgrade authority and whether the program will be made immutable

Solana smart contract auditors

4soft
Public informationPoland
Wrocław software house for blockchain development, on-chain analytics and crypto compliance
- Development
- Audit
Ethereum · Arbitrum · Base · Polygon · BNB Chain · +4 more
Accretion
Public informationSingapore
Singapore-based security firm auditing Solana programs built with Anchor, Pinocchio or native Rust
- Audit
Solana
Ackee Blockchain Security
Public informationCzechia
Prague firm auditing Solana and EVM smart contracts, maker of the Wake and Trident fuzzers
- Audit
Ethereum · Solana
Adevar Labs
Public informationUnited States
Blockchain security firm offering audits, fuzzing, formal verification and penetration testing
- Audit
- Penetration testing
Solana · Ethereum · Sui · Aptos · BNB Chain
Blaize
Public informationUkraine
Ukrainian blockchain development company with a dedicated security audit practice
- Development
- Audit
Ethereum · Polygon · Arbitrum · Solana · Sui · +4 more
Certora
Public information
Smart contract audits combining manual review with formal verification by Certora Prover
- Audit
Ethereum · Solana · Sui
ChainSecurity
Public informationSwitzerland
Zurich smart contract audit firm reviewing DeFi, stablecoin, bridge and L1/L2 code
- Audit
Ethereum · Solana · Starknet · Sui · Aptos
CoinFabrik
Public informationArgentina
Argentine blockchain security and development company auditing Solidity, Rust, Clarity and Soroban
- Development
- Audit
Ethereum · Solana · Polkadot
CredShields
Public informationSingapore
Security firm offering manual smart contract audits, pentesting and the SolidityScan scanner
- Audit
- Penetration testing
Ethereum · Solana
Cyfrin
Public information
Smart contract audits, penetration testing and security education, maker of Aderyn and Solodit
- Audit
- Penetration testing
Ethereum · ZKsync · Arbitrum · Avalanche · BNB Chain · +8 more
Ethereal Labs
Public informationUnited Kingdom
London onchain development studio building smart contracts, dApps, token and NFT launches
- Development
- Audit
Ethereum · Base · Solana · Polygon · Avalanche
FuzzingLabs
Public informationFrance
French offensive security company auditing blockchains and smart contracts with fuzzing
- Audit
Solana · Ethereum · NEAR · Starknet · Sui · +3 more
Guardian
Public information
Smart contract audits with invariant fuzzing, plus off-chain pentests and SDK audits
- Audit
- Penetration testing
Ethereum · Solana
Hacken
Public informationEstonia
Estonian blockchain security and compliance firm: audits, pentests and MiCA, DORA readiness
- Audit
- Penetration testing
Ethereum · Solana · Sui
Halborn
Public information
Blockchain security firm: smart contract assessments, L1 reviews, penetration testing, advisory
- Audit
- Penetration testing
Ethereum · Solana · Cosmos
Kudelski Security
Public informationSwitzerland
Swiss cybersecurity company with a blockchain security assessment practice and public report archive
- Audit
- Penetration testing
Solana
Least Authority
Public informationGermany
Berlin security consultancy auditing smart contracts, cryptographic protocols and ZK systems
- Audit
Ethereum · Polygon · Cosmos · Solana · Avalanche
Macro
Public information
Boutique firm auditing smart contracts and Solana programs, with protocol development
- Audit
- Development
Ethereum · Solana · Optimism · Arbitrum · Base
Metlabs
Public informationSpain
Spanish blockchain-only development company focused on RWA tokenization and smart contracts
- Development
- Audit
Ethereum · Polygon · BNB Chain · Arbitrum · Solana
MixBytes
Public informationCayman Islands
DeFi-focused audit firm: design reviews, smart contract audits and ongoing security support
- Audit
Ethereum · Solana
Neodyme
Public informationGermany
German security firm auditing Solana programs and core blockchains, with pentests and trainings
- Audit
- Penetration testing
Solana · Ethereum
Nethermind
Public informationUnited Kingdom
London blockchain engineering and research firm; its Nethermind Security arm audits smart contracts
- Development
- Audit
Ethereum · Starknet · ZKsync · Solana
Oak Security
Public informationGermany
Munich-based Web3 security firm auditing EVM, Solana, Cosmos, Substrate and Starknet code
- Audit
- Penetration testing
Ethereum · Solana · Cosmos · Polkadot · Starknet · +2 more
OtterSec
Public information
Blockchain security firm auditing layer 1s, wallets, DeFi and bridges, with pentesting and fuzzing
- Audit
- Penetration testing
Solana · Ethereum · Sui · Aptos · Cosmos · +1 more
Pashov Audit Group
Public information
Remote team of security researchers auditing EVM, Solana and Move smart contracts
- Audit
Ethereum · Solana · Arbitrum · Optimism · Base · +3 more
Protofire
Public information
Blockchain engineering firm building and auditing smart contracts on EVM chains, Solana and Cardano
- Development
- Audit
Ethereum · Solana · Cardano
Quantstamp
Public information
Web3 security firm offering smart contract audits, economic analysis and infrastructure tests
- Audit
- Penetration testing
Ethereum · Solana · Polygon · TON · Avalanche · +3 more
QuillAudits
Public information
Smart contract audit firm also offering dApp penetration testing, wallet audits and monitoring
- Audit
- Penetration testing
Ethereum · NEAR · BNB Chain · Polygon · Optimism · +8 more
Rather Labs
Public informationUnited States
Web3 and AI engineering firm with a Buenos Aires team, building and auditing smart contracts
- Development
- Audit
Ethereum · Arbitrum · Base · Optimism · Polygon · +5 more
Runtime Verification
Public information
Formal methods firm offering security audits, fuzzing and formal verification
- Audit
Ethereum · Solana
ScaleBit
Public information
Web3 security team auditing smart contracts, dApps and blockchains, with a Bitcoin layer 2 focus
- Audit
Ethereum · Arbitrum · BNB Chain · Solana · Polygon · +3 more
Sec3
Public information
Solana security firm offering audits, formal verification and post-deployment monitoring
- Audit
Solana · TON
Security Research Labs
Public informationGermany
Berlin security research firm reviewing smart contracts, chain runtimes and bridges
- Audit
- Penetration testing
Ethereum · Cosmos · Solana · Polkadot
Shieldify
Public informationBulgaria
Bulgarian Web3 security company offering smart contract audits by review or by subscription
- Audit
- Penetration testing
- Development
Ethereum · Solana · ZKsync · Avalanche · BNB Chain · +1 more
softstack
Public informationGermany
Flensburg Web3 company offering smart contract audits, pentests, development and compliance
- Development
- Audit
- Penetration testing
Ethereum · Arbitrum · Optimism · Base · Polygon · +8 more
Three Sigma
Public information
Code security audits and economic audits for Web3 protocols, in Solidity, Rust and Move
- Audit
Ethereum · Arbitrum · Polygon · Base · Optimism · +4 more
Trail of Bits
Public informationUnited States
Security firm reviewing smart contracts, nodes and bridges, maker of Slither and Echidna
- Audit
- Penetration testing
Ethereum · Arbitrum · Optimism · Solana · Sui · +4 more
Verichains
Public informationVietnam
Security firm auditing smart contracts, protocols and cryptography, with penetration testing
- Audit
- Penetration testing
Ethereum · BNB Chain · Solana · Avalanche · Polygon · +1 more
Zealynx
Public informationPoland
Polish security firm offering smart contract audits, dApp pentesting and AI security reviews
- Audit
- Penetration testing
- Development
Ethereum · Arbitrum · Polygon · BNB Chain · Base · +4 more
Zellic
Public information
Security assessments of smart contracts, ZK circuits, L1s and web applications
- Audit
- Penetration testing
Ethereum · Solana · Aptos · Sui · Cosmos
Zokyo
Public informationUnited Arab Emirates
Smart contract and protocol audits, pentesting, compliance and product development, Dubai
- Audit
- Penetration testing
- Development
Ethereum · Solana · Polygon · Arbitrum · Optimism · +9 more

Solana smart contract developers

4soft
Public informationPoland
Wrocław software house for blockchain development, on-chain analytics and crypto compliance
- Development
- Audit
Ethereum · Arbitrum · Base · Polygon · BNB Chain · +4 more
Blaize
Public informationUkraine
Ukrainian blockchain development company with a dedicated security audit practice
- Development
- Audit
Ethereum · Polygon · Arbitrum · Solana · Sui · +4 more
BlockyDevs
Public informationPoland
Warsaw software studio building Web3 products, with smart contracts in Solidity and ink!
- Development
Polkadot · Solana
CoinFabrik
Public informationArgentina
Argentine blockchain security and development company auditing Solidity, Rust, Clarity and Soroban
- Development
- Audit
Ethereum · Solana · Polkadot
Ethereal Labs
Public informationUnited Kingdom
London onchain development studio building smart contracts, dApps, token and NFT launches
- Development
- Audit
Ethereum · Base · Solana · Polygon · Avalanche
Labrys
Public informationAustralia
Brisbane product studio building smart contracts, DeFi protocols and full Web3 products
- Development
Ethereum · Base · Arbitrum · Optimism · Polygon · +1 more
LimeChain
Public informationBulgaria
Bulgarian blockchain engineering firm building smart contracts, protocols and onchain products
- Development
Ethereum · Polygon · Base · Solana · NEAR · +1 more
Linum Labs
Public informationSwitzerland
Swiss blockchain software studio building Web3 and fintech products on EVM, HyperEVM and Solana
- Development
Ethereum · Solana
Macro
Public information
Boutique firm auditing smart contracts and Solana programs, with protocol development
- Audit
- Development
Ethereum · Solana · Optimism · Arbitrum · Base
Metlabs
Public informationSpain
Spanish blockchain-only development company focused on RWA tokenization and smart contracts
- Development
- Audit
Ethereum · Polygon · BNB Chain · Arbitrum · Solana
Moonsong Labs
Public informationUnited States
Blockchain engineering firm for institutional protocols, tokenization and payment infrastructure
- Development
Ethereum · ZKsync · Solana · Polkadot
Nethermind
Public informationUnited Kingdom
London blockchain engineering and research firm; its Nethermind Security arm audits smart contracts
- Development
- Audit
Ethereum · Starknet · ZKsync · Solana
Protofire
Public information
Blockchain engineering firm building and auditing smart contracts on EVM chains, Solana and Cardano
- Development
- Audit
Ethereum · Solana · Cardano
Rather Labs
Public informationUnited States
Web3 and AI engineering firm with a Buenos Aires team, building and auditing smart contracts
- Development
- Audit
Ethereum · Arbitrum · Base · Optimism · Polygon · +5 more
RedDuck
Public informationUkraine
Web3 engineering partner writing audit-ready smart contracts on EVM chains, Solana and Bitcoin
- Development
Ethereum · Polygon · BNB Chain · Arbitrum · Base · +6 more
Rumble Fish
Public informationPoland
Kraków software house with a blockchain practice: smart contracts, DeFi, dApps, bridges
- Development
Ethereum · Solana · Polygon · BNB Chain · Avalanche
Shieldify
Public informationBulgaria
Bulgarian Web3 security company offering smart contract audits by review or by subscription
- Audit
- Penetration testing
- Development
Ethereum · Solana · ZKsync · Avalanche · BNB Chain · +1 more
softstack
Public informationGermany
Flensburg Web3 company offering smart contract audits, pentests, development and compliance
- Development
- Audit
- Penetration testing
Ethereum · Arbitrum · Optimism · Base · Polygon · +8 more
Zealynx
Public informationPoland
Polish security firm offering smart contract audits, dApp pentesting and AI security reviews
- Audit
- Penetration testing
- Development
Ethereum · Arbitrum · Polygon · BNB Chain · Base · +4 more
Zokyo
Public informationUnited Arab Emirates
Smart contract and protocol audits, pentesting, compliance and product development, Dubai
- Audit
- Penetration testing
- Development
Ethereum · Solana · Polygon · Arbitrum · Optimism · +9 more
Zpoken
Public informationEstonia
Senior crypto engineering team for L1 consensus, zero-knowledge, DeFi mechanisms and stablecoins
- Development
Ethereum · Solana · NEAR · Arbitrum · Base · +1 more

All Solana vendors in the directory Apply or claim a listing

Describe your project once. Compare with confidence.

Get comparable quotes from vetted developers, then secure your code with an independent auditor.

Get quotes

Free for clients. No commitment.