1st Place Winner — Superteam Security Bounty ($1,500 USDG)
Won 1st place out of 116 submissions in the "Audit & Fix Open-Source Solana Repositories for Vulnerabilities" bounty on Superteam Earn (March 2026). Systematic audit of 14 open-source Solana repositories, identifying 13 real vulnerabilities across 7 repos. Submitted finding: Anchor Framework CPI Return Data Spoofing (CVSSv3 7.5).
| # | Repository | Stars | Focus Area |
|---|---|---|---|
| 1 | marginfi-v2 | 284 | Lending — oracle validation, Token-2022 |
| 2 | anchor | 4,949 | Framework-level, CPI validation |
| 3 | mpl-token-metadata | 243 | NFT state machine |
| 4 | jito-solana | 681 | Validator fork, targeted MEV scan |
| # | Repository | Stars | Focus Area |
|---|---|---|---|
| 5 | wormhole | 1,875 | Cross-chain bridge — Solana contracts |
| 6 | agave | 1,669 | Solana validator client |
| 7 | pinocchio | 849 | Zero-copy Solana program framework |
| 8 | whirlpools | 509 | Concentrated liquidity AMM |
| 9 | protocol-v2 | 376 | Perpetuals DEX |
| 10 | raydium-clmm | 368 | Concentrated liquidity AMM |
| # | Repository | Stars | Focus Area |
|---|---|---|---|
| 11 | phoenix-v1 | 246 | On-chain order book |
| 12 | pyth-crosschain | 226 | Oracle — crosschain programs |
| 13 | squads-v4 | 171 | Multisig protocol |
| 14 | klend | 158 | Lending protocol |
Eliminated: solana-program-library (archived), openbook-v2 (stale ~2 years)
7-iteration vulnerability scan across all repos:
- Account Validation & Ownership — UncheckedAccount, missing owner checks
- Signer & Authority — Missing is_signer, unprotected admin functions
- PDA Derivation & Seeds — Non-canonical bumps, seed mismatches
- Arithmetic & Math Safety — Unchecked ops, precision loss, rounding errors
- Logic Flows & State Machine — Reentrancy, check-effect-interaction violations
- CPI & Cross-Program — Arbitrary CPI, unvalidated program IDs
- Edge Cases & Integration — Oracle staleness, dust, account revival
TOTAL = SEVERITY(1-5) x POPULARITY(1-5) x EXPLOITABILITY(1-5) x PROOF_QUALITY(1-3) x FIX_SIMPLICITY(1-3)
Max score: 1,125. See SCOREBOARD.md for ranked findings.
solana-security-audit/
repos/ # Cloned forks (14 repos)
writeup/ # Vulnerability write-ups
SCOREBOARD.md # Ranked findings
STRATEGY.md # Audit strategy & priority
bounty-analysis.md # Bounty requirements & notes
MIT