Open Source X-Ray: Solana Smart Contract Static Analysis
summary
Xray is an open-source static analyzer for Solana smart contracts written in Rust, built on the LLVM IR toolchain and implemented as a parser, analyzer with custom LLVM passes, and CLI. Installation options include a Docker image or prebuilt binaries; a demo scan surfaces 12 untrusted account issues plus other common bugs. The project ships a dozen-plus built-in rules (account validation, underflow/overflow), allows user-defined rules, and reports show it has been used in community scans for over two years.
AI-written summary · about
chapters (8)
- 0:00Team and X-Ray intro
- 0:48What is X-Ray
- 2:13Installing and using X-Ray
- 5:07Why build X-Ray
- 6:15Analyzing Solana contracts
- 7:43Custom rules for X-Ray
- 8:46Static analysis example
- 9:53Open source rules
related talks
30mSmart-Contract Security 201: Auditing Lessons for Solana Founders
26msub0 Asia 2024 - Ariel Waissbein (CoinFabrik)
44mSecurity Research with Open Source Software: Vol. Omega
44mUsing Static Analysis Tools to Become A Superhero Programmer
18mSecuring Erlang and Elixir applications
01h 03mSOAP - Keynote: Beyond Code: New Signals for Static Analysis- 44mSecurity Research with Open Source Software: Vol. Omega
30mORT Server: An open source platform to automate CRA checks