Solana Security Audits

Agave

v4.3

• OtterSec Audit (2026-09-16).pdf
• Neodyme Audit (2026-09-25).pdf

v4.2

• OtterSec Audit (2026-08-19).pdf
• Neodyme Audit (2026-08-31).pdf

Solana

v1.16

• Solana_Runtime_1c862f0b66_7cbe7d30f9_Halborn_Audit.pdf
• Solana_Runtime_7cbe7d30f9_13107b4eb6_Halborn_Audit.pdf
• Solana_Runtime_13107b4_77a56b0_Halborn_Audit.pdf
• Solana_Runtime_77a56b0_124aaa9_Halborn_Audit.pdf
• Solana_Runtime_124aaa95_v1.16.8_Halborn_Audit.pdf

v1.14

• Solana_Runtime_v1.11.3_Halborn_Audit.pdf
• Solana_Runtime_v1.14.1_Halborn_Audit.pdf
• Solana_Runtime_v1.14.6_Halborn_Audit.pdf
• Solana_Runtime_v1.14.10_Halborn_Audit.pdf
• Solana_Runtime_v1.14.13_Halborn_Audit.pdf
• Solana_Runtime_v1.14.17_Halborn_Audit.pdf
• Solana_Runtime_Commission_Update_Halborn_Audit.pdf

Durable Nonce

• Halborn Audit (2022-06-15).pdf
• OtterSec Audit (2022-06-20).pdf

Versioned Transactions & Address Lookup Table Program

• OtterSec Audit (2022-08-23).pdf
• Halborn Audit (2022-08-31).pdf

Elf parser

• OtterSec Audit (2022-07-22).pdf
• Halborn Audit (2022-08-04).pdf

Wincode

• Neodyme v0.1.2 Audit (2026-02-12).pdf
• OtterSec v0.1.2 Audit (2026-01-26).pdf
• Asymmetric Research v0.1.2 review (2026-01)

RTS Alloc

• OtterSec Audit (2026-05-05).pdf

Shaq

• OtterSec v2.0.0 Audit (2026-05-05).pdf

bls12-381-syscall

• NCC (2026-02-26).pdf
• Least Authority Audit (2026-05-22).pdf

solana-ed25519

• Least Authority Audit (2026-06-23).pdf

BPF Precompiles

P-256, secp256k1, and SBF Program

• Least Authority Audit (2026-09-04).pdf

Solana Program Library

Token

• Kudelski Audit (2020-09-21).pdf

Stake Pool

• Kudelski Audit (2021-07-07).pdf
• Neodyme Audit (2021-10-16).pdf
• Quantstamp Audit (2021-10-22).pdf
• Neodyme Audit (2022-12-10).pdf
• Neodyme Audit (2023-01-31).pdf
• OtterSec Audit (2023-01-20).pdf
• Halborn Audit (2023-01-25).pdf
• Neodyme Audit (2023-11-14).pdf
• Halborn Audit (2023-12-31).pdf
• Certora Formal Verification (2025-09-15).pdf
• Neodyme Audit (2026-10-02).pdf

Token Swap & Shared Memory

• Kudelski Audit (2021-02-25).pdf

Token-2022

• Halborn Audit (2022-07-27).pdf
• Zellic Audit (2022-12-05).pdf
• Trail of Bits Audit (2023-02-10).pdf
• NCC Group (2023-04-05).pdf
• OtterSec Audit (2023-11-03).pdf
• OtterSec ZK Token SDK Audit (2023-11-04).pdf
• Halborn Audit (2024-03-08).pdf
• Certora Audit (2024-05-24).pdf
• Least Authority Audit (2025-11-10).pdf
• ZKSecurity Audit (2025-09-16).pdf
• Trail of Bits Audit A (2026-01-30).pdf
• Trail of Bits Audit B (2026-01-30).pdf
• Code4rena Audit (2025-11-5).pdf
• Zellic Audit (2025-12-16).pdf
• Qedit Audit (2025-12-19).pdf
• Asymmetric Research Audit (2026-12-19).pdf
• Zellic Audit (2026-09-24).pdf

Account Compression

• OtterSec Audit (2022-12-03).pdf

Single Stake Pool

• Zellic Audit (2023-06-21).pdf
• Neodyme Audit (2023-08-08).pdf
• Zellic Audit (2024-01-02).pdf

Governance

• OtterSec Audit (2022-09-12).pdf

Token Wrap

• Zellic Audit (2025-05-16).pdf
• Runtime Verification Audit (2025-06-11).pdf
• Runtime Verification Audit (2025-10-30).pdf

P-Token

• Neodyme Audit (2025-06-12).pdf
• Zellic Audit (2025-06-30).pdf
• Zellic Audit (2025-10-13).pdf
• Runtime Verification (2026-01-26)
• Zellic Audit (2026-03-26).pdf
• Certora Formal Verification (2026-05-11).pdf

Program Metadata

• Zellic Audit (2026-06-17).pdf

Core BPF Programs

Address-Lookup-Table, Config, Feature-Gate

• Zellic Audit (2024-10-29).pdf

Stake

• Zellic Audit (2025-03-12).pdf
• Neodyme Audit (2026-04-10).pdf

SDKs

Pinocchio

• Neodyme Audit (2025-06-12).pdf
• Zellic Audit (2025-06-30).pdf

solana-bls-signatures crate

• Trail of Bits Audit (2026-02-26).pdf
• NCC Audit (2026-05-12).pdf
• Least Authority Audit (2026-05-22).pdf