Static Analyzer

Static analysis for Solana smart contracts. Detect vulnerabilities, security issues, and code quality problems.

Overview

Built in Rust, it leverages abstract syntax tree (AST) analysis and pattern matching to identify common security vulnerabilities and anti-patterns specific to Solana programs.

Integrates seamlessly into CI/CD pipelines, allowing teams to catch critical issues.

Detect vulnerabilities, security issues, and code quality problems in your Solana/Anchor projects.

Static Analyzer Architecture

How It Works

01

Parse

Analyzes Rust/Anchor code and generates AST

02

Detect

Runs 50+ specialized security detectors

03

Classify

Assigns severity levels to findings

04

Report

Generates detailed reports with remediation

Key Features

Antipattern Detection

50+ built-in detectors covering common vulnerabilities, security anti-patterns, and code quality issues.

Lightning Fast

Written in Rust for maximum performance. Analyze entire codebases in seconds with parallel processing.

Framework Support

Support for any Solana architecture, ensuring maximum flexibility without framework limitations.

Detailed Reports

Technical reports with exact locations, severity levels, and remediation suggestions.

Customizable Rules

Create custom detectors and configure severity levels for your specific needs.

CI/CD Integration

Easy integration with GitHub Actions, GitLab CI. Automated security checks on every commit.

Technical Specifications

Supported Languages

Rust Solana Programs Anchor Framework Native Solana

Detection Categories

Arithmetic Access Control Account Validation PDA Derivation Reentrancy Best Practices

Output Formats

JSON SARIF HTML Reports Terminal CSV

Start Securing Your Solana Programs

Open source and ready to use

View on GitHub Contact Us