hard20 pts · first answer countssmart-contract-securitysolana

Missing account checks on Solana

A Solana program reads a "config" account passed in by the user to get the admin key, and lets that admin withdraw. What critical check is often missing?

A.That the config account is owned by the program (and is the expected PDA), and that the admin account actually signed the transactionB.That the config account has more than 1 SOLC.That the transaction uses the latest blockhashD.That the program is upgradeable

← Commit-reveal that can be copied Why ZK rollups still post data →