// the find
0xMacro/awesome-solana-security
A collection of resources to help you build better and more secure Solana programs. Kept up to date.
A link-list repo collecting Solana security resources — official docs, Rust/Anchor primers, vulnerability write-ups, codebases worth reading, and real audit contest reports. It's aimed at people learning to write or audit Solana programs, from total beginners through people already doing paid audits.
The audit contest section is the standout part — it links actual Sherlock/Code4rena/Cantina reports with exact High/Medium counts instead of vague 'check out these audits' phrasing, which is rare for this genre of list. It's maintained by 0xMacro, an actual Solana audit shop, so the picks read like a working auditor's bookmark list rather than a scraped aggregation. The 'Codebases to Study' section splits essential vs. optional and points at the actual programs people will encounter in real audits (SPL token, Token-2022, Anchor itself) rather than toy examples. Last push is December 2025, so it's not an abandoned list.
It's a single README of outbound links with zero original content — every bit of value lives on sites 0xMacro doesn't control, and link rot will quietly degrade this over time with no way to detect it from the repo itself. There's no tagging by vulnerability class (CPI, PDA, lamport, Token-2022) so you can't jump to 'everything about reentrancy-equivalent bugs' — you have to read the whole thing linearly. No contribution guidelines or PR template, so it's unclear how additions get vetted beyond the maintainer's judgment, and a few sections (General Resources) mix beginner blog posts with fairly advanced research with no difficulty marker. No stars/dates on individual links, so you can't tell which Substack post from 2022 is stale versus one from last month.