SseRex: Practical Symbolic Execution of Solana Smart Contracts

• URL: http://arxiv.org/abs/2603.16349v1
• Date: Tue, 17 Mar 2026 10:33:11 GMT
• Title: SseRex: Practical Symbolic Execution of Solana Smart Contracts
• Abstract summary: We propose SseRex, the first symbolic execution vulnerability detection approach for finding Solana-specific bugs.<n>Our evaluation of 8,714 bytecode-only contracts shows that our approach outperforms existing approaches.
• Score: 8.403608370743356
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: Solana is rapidly gaining traction among smart contract developers and users. However, its growing adoption has been accompanied by a series of major security incidents, which have spurred research into automated analysis techniques for Solana smart contracts. Unfortunately, existing approaches do not address the unique and complex account model of Solana. In this paper, we propose SseRex, the first symbolic execution vulnerability detection approach for finding Solana-specific bugs such as missing owner checks, missing signer checks, and missing key checks, as well as arbitrary cross-program invocations. Our evaluation of 8,714 bytecode-only contracts shows that our approach outperforms existing approaches and identifies potential bugs in 467 different contracts. Additionally, we analyzed 120 open-source Solana projects and conducted in-depth case studies on four of them. Our findings reveal that subtle, easily overlooked issues often serve as the root cause of severe exploits, further highlighting the need for specialized analysis tools like SseRex.

Related papers

• TIDE: Proactive Multi-Problem Discovery via Template-Guided Iteration [74.97459526627395]
  We introduce TIDE, a template-guided iterative framework with two complementary mechanisms.<n>We propose iterative discovery, which surfaces a small batch of candidates per round while conditioning on what has already been found.<n>We show substantial gains over single-shot and parallel multi-agent baselines on task coverage, identification, and resolution.
  arXiv  Detail & Related papers  (2026-06-03T11:23:08Z)
• SolRugDetector: Investigating Rug Pulls on Solana [44.07322754034999]
  We present a comprehensive empirical study of Rug Pulls on Solana.<n>We propose SolRugDetector, a detection system that identifies fraudulent tokens solely using on-chain transaction and state data.<n>Our analysis reveals that Rug Pulls on Solana exhibit extremely short lifecycles, strong price-driven dynamics, severe economic losses, and highly organized group behaviors.
  arXiv  Detail & Related papers  (2026-03-25T02:31:31Z)
• When Is Enough Not Enough? Illusory Completion in Search Agents [56.98225130959051]
  We study whether search agents reliably reason across all requirements by tracking, verifying, and maintaining multiple conditions.<n>We find that illusory completion frequently occurs, wherein agents believe tasks are complete despite unresolved or violated constraints, leading to underverified answers.<n>We examine whether explicit constraint-state tracking during execution mitigates these failures via LiveLedger, an inference-time tracker.
  arXiv  Detail & Related papers  (2026-02-07T13:50:38Z)
• One Signature, Multiple Payments: Demystifying and Detecting Signature Replay Vulnerabilities in Smart Contracts [56.94148977064169]
  lacking checks on signature usage conditions can lead to repeated verifications, increasing the risk of permission abuse and threatening contract assets.<n>We define this issue as the Signature Replay Vulnerability (SRV)<n>From 1,419 audit reports across 37 blockchain security companies, we identified 108 with detailed SRV descriptions and classified five types of SRVs.
  arXiv  Detail & Related papers  (2025-11-12T09:17:13Z)
• Trace: Securing Smart Contract Repository Against Access Control Vulnerability [58.02691083789239]
  GitHub hosts numerous smart contract repositories containing source code, documentation, and configuration files.<n>Third-party developers often reference, reuse, or fork code from these repositories during custom development.<n>Existing tools for detecting smart contract vulnerabilities are limited in their ability to handle complex repositories.
  arXiv  Detail & Related papers  (2025-10-22T05:18:28Z)
• UltraHorizon: Benchmarking Agent Capabilities in Ultra Long-Horizon Scenarios [63.67884284105684]
  We introduce textbfUltraHorizon, a novel benchmark that measures the foundational capabilities essential for complex real-world challenges.<n>Agents are designed in long-horizon discovery tasks where they must iteratively uncover hidden rules.<n>Our experiments reveal that LLM-agents consistently underperform in these settings, whereas human participants achieve higher scores.
  arXiv  Detail & Related papers  (2025-09-26T02:04:00Z)
• Eigen-1: Adaptive Multi-Agent Refinement with Monitor-Based RAG for Scientific Reasoning [53.45095336430027]
  We develop a unified framework that combines implicit retrieval and structured collaboration.<n>On Humanity's Last Exam (HLE) Bio/Chem Gold, our framework achieves 48.3% accuracy.<n>Results on SuperGPQA and TRQA confirm robustness across domains.
  arXiv  Detail & Related papers  (2025-09-25T14:05:55Z)
• Exploring Vulnerabilities and Concerns in Solana Smart Contracts [0.8225825738565354]
  This paper studies the current status of security analysis of Solana by researching Solana smart contract security analysis tools.<n>The data of Solana smart contract security analysis tools are collected and compared with, and the differences are analyzed and some tools are selected for practical testing.
  arXiv  Detail & Related papers  (2025-04-10T03:25:20Z)
• Identifying Smart Contract Security Issues in Code Snippets from Stack Overflow [34.79673982473015]
  We introduce SOChecker, a tool to identify potential vulnerabilities in incomplete SO smart contract code snippets. Results show that SOChecker achieves an F1 score of 68.2%, greatly surpassing GPT-3.5 and GPT-4. Our findings underscore the need to improve the security of code snippets from Q&A websites.
  arXiv  Detail & Related papers  (2024-07-18T08:25:16Z)
• Defying the Odds: Solana's Unexpected Resilience in Spite of the Security Challenges Faced by Developers [7.29491274634436]
  We conducted the first comprehensive study on the Solana platform consisting of a 90-minute smart contract code review task. Our study shows, quite alarmingly, that none of the participants could detect all important security vulnerabilities in a code review task. In spite of these challenges, our automated analysis on currently deployed Solana smart contracts surprisingly suggests that the prevalence of vulnerabilities is below 0.3%.
  arXiv  Detail & Related papers  (2024-06-19T14:42:33Z)
• Vulnerability Scanners for Ethereum Smart Contracts: A Large-Scale Study [44.25093111430751]
  In 2023 alone, such vulnerabilities led to substantial financial losses exceeding a billion of US dollars. Various tools have been developed to detect and mitigate vulnerabilities in smart contracts. This study investigates the gap between the effectiveness of existing security scanners and the vulnerabilities that still persist in practice.
  arXiv  Detail & Related papers  (2023-12-27T11:26:26Z)
• Poisoning Retrieval Corpora by Injecting Adversarial Passages [79.14287273842878]
  We propose a novel attack for dense retrieval systems in which a malicious user generates a small number of adversarial passages. When these adversarial passages are inserted into a large retrieval corpus, we show that this attack is highly effective in fooling these systems. We also benchmark and compare a range of state-of-the-art dense retrievers, both unsupervised and supervised.
  arXiv  Detail & Related papers  (2023-10-29T21:13:31Z)
• Fuzz on the Beach: Fuzzing Solana Smart Contracts [3.6618081664084583]
  We propose FuzzDelSol, the first binary-only coverage-guided fuzzing architecture for Solana smart contracts.<n>FuzzDelSol faithfully models runtime specifics such as smart contract interactions.<n>Our evaluation on 6049 smart contracts shows that FuzzDelSol's bug oracles find bugs with a high precision and recall.
  arXiv  Detail & Related papers  (2023-09-06T13:54:07Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.