Content
@
0 reply
0 recast
0 reaction
gilbert
@0xgib
When transferring all SOL out of an account on Solana (aka "closing" the account), the account doesn't actually get removed until the end of the transaction. Done naively, this allows attackers to reuse or reinitialize the account, potentially draining funds from the protocol 🫢
1 reply
3 recasts
12 reactions
gilbert
@0xgib
Anchor protects against this with their `#[account(close = <address_to_send_lamports>)]` feature
0 reply
0 recast
4 reactions
