Solana Security

Solana account data can be read by any on-chain program. This is unlike an EVM smart contract's data which is encapsulated, and thus only accessible on-chain if the sc chooses to expose it

Solana programs ("executable accounts") don't contain their own data. Instead, they spawn and exclusively own "non-executable accounts" whose only purpose is to hold data.

They write data to user accounts too (also considered non-executable), but supposedly this is less flexible.

Solana programs ("executable accounts") don't contain their own data. Instead, they spawn and exclusively own "non-executable accounts" whose only purpose is to hold data.

They write data to user accounts too (also considered non-executable), but supposedly this is less flexible.

https://warpcast.com/0xgib/0xa0a411ba