Solana Security

Solana account data can be read by any on-chain program. This is unlike an EVM smart contract's data which is encapsulated, and thus only accessible on-chain if the sc chooses to expose it

Onboarding the next 1M devs to web3 • Author of LearnEVM.com • Cofounder of 0xMacro.com

Not necessarily. As long as you know the address of an account (PDA or not), you can directly read data from that account.

With that said, I can imagine it being useful for a program to implement deriving logic for another protocol for better integration.

Do solana programs need to re-derive the data account addresses to do this?