Solana Security

Solana account data can be read by any on-chain program. This is unlike an EVM smart contract's data which is encapsulated, and thus only accessible on-chain if the sc chooses to expose it

In a Solana transaction, a program cannot arbitrarily read data from just any address.

You MUST specify which accounts you wish to read from, upfront, BEFORE the program even begins to run 😦

In a Solana transaction, a program cannot arbitrarily read data from just any address.

You MUST specify which accounts you wish to read from, upfront, BEFORE the program even begins to run 😦

https://warpcast.com/0xgib/0xa0a411ba

Cofounder of 0xMacro.com • Author of LearnEVM.com • Love to help with no strings attached

This is almost certainly designed this way for performance. Validators can look at a transaction and see – without running any onchain code – what disk storage they would need to read/write to include that tx.

This is a common complaint that it makes it hard to compose many solana contracts dynamically.