Solana Security

Solana account data can be read by any on-chain program. This is unlike an EVM smart contract's data which is encapsulated, and thus only accessible on-chain if the sc chooses to expose it

In a Solana transaction, a program cannot arbitrarily read data from just any address.

You MUST specify which accounts you wish to read from, upfront, BEFORE the program even begins to run 😦

In a Solana transaction, a program cannot arbitrarily read data from just any address.

You MUST specify which accounts you wish to read from, upfront, BEFORE the program even begins to run 😦

https://warpcast.com/0xgib/0xa0a411ba

Onboarding the next 1M devs to web3 • Author of LearnEVM.com • Cofounder of 0xMacro.com

This is almost certainly designed this way for performance. Validators can look at a transaction and see – without running any onchain code – what disk storage they would need to read/write to include that tx.

Ayeee, we also have this 😤
EVM access lists 
They are same no ?

https://www.rareskills.io/post/eip-2930-optional-access-list-ethereum

ft @rareskills

The web3 engineering graduate school. rareskills.io

Independent Security Researcher
curiousapple.xyz

Is that live? I can never tell how to confirm if an EIP has been merged into Ethereum or not

Yep, been there for some amount of time now