Solana Security

Security question: If deploying a contract can take 100-1000x transactions, then how does upgrading a contract work for that same number of transactions?

Will the contract still function? As its old version? Or do you upload to a buffer and switch to it in 1 tx instead?

Cofounder of 0xMacro.com • Author of LearnEVM.com • Love to help with no strings attached

I believe it's the latter, you upload it into storage buffers then swap the pointer in the final transaction.

A doodler and computerer. I like permissive/permissionless open source, smart contracts, p2p systems, room-scale VR, and NixOS.

shazow.net

Currently: WhatsABI

That would be the sensible option, right? Still trying to find docs on it

Might have to dig into the source code

https://docs.solanalabs.com/cli/examples/deploy-a-program#using-an-intermediary-buffer-account

Also the final section in these docs about how to do this offline.

Also discussed here: https://solana.com/docs/programs/deploying#how-solana-program-deploy-works