Audit fixes: critical security bugs, truthful docs, and skill-standards sweep by mikemaccana · Pull Request #67 · quicknode/solana-program-examples

docs and style sweep: truthful testing docs, remove dead scaffold, em-dash and onchain spelling fixes

claude

committed

order-book: ceil taker fee in the protocol's favour, move withdraw_fees under instructions/admin

claude

committed

token-fundraiser: fix inverted lifecycle windows, drainable refund, and unit-scaling bugs in both variants

claude

committed

vault-strategy: bind strategy mints and router, cap fee_bps, revive orphaned test suite

claude

committed

external-delegate-token-master: close signature replay hole, add missing authority check

claude

committed

counter, program-derived-addresses: named overflow errors, AccountConstraints names, discriminator-based space

claude

committed

token-swap/quasar: fix ratio clamp scaling deposits up, add slippage floors, named errors

claude

committed

vault-strategy: replace em-dashes in prose with regular dashes

claude

committed

escrow: stop the taker pocketing the maker's rent, add native cancel_offer, bind quasar accounts

claude

committed

escrow/native: untrack built program fixture; CI rebuilds it via cargo build-sbf

claude

committed

cnft-vault: enforce a withdraw authority, bounds-check proof lengths, real quasar tests

claude

committed

cutils, cnft-burn: remove banned handler-as-method pattern, dead state, runtime hashing

claude

committed

cutils: drop README references to the removed validate/actuate pattern

claude

committed

gitignore: keep escrow native's rebuilt fixture .so untracked

claude

committed

Cargo.lock: prune stale counter-mpl-stack and shank entries left from removed packages

claude

committed

wip: checkpoint of in-progress fix sweeps (signer checks, decimal scaling, ID alignment)

claude

committed

betting-market: close Bet accounts and free User index slots; wallets no longer brick at 32 lifetime bets

claude

committed

wip: checkpoint of in-progress rename and signer-check sweeps

claude

committed

shank-and-codama, close-account, transfer-sol, pyth: signer/owner checks, full-lamport closes, oracle validation

claude

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Audit fixes: critical security bugs, truthful docs, and skill-standards sweep#67

Audit fixes: critical security bugs, truthful docs, and skill-standards sweep#67
mikemaccana wants to merge 28 commits into
mainfrom
claude/awesome-newton-7dektm

Commits on Jun 10, 2026

docs and style sweep: truthful testing docs, remove dead scaffold, em-dash and onchain spelling fixes

order-book: ceil taker fee in the protocol's favour, move withdraw_fees under instructions/admin

token-fundraiser: fix inverted lifecycle windows, drainable refund, and unit-scaling bugs in both variants

vault-strategy: bind strategy mints and router, cap fee_bps, revive orphaned test suite

external-delegate-token-master: close signature replay hole, add missing authority check

counter, program-derived-addresses: named overflow errors, AccountConstraints names, discriminator-based space

token-swap/quasar: fix ratio clamp scaling deposits up, add slippage floors, named errors

vault-strategy: replace em-dashes in prose with regular dashes

escrow: stop the taker pocketing the maker's rent, add native cancel_offer, bind quasar accounts

escrow/native: untrack built program fixture; CI rebuilds it via cargo build-sbf

cnft-vault: enforce a withdraw authority, bounds-check proof lengths, real quasar tests

cutils, cnft-burn: remove banned handler-as-method pattern, dead state, runtime hashing

cutils: drop README references to the removed validate/actuate pattern

gitignore: keep escrow native's rebuilt fixture .so untracked

Cargo.lock: prune stale counter-mpl-stack and shank entries left from removed packages

wip: checkpoint of in-progress fix sweeps (signer checks, decimal scaling, ID alignment)

betting-market: close Bet accounts and free User index slots; wallets no longer brick at 32 lifetime bets

wip: checkpoint of in-progress rename and signer-check sweeps

shank-and-codama, close-account, transfer-sol, pyth: signer/owner checks, full-lamport closes, oracle validation

Commits on Jun 11, 2026

wip: checkpoint of in-progress rename and ID-alignment sweeps

transfer-sol/quasar: adopt anchor sibling's program ID; finish quasar AccountConstraints renames in counter, hello-solana, transfer-sol

wip: checkpoint of in-progress rename and ID-alignment sweeps

transfer-sol/anchor: rename TransferSolWithCpi to TransferSolWithCpiAccountConstraints

wip: checkpoint of in-progress rename and ID-alignment sweeps

wip: checkpoint of in-progress token-extensions rename sweep

token-extensions: finish AccountConstraints rename sweep across all 33 anchor and quasar variants

extension_nft, reference doc: final AccountConstraints straggler and em-dash sweep

apply cargo fmt and biome formatting