SolRaceFuzz: Concurrency Defects Detection in Solana On-chain Programs
Author:
Affiliation:

Clc Number:

Fund Project:

  • Article
  • |
  • Figures
  • |
  • Metrics
  • |
  • Reference
  • |
  • Related
  • |
  • Cited by
  • |
  • Materials
  • |
  • Comments
    Abstract:

    With the rapid adoption of the Solana blockchain, prior research has examined its security vulnerabilities, ecosystem, and commercial applications. However, concurrency defects in Solana on-chain programs have not received sufficient attention. This study identifies two special types of concurrency defects in Solana on-chain programs: transaction-order dependency defects and clock-control dependency defects. These defects allow malicious nodes in the blockchain network to legitimately reorder concurrent transactions or delay specific transactions until a specific time, thus affecting the execution outcomes of these concurrent transactions. As a result, concurrent transactions in Solana on-chain programs containing these defects may be vulnerable to adversarial control. To address this problem, this study defines transaction-order dependency defects and clock-control dependency defects in Solana on-chain programs and proposes a detection method based on fuzz testing and symbolic execution. The method includes detection criteria for both defect types, as well as a ledger simulation method and a transaction generation method tailored to the characteristics of the Solana blockchain. Based on this method, a prototype tool, SolRaceFuzz, is implemented, and experiments are conducted on three datasets to evaluate defect discovery capability, efficiency, and exploration strategy, verifying the effectiveness of the proposed method.

    Reference
    Related
    Cited by
Get Citation

高旭,马辰阳,叶盛,李晅松,宋巍. SolRaceFuzz: Solana链上程序并发缺陷检测.软件学报,,():1-24

Copy
Share
Article Metrics
  • Abstract:
  • PDF:
  • HTML:
  • Cited by:
History
  • Received:September 03,2025
  • Revised:February 07,2026
  • Adopted:
  • Online: July 01,2026
  • Published:
You are the firstVisitors
Copyright: Institute of Software, Chinese Academy of Sciences Beijing ICP No. 05046678-4
Address:4# South Fourth Street, Zhong Guan Cun, Beijing 100190,Postal Code:100190
Phone:010-62562563 Fax:010-62562533 Email:jos@iscas.ac.cn
Technical Support:Beijing Qinyun Technology Development Co., Ltd.

Beijing Public Network Security No. 11040202500063