PantsirПанцирь
Preparing access
Checking your lab membership...
Created 10 Feb 2026Updated 10 Feb 2026
Solana Vault Escrow (Broken Access Control)
A Solana Anchor escrow vault instruction allows unauthorized emergency withdrawals due to a missing authority match check.
rust340 pts40 min

Overview

This lab contains a Solana program (Anchor, Rust) used as a project escrow vault.

What the program does:

  • Initializes a PDA vault for a project authority.
  • Accepts SOL deposits into the vault.
  • Supports an emergency SOL withdrawal path.

The intended rule is simple: only the vault authority should be able to execute emergency withdrawals.

Your task: review the contract files, identify the exact line that breaks this authorization rule, and explain how to fix it.

Content locked
Join this lab to access the content.
Cargo.tomlplaintext