Bump Seed Canonicalization

Back to course Share on twitter

Previous Lesson Next Lesson

Objectives

By the end of this lesson, you'll be able to:

Explain the vulnerabilities associated with using PDAs derived without the canonical bump
Initialize a PDA using Anchor’s `seeds` and `bump` constraints to automatically use the canonical bump
Use Anchor's `seeds` and `bump` constraints to ensure the canonical bump is always used in future instructions when deriving a PDA

Progress

How to approach the Program Security unit

Signer authorization

Lab: Check signers are correct before processing transactions

Owner checks

Lab: Check owners are correct before processing transactions

Account data matching

Lab: Check account data is correct before processing transactions

Reinitialization attacks

Lab: Ensure accounts can only be initialised once to prevent overriding existing data

Duplicate mutable accounts

Lab: Ensure accounts are distinct

Type cosplay

Lab: Implement checks for correct account types

Arbitrary CPIs

Lab: Ensure CPIs are only called by the correct program

Bump seed canonicalization

Lab: Ensure bump seeds are always canonical

Closing accounts and revival attacks

Lab: Ensure accounts that are closed can't be reused

PDA sharing

Lab: Ensure PDA design avoids shared accounts