Rust Security Researcher & Solana Auditor
I’m Panther, an independent security researcher with Rust review experience across Solana and Stellar Soroban. My Rust portfolio covers competitive audits, private engagements, and bounty triage. I review how programs authorize actions and account for assets, alongside the runtime assumptions that make those actions possible.
Rust program security beyond memory safety
For Solana scopes, review follows account ownership, signer checks, PDA derivation, cross-program invocations, token behavior, and initialization or closure paths. Financial logic needs separate attention: pool accounting, share conversion, withdrawal permissions, and rounding can fail even when the program is memory safe. Soroban scopes require their own authorization and storage analysis; findings from one runtime cannot simply be carried over to another.
Relevant work and public evidence
My Tensor NFT AMM contest record includes third place with two High findings and one Medium. The Rust ledger also records Centrifuge contest work and other Solana engagements, with private delivery separated from contest results and triage. My Solana staking field guide explains how I approach gold-backed staking mechanics, reward accounting, and redemption risk.
- Rust and Solana portfolio, including Tensor
- Solana staking protocol audit field guide
- Private engagement ledger and disclosure limits
What should I send for a Rust or Solana security review?
Include the runtime, repository and commit, program IDs where available, account model, asset flows, privileged roles, dependencies, and target dates. Describe any custom token behavior or external program calls. This makes it possible to scope the review around the actual trust boundaries and financial exposure.
Work directly with an independent researcher
Send your ecosystem, repository or documentation, approximate scope, and target dates. I work directly with protocol teams and contribute to security-firm engagements. We agree on the scope, deliverables, and disclosure terms before review; private reports stay private unless publication is permitted.
Discuss your audit scope with Panther or inspect the complete portfolio.