Research
Phase 0 — Seed (Day 1 → Day 3,
Phase 1 — Hackathon week (Day 4 → Day 15,
Phase 2 — Colosseum push + T22 (Day 16 → Day 17,
Phase 3 — Audit-firm gap closure + cross-program substrate (Day 19 → Day 23,
Methodology2026-05-18
SPECTRE-Solana Timeline (Day 1 → Day 26)
Author: spectre-solana-max engineering
Date: 2026-05-18
Scope: Iteration timeline of every SPECTRE-Solana branch since
day zero, including unmerged ones, day-numbered against the
2026-04-23 anchor.
Method: git log --all across feat/spectre-solana,
feat/spectre-solana-v2, feat/spectre-solana-website-rework,
feat/solana-work, feat/spectre-prod-readiness, and
feat/spectre-solana-max (HEAD).
Day 1 anchor: 2026-04-23 (first wip solana feature map commit)
Today: 2026-05-18 (Day 26)
Iteration arc by branch
| Branch | First → Tip | Ahead of main |
Status |
|---|---|---|---|
feat/spectre-solana |
Day 1 → Day 3 (04-25) | 11 commits | seed branch, parked |
feat/spectre-solana-v2 |
Day 1 → Day 17 (05-09) | 236 commits | hackathon + Colosseum scope, parked |
feat/spectre-solana-website-rework |
Day 1 → Day 15 (05-07) | 159 commits | website rebrand cut, parked |
feat/solana-work |
Day 1 → Day 19 (05-11) | 256 commits | T22 detectors + Colosseum polish, parked |
feat/spectre-prod-readiness |
Day 1 → Day 17 (05-09) | 183 commits | prod-readiness cut, parked |
feat/spectre-solana-max (HEAD) |
Day 1 → Day 26 (05-18) | 371 commits | active, all detector work since Day 19 |
Phase-by-phase (chronological)
Phase 0 — Seed (Day 1 → Day 3, feat/spectre-solana)
| Day | Date | Milestone |
|---|---|---|
| 1 | 2026-04-23 | wip solana feature map (first commit) |
| 3 | 2026-04-25 | graph ontology: Exposes edge + Function vertex |
| 3 | 2026-04-25 | epic 29 complete |
Phase 1 — Hackathon week (Day 4 → Day 15, feat/spectre-solana-v2)
| Day | Date | Milestone |
|---|---|---|
| 4 | 2026-04-26 | solana audit-corpus benchmark v1 (first bench) |
| 4 | 2026-04-26 | bench v2 (18/20 fixtures materialized) |
| 8 | 2026-04-30 | 3 architectural rules + corpus expansion (first rule pack) |
| 8 | 2026-04-30 | GOV-001 + ORC-002 corpus coverage via Drift v2 |
| 8 | 2026-04-30 | scorecard at TP>=1 across 6 architectural rules |
| 8 | 2026-04-30 | precision tuning: architectural rules alpha-ready |
| 8 | 2026-04-30 | admin-vs-user signer disambiguator (GOV-001 F1=0.987, AUTH-100 F1=1.000) |
| 10 | 2026-05-02 | --strict / --include-experimental + ACC-010/013 rewrite |
| 10 | 2026-05-02 | native Solana extractor + GOV-001/AUTH-100 dual-path |
| 10 | 2026-05-02 | GOV-002 Drift-Lint + TOK-002 Token-Ception (marketing keystones) |
| 10 | 2026-05-02 | 28-entry corpus + governance scan harness + BENCH.md |
| 10 | 2026-05-02 | cross-program CPI graph extraction (--emit-cpi-graph) |
| 10 | 2026-05-02 | /dashboard route with anonymized governance scan stats |
| 12 | 2026-05-04 | SPECTRE Scan is getting solid af |
| 15 | 2026-05-07 | Epic Complete: spectre-solana-hackathon-week |
| 15 | 2026-05-07 | linker-solana crate + spectre link CLI verb |
| 15 | 2026-05-07 | cross-language edges from TS clients to Anchor instructions |
| 15 | 2026-05-07 | cross-program rule registry + reporter + customer registry |
| 15 | 2026-05-07 | Kamino klend audit, vouch audit, cnft-betting re-audit |
| 15 | 2026-05-07 | SPECTRE vs published audit firms comparison + gap analysis |
| 15 | 2026-05-07 | 50-protocol Solana hackathon submission scan |
| 15 | 2026-05-07 | consolidated SPECTRE Solana Ecosystem Security Report v1.0 |
Phase 2 — Colosseum push + T22 (Day 16 → Day 17, feat/solana-work)
| Day | Date | Milestone |
|---|---|---|
| 16 | 2026-05-08 | field-mutation index + pattern-to-incident database |
| 16 | 2026-05-08 | incident-db enrichment + diff-aware scan mode |
| 16 | 2026-05-08 | corpus scan harness + 45-protocol pass |
| 16 | 2026-05-08 | expand corpus to 55 protocols (Tensor into top 10) |
| 16 | 2026-05-08 | website: solana-inspired rebrand |
| 17 | 2026-05-09 | TOK-024 NonTransferable vault detector |
| 17 | 2026-05-09 | TOK-025 Pausable vault |
| 17 | 2026-05-09 | TOK-027 MintCloseAuthority + ExtensionKind expansion |
| 17 | 2026-05-09 | TOK-029 TransferFee withdraw-withheld absence |
| 17 | 2026-05-09 | TOK-026 DefaultAccountState + TOK-028 IBC/SUA pricing |
| 17 | 2026-05-09 | proactive (latent) passes on TOK-024/025/027 (41 latent T22 fires per rule) |
| 17 | 2026-05-09 | prod-readiness corpus scan: Drift / Raydium / OpenBook / Mango v4 |
| 17 | 2026-05-09 | website pre-Colosseum polish + content-correctness pass |
Phase 3 — Audit-firm gap closure + cross-program substrate (Day 19 → Day 23, feat/spectre-solana-max)
| Day | Date | Milestone |
|---|---|---|
| 19 | 2026-05-11 | close audit-firm finding gap + deepen cross-program linker substrate |
| 19 | 2026-05-11 | INV-001 + ACC-030 precision tuning (744 FPs → 174, -77%) |
| 19 | 2026-05-11 | close engine-integration gap (Anchor-workspace fixture wrap) |
| 19 | 2026-05-11 | promote INV-001 to balanced + ACC-030 matcher recall fix |
| 19 | 2026-05-11 | ACC-030 P5 series (174 FPs → 70, -60%) |
| 20 | 2026-05-12 | ship INV-004 config-mutation invariant coupling detector |
| 20 | 2026-05-12 | ship RACE-001 stale-account-after-CPI detector |
| 20 | 2026-05-12 | ship RACE-002 cross-handler TOCTOU on order/position state |
| 20 | 2026-05-12 | ship RACE-003 asymmetric create/cleanup permission DoS + customer scorecard |
| 20 | 2026-05-12 | ship ARI-050 unchecked-arithmetic-on-balance-write |
| 20 | 2026-05-12 | ship RACE-004 + STATE-001 + full corpus audit refresh |
| 21 | 2026-05-13 | sort helper-fn BFS frontier + per-body callees |
| 21 | 2026-05-13 | ship CROSS-004 account-binding drift across CPI |
| 23 | 2026-05-15 | ship CROSS-002 missing program-id verification on financial-class CPI |
| 23 | 2026-05-15 | ship CROSS-005 signer-privilege forwarding across handlers |
| 23 | 2026-05-15 | ship CROSS-010 + CROSS-020 (closes MHE rule pack) |
| 23 | 2026-05-15 | add historical-incident replay benchmark (first incident corpus) |
| 23 | 2026-05-15 | backfill: UXD, Metaplex Auction House, Candy Machine v1 + v2 |
| 23 | 2026-05-15 | backfill: SPL Token Lending rounding (Neodyme), Cypher v3 |
| 23 | 2026-05-15 | replay topline: 19/28 exact rule-level |
Phase 4 — Replay benchmark closure to 100% (Day 24 → Day 25)
| Day | Date | Milestone |
|---|---|---|
| 24 | 2026-05-16 | substrate: cross-program linker third-tier resolver + single-program pass |
| 24 | 2026-05-16 | ship ITER-001 (Jet $25M class) → 20/28 exact, 27/28 class |
| 24 | 2026-05-16 | competitor gap analysis: Sec3 / L3X / Certora / OtterSec / Hexagate |
| 24 | 2026-05-16 | ship CROSS-007 (delegate-risk) + Tier-3 integration design docs |
| 24 | 2026-05-16 | ship ACC-014 (unchecked sysvar consumption, Wormhole class) |
| 24 | 2026-05-16 | replay scorer fix + Raydium AMM v4 architectural reference backfill |
| 25 | 2026-05-17 | ship ACC-015 (untied typed Anchor sub-field read, Cashio class) |
| 25 | 2026-05-17 | docs: refresh for 100% replay benchmark closure (24/24 exact + 24/24 class) |
| 25 | 2026-05-17 | fresh competitor gap analysis (post-replay-closure) |
| 25 | 2026-05-17 | docs: correct gap analysis (SPECTRE has AI augmentation agent chain) |
| 25 | 2026-05-17 | ship monitor-export subcommand (Hexagate Gatelang + JSON exporter) |
| 25 | 2026-05-17 | ship certora-skeleton subcommand (Certora CVL harness generator) |
| 25 | 2026-05-17 | ship fuzz-target subcommand (cargo-fuzz scaffold) |
| 25 | 2026-05-17 | ship ORC-003 (stale Pyth/Switchboard oracle read) |
| 25 | 2026-05-17 | ship CLOSE-090 (manual account-close without data zero, Bonfida class) |
Phase 5 — Mined detectors via parallel sub-agents (Day 26)
| Day | Date | Milestone |
|---|---|---|
| 26 | 2026-05-18 | ship 5 mined detectors: ARI-060, STATE-020, GOV-003, TOK-040, PKT-003 |
Velocity snapshot
| Metric | Value |
|---|---|
| Days elapsed (Day 1 → Day 26) | 26 calendar days |
Commits on the live branch (-max) since main |
371 |
| Detectors shipped (counting unique rule IDs) | ~50+ across ACC / AUTH / GOV / TOK / ITER / CROSS / RACE / INV / ARI / MINT / NONCE / PDA / STATE / ORC / CLOSE / META / EVT / CONFIG / PKT / LIAB / CPI |
| Cross-program rules (CROSS-*) | 8 (001, 002, 003, 004, 005, 007, 010, 020) |
| Historical-incident replay benchmark | 0 → 24/24 exact + 24/24 class in 11 days (Day 15 → Day 25) |
| Tier-3 integration PoCs (Hexagate, Certora, cargo-fuzz) | 3 shipped in a single day (Day 25) |
| Corpus growth | 20 fixtures (Day 4) → 55 protocols (Day 16) + 24 historical-incident corpora (Day 23-25) |
| FP-reduction passes (largest) | INV-001 + ACC-030: 744 → 70 FPs (-91%) over Day 19 alone |
Trajectory in one paragraph
Roughly two weeks to hit "hackathon submission" with a bench plus six architectural rules, one more week to add Token-2022 coverage and a website overhaul and grow the corpus to 55 protocols, then one week to close the audit-firm gap with race-condition and cross-program detectors, then three days to close the historical-incident replay benchmark to 100% and ship the Tier-3 integration PoCs. Detector velocity climbed from roughly three rules per week early on to five rules in a single day by Day 26.