Beacon · Security bulletin for validator operators

Know before you patch.

Vulnerabilities and security releases for everything a Solana validator runs on: the clients, the Rust crates inside them, Linux, Ubuntu, Debian and the tools around them. Read from public sources, ranked, and free to follow.

Reading the sky…

Loading the latest alerts.

Get the alertsSee the alerts
Versions

What to run today

The latest release of each client, next to the minimum Agave version the Solana Foundation's delegation program requires.

Alerts

Latest security alerts

Critical means a flaw is already being exploited. High means severe or likely to be exploited. Watch means worth planning for. Info is context.

Loading…

Follow

Get the alerts where you work

Choose what you run. You get a feed for exactly that, and soon the same choice by email.

How it works

Automatic, and honest about its limits

1. It reads public sourcesAnza, the Rust security database, Ubuntu, Debian, the US cyber agency's list of exploited flaws and a vulnerability database, several times a day.
2. It checks the real softwareBeacon reads the exact list of Rust crates inside the latest Agave and Jito releases and matches it against known advisories.
3. It ranks and publishesIt combines severity, whether the flaw is exploited, and how likely exploitation is. No person edits the alerts.
Beacon does not replace Anza's private alerts. Serious flaws in Agave, Jito and Firedancer are handled privately until a fix is out, and Anza warns validators through its own channel. Beacon only shows what is already public. Always confirm in the linked source before you act.

Sources

    Beacon is a community service by SoLyrae and is not an official Solana, Anza, Jito or Firedancer channel. Read the methodology and the legal notice.