Signed/unsigned arithmetic confusion

Evidence summary #

Rust 2021 edition enforces signed/unsigned type distinction at compile time — implicit sign-confusion casts that are common in Solidity are compile-time errors in Rust. This provides structural mitigation. EVM symbolic execution tools (Manticore) cannot be applied to Solana BPF. Gray on tool requirement; structural mitigation from Rust type system noted.

Sources #

Methodology #

Determine whether signed-integer conversions or comparisons where unsigned was intended exist in the deployed bytecode/source.

See the full factor methodology and distribution across all protocols →