1 stable release
1.0.0 | Dec 2, 2021 |
---|
#83 in #developer
24 downloads per month
26KB
90 lines
SolTrack
A tool to find the developer of a Solana program.
Background
At the fundamental level, Solana programs are just variantion of eEBPF programs which are compiled from the Rust compiler. By default, the programs contain paths which also contains username of the machine you used to compile it. There were efforts like this pre-RFC to remove the username by default, but it is not implemented at the moment. The following is an example that the home directory and username are leaked in a compiled program.
$ strings your-compiled-program.so
# ...
# /<your-home-directory>/<your-username>/.cargo/registry/src/github.com-1ecc6299db9ec823/solana-program-1.7.11/src/account_info.rs
# ...
If you follow official documentations on Solana or a framework like Anchor for building programs, chances are your identity is leaked in the programs.
This is a well known issue for several years and it is actually fine as long as you have no reason to hide your identity. However, in case you want to stay anonymous, with the fact that your programs contain your username and Solana programs are publicly accessible by anyone on the internet, your programs might leak your identity if your username can be used to identify you (which in most cases it could).
In the meantime, to strip a username in programs, we can use --remap-path-prefix
flag to map the default path prefix to something else.
For example, we can add the flag like the following.
RUSTFLAGS=--remap-path-prefix=/<your-home-directory>/<my-username>=src cargo build-bpf
Or if you use Anchor framework.
RUSTFLAGS=--remap-path-prefix=/<your-home-directory>/<my-username>=src anchor build
Alternatively, you can consider to build your program with a separated CI/CD machine (i.e., Github Actions which also supports private repo, etc.).
Install
cargo install soltrack
Build from source
cargo build
The compiled binary will be at ./target/debug/soltrack
.
$ ./target/debug/soltrack -h
# SolTrack 1.0
# Wasin Sae-ngow <https://github.com/chrsow>
# Track potential developer of a Solana program
# USAGE:
# soltrack [OPTIONS] <PROGRAM_ID>
# ...
Usage
soltrack <PROGRAM_ID> --network <NETWORK>
For example, if you want to find who is the developer of the native Memo program in the Solana devnet. You can run the following command.
$ soltrack MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr --network devnet
# [+] The program MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr on mainnet is deployed by: tyeraeulberg
As you can see, we have obtained the developer of the Memo program is "tyeraeulberg" who is one of the engineers of Solana.
Dependencies
~74MB
~1.5M SLoC