ArsenAPPLY

Next cohort Nov 23

Solana Audits Bootcamp

Learn to audit Solana programs the way private audits run: accounts, PDAs, CPIs and the bugs Anchor hides. Four weeks on real code, with a live call every week.

Join the program

How the 4 weeks run.

One CLMM codebase in Rust/Anchor. Alone first, then in a pair. A live call every Friday.

  1. Foundation.
    • How a Solana program holds state: accounts, PDAs, CPIs
    • Learn a CLMM: ticks, positions, liquidity, fees
    • Trace the money in a swap, step by step
  2. Solana & logic bugs.
    • Solana account bugs
    • Anchor bugs and how to spot them
    • Where logic bugs hide: rounding, fees, price math
  3. Live audit.
    • Map the codebase before you hunt
    • Walk a value backwards to where it is born
    • How to kill a lead
  4. Live pair audit.
    • Split the flows with a partner
    • Attack each other's leads
    • Hunt multi-step bugs
  5. My AI audit workflow.
    • How to build your AI audit workflow
    • When to use AI, and when to keep it out
    • Check every AI finding before you trust it

Every Friday: live call with me

  • One topic built from your week
  • Your questions answered
  • Q&A, recorded
Join the program

2x2 TEAM AUDIT

Hunt in a pair.

Audit firms work in teams. Nobody hunts alone there.

My first real wins came after I teamed up with a stronger auditor. I watched how he audited. He watched how I audited. Together we placed Top 10.

That's week 4.

  • Like a real audit.Two auditors, one codebase, one shared lead list. The way firms run private audits.
  • You split the flows.Then you swap and attack each other's leads. A lead that survives two people is worth writing up.
  • Answers from me.Send your pair's leads. I answer, and the common ones go on the call.

Live with me. Every week.

Reading alone is where most auditors get stuck. Here you get answers while you work.

  • A weekly group call.

    30–60 minutes. I build each call from your week: what you sent me and where you got stuck. Then Q&A.

  • Answers between calls.

    Send me your leads and questions in the group chat or in DM. I answer during the week.

  • My process, step by step.

    Slides from my real audits: where I look first, and why.

  • Every call recorded.

    Miss one? Watch it later. Come back to it before your next audit.

Join the program

Pick how you pay.

Next cohort starts Nov 23, 2026

Pay by card

$999one time

Checkout with Stripe. Your seat is booked right away.

Join the program

Pay in cryptoSAVE 5%

$949one time

DM me on Telegram. I send you the wallet and book your seat.

DM me on Telegram

Both get the full program: 4 Friday calls, the 2x2 pair audit, the Solana pack and every recording.

Who you become in 4 weeks.

You don’t read code randomly anymore.
You have a system to find your next $10K bug.

  1. 1You learn a new niche: CLMMs.
  2. 2You pick the most critical flow first.
  3. 3You read it the right way.
  4. 4You write down every observation.
  5. 5You validate your notes.
  6. 6You hunt multi-step bugs.
  7. 7You know how to audit in a pair.
Join the program

Why you shouldn't trust me.

You don't have to. Trust the people who ran the method.

Enzo@0xenzo_eth

Solana Auditor

My first paid Solana private audit.

A few days ago I got invited to a Solana engagement, and it was paid. I used your methodology and bagged a few findings 🔥

Dhanyosmi@thedhanyosmi

#1 on a CodeHawks contest

My first $2K contest win.

I just followed your methodology. I'm still learning standard DeFi protocols, and it was enough to take first place.

Ruben@RubenSousa007

Pentester, moving into Web3 audits

Six months of doubts, cleared.

I read everything for months and never connected it. His methodology connected the pieces. Sometimes all you need is one correct way to do the audit.

Kalyan@kalyan__tr

Guided audit, cohort 1

The best guided session.

I used to pick one or two flows and leave the rest to AI. This was an eye opener. Manual beats AI. The best place to see what it takes to get valids.

Victor@victorokpukpan_

Whitehat

I finally know how to read a big codebase.

Your approach made hard security concepts easy for me. It showed me how to read a huge codebase without getting lost.

Questions

EVM or Solana?

The method is chain agnostic. I run it on EVM, Rust, Move and TON the same way. This program runs on Solana code, because that's where I work every day.

I don't know Rust. Can I join?

If you read Solidity, yes. I was scared of Rust too. I learned it on the job, in my first Rust audit.

Won't AI do this?

I build AI audit pipelines full time. AI told me a codebase was clean. It wasn't. I use it after I own the flow. Never before.

Will you promise me a payout?

No. I don't control your contest, and anyone who promises you that is lying. I promise you a procedure.

How is this different from the guided audit?

The guided audit is one real codebase you run alone, at your own pace, and I review your work at the end. This program is 4 weeks with me: a live call every week, your questions answered, a partner for the team audit, and the Solana pack.