惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

IT之家
IT之家
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
A
About on SuperTechFans
博客园 - 聂微东
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
B
Blog RSS Feed
U
Unit 42
Stack Overflow Blog
Stack Overflow Blog
Recent Announcements
Recent Announcements
雷峰网
雷峰网
罗磊的独立博客
Microsoft Security Blog
Microsoft Security Blog
Hugging Face - Blog
Hugging Face - Blog
L
LangChain Blog
人人都是产品经理
人人都是产品经理
The GitHub Blog
The GitHub Blog
F
Fortinet All Blogs
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
H
Help Net Security
P
Proofpoint News Feed
The Cloudflare Blog
D
Docker
大猫的无限游戏
大猫的无限游戏

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant
Auditing a Real Solana Transaction: Creating a USDC Accou...
Erick Carvajal · 2026-06-03 · via DEV Community
Cover image for Auditing a Real Solana Transaction: Creating a USDC Account on Devnet

Erick Carvajal

Today I decided to go one step deeper into Solana by not just reading transactions, but actually auditing one I created myself using Solana Explorer.

To generate the transaction, I created an Associated Token Account (ATA) for USDC on devnet using the SPL Token CLI:

spl-token create-account 4zMMC9srt5Ri5X14GAgXhaHii3GnPAEERYPJgZJDncDU

Enter fullscreen mode Exit fullscreen mode

ATA

Transaction Details: https://explorer.solana.com/tx/2Xa2DAWDooLy99p1ch4dFpVdEKZWCegxahQj1xLRiFvy4oo8FsW1CumPmH558UgmnwWNSKk7Gw3QQzFQDiMzdnN1?cluster=devnet

This triggered a transaction that looked simple at first glance, but once inspected in Solana Explorer, it revealed how many moving parts are involved just to initialize a token account.

🧠 What I was looking at

The transaction created an Associated Token Account for the USDC mint on devnet:

4zMMC9srt5Ri5X14GAgXhaHii3GnPAEERYPJgZJDncDU

Enter fullscreen mode Exit fullscreen mode

This account is where USDC would be stored for my wallet.

But what stood out is that this is not a single operation. It is a coordinated execution across multiple programs:

  • Associated Token Program (creates the ATA)
  • System Program (allocates space + funds rent)
  • Token Program (initializes account state)
  • Compute Budget Program (controls execution limits)

⚙️ What happens under the hood

To create a simple token account, Solana must:

  • Derive the Associated Token Address (ATA)
  • Allocate 165 bytes of account storage
  • Fund the account with ~0.002 SOL for rent exemption
  • Assign ownership to the Token Program
  • Initialize the account for the USDC mint

All of this happens atomically — either everything succeeds or nothing does.

🔗 What I learned

The most interesting realization is how explicit everything is in Solana.

Even something as simple as “having a USDC account” requires:

  • A program to create it
  • A system-level allocation of space
  • A rent-exempt balance
  • A deterministic address derived from wallet + mint

Nothing is hidden. Everything is visible in the Explorer.

🧩 Final thought

This exercise helped me understand something fundamental:

On Solana, state is not assumed — it is constructed step by step through programs and accounts.

And tools like Solana Explorer make that entire process transparent and auditable in real time.

Solana explorer