Awesome Solana: curated lists that actually help — security map and the rest of the shelf

Awesome Solana: curated lists that actually help — starting with Accretion’s awesome-solana-security, then the rest of the shelf builders keep open in a second tab.

Example list: github.com/accretion-xyz/awesome-solana-security. Accretion: accretion.xyz. X: @accretionxyz. Format origin: awesome.re.

Click to zoom

What an “awesome” list is (and is not)

An awesome list is a community-maintained, often opinionated index of links — courses, tools, papers, postmortems — usually under a single GitHub README with the Awesome badge. It is a map, not a standards body.

• Is: a fast way to find primary sources and known-good starting points for a domain.
• Is not: an endorsement, a security guarantee, or a substitute for reading the actual docs and code.
• Quality signals: clear scope, start-here path, link checks CI, CONTRIBUTING rules, honest “commercial” labels, preference for primary sources over SEO blogs.

Lead example: Awesome Solana Security (Accretion)

accretion-xyz/awesome-solana-security describes itself as an opinionated map for building, reviewing, breaking, and defending Solana systems. It favors primary sources, reproducible research, public reports, and tools useful in real review work — and it says inclusion is not endorsement.

Responsible-use banner is upfront: only test what you own or have permission to assess; respect bounty/CTF scope.

Start-here path (their order)

1. Solana Program Security Course — concepts first; verify APIs against current docs (course archived).
2. Hitchhiker’s Guide (Helius)
3. 100 Solana Tips (Accretion)
4. Sealevel Attacks
5. Solana Common Attack Vectors (Ackee)
6. Verified Builds
7. security.txt

How the rest of the list is organized

Awesome Solana Security (map)
├── Secure program development
│   accounts / PDA / CPI / Token-2022 / arithmetic / deploy+upgrade
├── Security tools
│   AI review · static/formal · fuzz/sim · RE · Rust hygiene
├── CTFs, workshops, vulnerable programs
├── Research papers & ecosystem studies
├── Security blogs & research teams
├── Hacks, postmortems, disclosures
├── Public audit reports
├── Operational security & IR
├── Bug bounties & audit competitions
└── Related / historical lists

That structure matches how reviews actually run: threat model and account checks first, tools second, historical failures third, ops last. Tooling section is explicit that scanners accelerate review — they do not prove safety.

How to use any awesome list as a builder

1. Pick the domain list — security vs AI vs NFT vs OSS — don’t mash them.
2. Read the start-here / TOC before deep-linking random tools.
3. Prefer primary sources (docs, repos, reports) over summary threads.
4. Pin commits when you install agent skills or CLI scanners from a list.
5. Check CI badges (broken-link bots) — dead links are the main failure mode of awesome repos.
6. Mark commercial vs open in your own notes; lists sometimes mix both.

The broader Solana awesome shelf

Accretion’s security list is new and focused. These are the other high-signal shelves that show up constantly in Solana DevRel work (stars as of research time — check live):

For security work, start with Accretion + 0xMacro and cross-check; for product discovery, Helius / Foundation AI / Blinks lists; for agents, MCP + AI awesomes.

When to contribute (or fork)

• Dead link with a known replacement
• Primary source missing (official doc, not a blog remix)
• New public audit report or postmortem with real technical content
• Tool became commercial or deprecated — update the label, don’t ghost it

Fork when you need a private team checklist (e.g. internal review gate). Keep the public PR path for things that help the whole ecosystem.

DevRels angle

Awesome lists are DevRel infrastructure: onboarding maps, workshop handouts, “where do I start with X?” answers. Better to link a maintained list + a 5-item start path than paste 40 URLs into a Discord reply. When you publish a deep dive on DevRels, ask whether it belongs on the relevant awesome shelf — and whether your article points back to primary sources the list already tracks.

Resources

• accretion-xyz/awesome-solana-security
• 100 Solana Tips
• 0xMacro security awesome
• helius-labs/solana-awesome
• awesome-solana-ai
• awesome.re
• Range (risk/compliance) · Accretion on DevRels

Bottom line

Treat Awesome lists as living maps with maintainers and opinions. Accretion’s Solana security list is a strong modern entry point: start-here path, tool caveats, CTFs, audits, ops. Keep the rest of the shelf for AI, NFTs, OSS, and Blinks. Always click through to primary sources — the list is the index, not the lesson.