What's new

With the last Token-2022 audit complete, the program is ready to enter its first major version with v1.0.0!

Audits

All audits are hosted at https://github.com/solana-labs/security-audits#token-2022.

Verification

This build provided on the release uses solana-verifiable-build.

You can verify it by checking out the repo at commit 15ebdb6440a4585a908ee3d91429561d64afebf6 and running:

$ solana-verify build --library-name spl_token_2022 -- --no-default-features

The --no-default-features flag ensures that the unsupported zero-knowledge proof functionality and the unaudited token-group functionality is omitted. Once the program is built, it's possible to verify it by running:

$ solana-verify get-executable-hash target/deploy/spl_token_2022.so
d941635f5df9dcb42e2fd7f25149051048dd27d02c7cb8dbb7a9e39933722fd3

Summary of changes

• Added GroupPointer extension (#5621)
• Added GroupMemberPointer extension (#5628)
• Implemented spl-token-group interface (#5672) (#5626) (#5627) (#5629) (#5601)

Various fixes

• Add security.txt (#5928)
• Fix build with zk-ops disabled (#5372)
• Add serialisation option for the extensions (#5437)
• Use serde with rename_all = "camelCase" (#5624)
• [OS-SPL-ADV-02] Fix instruction creator (#5900)
• [OS-SPL-ADV-03] Check account mint in approve (#5901)
• [OS-SPL-ADV-00] Enable and fix account ordering on confidential transfer with split proofs (#5931)

Miscellaneous Tasks

• Bump repo to Solana 1.17 (#5575) and 1.17.6 (#5863)